Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/K8PnnWjh1pidgFScJSKK2B9EfJE.roa
File: K8PnnWjh1pidgFScJSKK2B9EfJE.roa (raw, json)
Hash identifier: cIuNuyt0f7cFslcQbJazvxiPuvNvLssVxxwF49nnQr8=
Subject key identifier: 2B:C3:E7:9D:68:E1:D6:98:9D:80:54:9C:25:22:8A:D8:1F:44:7C:91
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944D1E4D2B0756EBCF2B3B94EFC97989A9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/K8PnnWjh1pidgFScJSKK2B9EfJE.roa
Signing time: Thu 09 Jan 2025 22:10:18 +0000
ROA not before: Thu 09 Jan 2025 22:10:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4d:1e:4d:2b:07:56:eb:cf:2b:3b:94:ef:c9:79:89:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 9 22:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bc3e79d68e1d6989d80549c25228ad81f447c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:39:11:a8:4a:64:d9:f3:22:08:39:56:03:
6e:59:c1:90:65:af:7b:3e:e3:d5:7a:e3:1c:3d:fe:
48:5f:34:84:c3:47:b1:47:d2:a8:8c:21:5d:55:e9:
c0:62:d1:4c:7d:80:f8:78:1f:c6:75:6e:1c:20:77:
cf:b5:51:c9:95:f7:4e:5c:56:2c:44:20:79:c1:71:
1a:af:b5:87:fb:41:94:52:02:65:77:d8:5f:b0:7e:
b5:be:2b:d0:06:23:4d:c8:92:53:df:32:ff:de:42:
f4:41:db:8a:47:95:76:8f:53:e6:df:9d:dc:52:d1:
1a:af:56:1a:00:1c:da:2f:7f:7d:59:51:ec:c0:af:
59:89:19:9b:76:20:a6:87:e1:dc:fc:32:a7:c4:38:
4a:55:dc:ed:38:42:87:80:5b:02:07:12:05:66:35:
e0:df:41:e2:d8:6f:27:41:13:5d:34:12:b2:02:5d:
45:e0:5e:9a:62:b4:c1:ab:d8:60:7a:43:e8:de:08:
57:36:29:02:ec:3b:2d:f7:92:f3:ae:48:57:e7:a8:
7d:89:a0:2e:06:0b:5a:0a:66:45:72:1b:ed:b7:54:
23:b1:88:ca:b0:4e:36:d5:5c:d7:f4:f1:f3:49:40:
5b:0f:2e:9a:52:c4:fe:80:9d:b1:4b:bb:99:f6:27:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:E7:9D:68:E1:D6:98:9D:80:54:9C:25:22:8A:D8:1F:44:7C:91
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/K8PnnWjh1pidgFScJSKK2B9EfJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
59:e7:18:1d:71:35:a6:66:2a:9e:a8:50:6e:06:88:17:ac:8d:
10:9d:65:c2:e9:d1:17:fd:85:12:de:48:5c:e8:a2:4b:61:c1:
6c:fa:c9:d8:36:17:3d:8b:4a:e6:44:ac:52:b8:97:20:f9:8f:
11:d5:fb:fe:51:67:95:10:43:4f:34:33:8f:87:0a:34:ff:62:
aa:94:2a:22:f1:06:38:2c:c0:45:a3:2b:52:b0:20:d2:fc:fe:
50:8c:14:da:65:68:07:34:e2:49:b8:e0:c2:4d:c5:fa:ec:d4:
83:1a:9e:4d:7d:75:db:10:c2:b7:26:23:02:72:79:91:46:7d:
be:8d:22:3a:ec:87:d9:a2:c2:72:01:0d:92:52:7c:fd:97:59:
b7:ca:e9:4f:18:e2:4b:d2:34:01:08:21:66:d3:c4:6c:47:df:
22:3a:c6:88:73:ba:5d:59:c2:85:3a:67:fd:3a:d8:58:8d:7d:
e3:b6:a0:9c:34:69:9e:bf:83:cf:56:c7:92:4d:ce:5f:1f:24:
78:a1:87:e8:b2:94:a2:c3:5b:16:77:e1:b5:28:79:34:cc:7d:
61:32:db:5e:8a:dd:3b:a4:71:4d:68:67:bd:18:8b:cc:d8:67:
79:da:e1:d3:99:10:21:d9:9c:45:3b:3c:21:7b:ca:77:84:4e:
75:e3:f9:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:48:54 2025 by rpki-client