Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JwdFVF6YMPu8niusG1jM7uFYGqE.roa
File: JwdFVF6YMPu8niusG1jM7uFYGqE.roa (raw, json)
Hash identifier: 9rkJN5bg+fQk2uoERcEvGnbfUWQ6n2nG0DkO+SGgDJI=
Subject key identifier: 27:07:45:54:5E:98:30:FB:BC:9E:2B:AC:1B:58:CC:EE:E1:58:1A:A1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01929CBA712FBEBF1F11258591A66DA48CAD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JwdFVF6YMPu8niusG1jM7uFYGqE.roa
Signing time: Thu 17 Oct 2024 23:05:17 +0000
ROA not before: Thu 17 Oct 2024 23:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:9cb9:f2cc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:ba:71:2f:be:bf:1f:11:25:85:91:a6:6d:a4:8c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 17 23:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=270745545e9830fbbc9e2bac1b58cceee1581aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:d5:ca:8e:18:5d:e1:8b:93:cb:66:af:c0:
5a:6c:a7:f7:de:27:39:62:04:cb:c1:31:25:ae:13:
91:b0:f4:51:13:24:3c:62:1a:e0:d6:26:f7:76:9e:
58:88:9b:ec:95:03:39:2d:d0:92:80:f1:6f:24:a6:
02:04:94:4b:5c:2a:8a:b1:47:da:7f:f2:88:63:56:
1e:ab:d5:63:2b:52:c8:d2:d1:25:ca:6f:b0:c5:54:
27:7a:08:14:4d:f0:51:87:12:35:37:ee:e1:ce:1f:
44:6d:7c:c6:b3:51:0e:9e:3b:74:81:5a:6b:05:70:
7b:81:0a:28:61:31:5d:ff:f7:02:d0:3e:fd:64:fd:
ae:44:3b:f7:8e:65:df:d5:11:97:87:c6:d1:2c:d3:
49:fc:e6:61:18:66:45:b0:8f:dc:db:8c:20:13:4b:
3d:f7:8b:90:84:48:69:4d:0c:e6:57:b8:a6:45:53:
ef:f3:79:da:17:a0:4a:32:ee:b7:51:15:4f:20:75:
78:41:ae:2c:bf:92:07:38:63:8c:24:b0:e2:c4:3e:
0e:3b:c3:1c:da:b4:e6:dd:2d:e8:d3:9c:55:1a:12:
bb:d4:5d:1e:a3:a7:2a:fb:6a:b2:ea:06:96:2c:b4:
70:56:31:33:68:9a:f8:62:50:58:a3:5c:fa:a3:6d:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:45:54:5E:98:30:FB:BC:9E:2B:AC:1B:58:CC:EE:E1:58:1A:A1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JwdFVF6YMPu8niusG1jM7uFYGqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:9cb9:f2cc/128
Signature Algorithm: sha256WithRSAEncryption
18:10:4f:b1:3e:85:2b:cc:b4:d2:25:9b:31:4d:73:1a:c9:e0:
e6:3c:87:fd:40:c5:28:12:46:cf:ee:dd:db:d5:b4:cf:e5:dc:
38:c2:48:a1:99:f4:0f:78:18:e2:c3:16:a2:01:4c:67:cb:9f:
47:68:c2:f3:0b:de:ad:ae:59:06:fc:32:7e:5d:2d:d8:30:0a:
4d:a0:34:e8:7e:01:49:cd:03:9b:6d:df:12:f9:e2:66:08:35:
52:46:79:72:66:d7:d6:06:21:37:52:40:4d:dd:23:dd:b0:00:
e5:f9:e5:d7:d5:dc:01:e1:7e:c0:5c:0e:e5:1f:15:14:c7:9d:
fd:15:1a:d1:11:81:39:25:9d:15:78:d4:1b:6d:b1:32:38:c9:
5a:68:f5:2a:30:49:d5:a9:1a:82:9a:47:6d:74:5d:de:81:e6:
00:ec:7a:5b:b8:95:92:91:f4:c4:eb:01:52:e9:7f:d5:59:e8:
9d:b3:c1:27:af:30:8e:64:ef:fe:c5:42:fc:fe:86:4b:6a:af:
d6:ba:f6:9e:0b:66:07:0d:8b:e8:de:64:df:7a:f8:60:2d:0f:
c9:f2:c0:50:89:18:41:98:d8:f6:b5:a5:e3:d5:a4:56:f1:20:
1e:f0:c9:87:ba:45:8d:c1:7a:70:c1:ee:27:d4:f2:a3:84:6b:
1f:e7:cd:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:04 2025 by rpki-client