Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JdPxrL_4Kojg3ya33fhZiy5hfI8.roa
File: JdPxrL_4Kojg3ya33fhZiy5hfI8.roa (raw, json)
Hash identifier: bytfgd9RdyLAeapuGsWqYYIxBK1JK8MA+gH/evVsO40=
Subject key identifier: 25:D3:F1:AC:BF:F8:2A:88:E0:DF:26:B7:DD:F8:59:8B:2E:61:7C:8F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A3336FA88E83276A8892A8698F1447FE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JdPxrL_4Kojg3ya33fhZiy5hfI8.roa
Signing time: Fri 30 Aug 2024 12:12:22 +0000
ROA not before: Fri 30 Aug 2024 12:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:33:6f:a8:8e:83:27:6a:88:92:a8:69:8f:14:47:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 30 12:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d3f1acbff82a88e0df26b7ddf8598b2e617c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:26:62:f8:b2:69:55:d6:80:64:d5:83:f1:
0e:4c:95:bf:dc:27:aa:6c:15:2b:3e:32:f6:8a:62:
2f:e3:f3:03:f7:4f:bc:1f:44:ba:d7:2f:c7:ca:59:
06:0e:2a:9c:21:50:a6:c2:28:7b:72:9a:c0:c1:07:
04:09:b1:cf:54:fa:c2:4f:30:b4:f4:c3:41:6e:79:
49:f0:4b:b4:5d:68:fa:8d:8e:28:68:df:90:d7:3b:
a2:bd:f4:93:09:6d:52:77:c0:3b:54:39:ba:aa:6a:
8e:c4:7e:65:8e:04:e7:44:08:53:d4:21:d1:41:9e:
b5:f6:a3:7a:61:06:8d:24:4e:42:ab:0a:66:52:33:
f3:de:c2:0d:62:77:53:29:2b:a1:e1:f8:50:17:49:
bc:22:e6:52:32:dc:ed:6d:20:e0:08:f2:ca:b2:69:
4f:41:a8:2a:21:a5:94:9d:c6:65:7c:7d:0e:9c:d1:
81:06:b8:3f:96:35:2a:c5:8f:4a:c5:c6:3f:e0:be:
e5:0c:cb:5c:1f:9f:fe:e1:00:a5:88:6a:ca:be:87:
96:41:38:01:0e:8d:cb:50:f0:79:6d:0b:1a:b0:07:
e5:8c:67:2d:3e:cf:f2:53:4d:de:bf:ad:06:b2:3b:
9c:92:a3:55:96:14:a0:b0:87:92:d0:b5:8a:93:02:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D3:F1:AC:BF:F8:2A:88:E0:DF:26:B7:DD:F8:59:8B:2E:61:7C:8F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JdPxrL_4Kojg3ya33fhZiy5hfI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
03:0b:0a:a4:80:2f:b2:92:5d:4c:99:28:53:6a:75:b0:92:19:
04:8c:b5:87:37:a7:1e:52:6b:63:68:e4:22:f0:18:83:15:6b:
ab:8c:ef:f6:98:dd:50:02:b5:51:09:a4:92:8c:5e:64:28:f1:
c7:cb:9b:f5:e4:b4:34:d5:d6:9c:af:a0:9a:d2:04:50:fa:f9:
ba:4b:3f:41:38:b9:19:78:82:93:de:12:39:60:0f:4b:01:15:
23:26:16:11:5c:29:6b:73:3b:00:d4:87:f5:59:6a:24:be:69:
d3:3f:bf:43:78:8f:73:9a:23:1d:84:0c:51:b9:8f:a9:bb:f9:
cd:cc:2a:16:1e:0b:a0:e0:8c:ca:0a:4a:0d:a7:4a:85:3d:7c:
cb:be:37:aa:e7:d4:e1:f6:4d:48:3b:12:3b:fa:41:be:bb:46:
32:14:2e:2b:b1:57:84:2c:48:78:1c:72:33:8d:13:5d:a3:df:
cb:ec:e7:84:b4:8e:e0:5d:d5:10:6a:88:b9:d6:84:e6:09:87:
6e:3c:2f:0f:2e:a0:4d:09:ee:5c:c9:fc:80:64:ea:fa:0b:35:
79:77:f4:bb:47:59:74:ad:de:e7:b3:93:30:cc:3c:c2:21:c3:
05:d7:b5:fb:ff:66:cc:a6:f7:2a:5c:1b:43:4b:bd:1c:e0:e3:
16:6f:bf:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:58:53 2025 by rpki-client