Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jqm76sCraJoEHbf-6DamZSREcfU.roa
File: Jqm76sCraJoEHbf-6DamZSREcfU.roa (raw, json)
Hash identifier: me4qAAocM3UKPxb0LdPNvxTqP1p29RqzUidTG9YfvaA=
Subject key identifier: 26:A9:BB:EA:C0:AB:68:9A:04:1D:B7:FE:E8:36:A6:65:24:44:71:F5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01922310063DAD5B71EB14C208F817D82032
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jqm76sCraJoEHbf-6DamZSREcfU.roa
Signing time: Tue 24 Sep 2024 08:05:05 +0000
ROA not before: Tue 24 Sep 2024 08:05:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:230f:3649/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:10:06:3d:ad:5b:71:eb:14:c2:08:f8:17:d8:20:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 24 08:05:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a9bbeac0ab689a041db7fee836a665244471f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:24:ad:69:66:48:9f:d1:44:2d:89:27:3f:
4e:48:b6:2c:7e:df:dc:c5:0b:b6:6d:8c:d6:43:60:
fd:ae:45:0a:95:18:3c:21:4e:f4:36:6c:f1:ac:5e:
00:22:7d:b2:9b:2c:af:e1:59:df:fa:c1:c9:77:36:
ca:05:9e:4c:aa:c1:54:f1:d2:f8:4e:35:ef:6f:37:
16:01:b7:b3:44:69:5a:eb:8f:16:f2:40:0d:b9:35:
e0:2d:88:fe:fa:38:ff:75:80:93:6e:a1:8d:da:f9:
49:8b:98:0c:3c:24:51:51:cb:9a:fa:31:cb:9f:41:
3f:30:78:48:36:5f:63:84:bd:df:be:67:f1:a7:c3:
3d:f5:f2:1d:3c:01:27:ee:86:12:29:b3:51:16:b4:
6c:40:8c:b9:a1:f9:48:75:03:bf:72:42:ee:54:b6:
e5:d4:90:bd:52:47:3d:e6:9b:d7:98:9e:91:62:bf:
1c:d0:52:cf:30:b2:07:6f:e3:76:45:90:c6:5d:ac:
51:44:c8:e8:2e:26:cb:e1:bd:10:b5:66:da:c7:fd:
bb:1a:ba:55:c6:f0:6e:d7:0b:4a:fe:ab:86:d3:3f:
38:e2:2e:53:8a:58:87:d2:6e:d0:59:bd:5a:d1:e6:
51:08:d2:cd:63:ea:e2:b0:f6:29:04:ee:14:da:df:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:BB:EA:C0:AB:68:9A:04:1D:B7:FE:E8:36:A6:65:24:44:71:F5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Jqm76sCraJoEHbf-6DamZSREcfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:230f:3649/128
Signature Algorithm: sha256WithRSAEncryption
58:49:e8:f4:bc:3a:8f:f0:3c:1b:bc:3e:b5:a9:39:cb:dd:7c:
21:94:5b:7d:01:c8:72:ca:d8:71:6a:9d:26:ce:4b:f9:07:3b:
04:7f:d5:bb:79:40:c2:48:93:26:1b:a7:ab:f6:a8:18:6f:fa:
45:58:d6:1b:3d:52:43:b3:02:71:ae:92:a1:cd:1c:42:c1:91:
7b:d9:1b:28:df:e9:22:f0:38:60:07:ed:1f:7f:1c:40:26:ef:
ca:2f:80:27:35:5e:aa:c1:cb:c9:5a:26:e9:6c:24:f1:f8:de:
8a:83:5a:42:d8:f4:04:54:15:aa:bb:24:e8:b0:c2:71:b6:ee:
79:da:01:c4:c4:13:90:a0:dd:c5:86:fb:dc:d3:b3:9e:10:7c:
65:9c:18:e4:ea:11:c8:01:13:1e:4e:49:c0:ed:b9:a3:8e:c4:
82:3c:eb:5f:78:41:74:17:b7:ff:df:b9:ad:39:9a:55:e7:2a:
3b:58:d2:58:a9:01:46:c9:84:bb:b2:1e:fd:4f:da:c6:a1:86:
1a:25:b4:3f:fc:1d:00:bd:9f:8b:71:42:6e:a0:b9:04:17:27:
d7:7f:4d:33:b7:fb:6a:aa:24:15:91:80:bd:78:35:b7:da:29:
15:28:73:aa:0a:4d:01:81:2b:cc:bd:01:35:e3:59:d2:83:84:
82:be:99:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:53:13 2025 by rpki-client