Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JbspffK78qIOxUPA-rOfdZAf0GU.roa
File: JbspffK78qIOxUPA-rOfdZAf0GU.roa (raw, json)
Hash identifier: KUVuOVFcQc/d6OIywgQLvcdSyJup47mEqjzKs6yZEFA=
Subject key identifier: 25:BB:29:7D:F2:BB:F2:A2:0E:C5:43:C0:FA:B3:9F:75:90:1F:D0:65
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019320B14A37728735588055D242DA84EF39
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JbspffK78qIOxUPA-rOfdZAf0GU.roa
Signing time: Tue 12 Nov 2024 14:05:09 +0000
ROA not before: Tue 12 Nov 2024 14:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:20b0:9683/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:b1:4a:37:72:87:35:58:80:55:d2:42:da:84:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 12 14:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25bb297df2bbf2a20ec543c0fab39f75901fd065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:6b:0b:53:24:bf:41:e5:6d:ca:72:f4:c3:
b8:7f:7f:a0:08:17:d6:81:24:aa:1d:f6:a7:b3:3c:
29:17:d6:8e:7b:db:27:11:4e:31:ad:ad:61:2a:7b:
02:18:a3:d4:51:4b:31:52:62:fa:aa:5a:af:8d:a3:
fc:b6:ba:d2:55:ec:77:e9:7e:46:4b:bd:34:44:70:
ff:75:63:e9:b9:cf:b9:08:6c:1d:02:75:41:5c:fb:
ff:21:6b:f6:ab:aa:81:63:c4:3e:fb:2d:cb:0b:bc:
53:d8:28:42:0a:81:45:99:48:a4:8e:0c:dc:a6:0f:
08:0d:92:52:34:10:68:16:ab:52:1d:fc:5e:ce:1b:
d8:2d:2d:b6:34:22:a3:80:fd:da:fd:b2:42:b5:aa:
68:b3:7f:1a:ff:03:cd:6b:54:0f:12:2e:22:79:a3:
37:82:d5:52:42:55:5f:a7:4b:8a:52:f3:29:79:68:
c5:da:33:30:43:07:70:a6:d6:a5:1f:0d:7d:af:15:
8b:da:7c:ed:2e:f6:11:b1:f3:17:4e:10:c8:b4:47:
67:55:38:83:ef:e1:f1:1e:bd:ef:71:b7:b6:f3:ad:
2a:ad:c2:40:41:00:b1:1d:25:b0:bb:6b:7b:09:31:
3b:e0:f4:00:ad:9d:96:78:9f:3a:93:70:bc:a1:b2:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:29:7D:F2:BB:F2:A2:0E:C5:43:C0:FA:B3:9F:75:90:1F:D0:65
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JbspffK78qIOxUPA-rOfdZAf0GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:20b0:9683/128
Signature Algorithm: sha256WithRSAEncryption
61:4b:5c:36:cd:44:98:85:47:47:10:d5:7f:b9:73:ee:86:f0:
b8:3e:09:53:53:cc:ba:4c:81:0e:e7:10:00:13:f0:3e:51:c8:
41:44:d8:61:4c:99:81:61:bb:15:c9:3f:37:2f:f8:5e:b2:65:
26:d7:12:0e:e5:1d:78:39:56:de:fe:9a:b2:91:ab:65:4c:d1:
79:16:8b:14:50:98:ec:11:ca:64:da:76:ee:3f:4a:9f:2b:f3:
33:bc:bc:52:38:2b:44:41:b3:df:7a:5e:69:96:a7:d2:f7:a3:
85:a2:2f:ec:95:dd:4e:b1:5e:9e:9a:3a:79:ad:b8:c5:0f:f7:
98:48:39:1d:45:06:de:c3:74:5f:79:9d:da:c6:b1:68:4c:41:
f8:fd:5d:63:91:95:47:f5:ae:8b:d7:22:c1:ca:c3:28:85:9a:
e1:9f:ef:3f:44:04:fd:3b:dd:82:3e:d5:05:e2:75:a0:63:39:
25:d2:51:44:2a:39:b7:44:ac:f8:50:0c:dd:0f:d8:85:16:20:
7e:72:34:a9:92:d1:be:f0:1e:32:7a:8b:0e:75:32:63:4e:87:
7d:ac:30:94:d9:bd:a4:92:df:20:19:39:cc:31:67:ab:92:b3:
c7:9f:d0:21:b2:26:b8:79:34:2b:d1:86:ca:fe:be:7e:c9:76:
58:0f:1e:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:35 2025 by rpki-client