Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KDyRNvpp2DarPJe5dFVS0licvqw.roa
File: KDyRNvpp2DarPJe5dFVS0licvqw.roa (raw, json)
Hash identifier: 07AYmPi8Aev8SImIPvSVtoYCrIJ7wm3yL5AGmsihHqg=
Subject key identifier: 28:3C:91:36:FA:69:D8:36:AB:3C:97:B9:74:55:52:D2:58:9C:BE:AC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918638EAD177585889A88EB89447C099D5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KDyRNvpp2DarPJe5dFVS0licvqw.roa
Signing time: Sat 24 Aug 2024 21:09:22 +0000
ROA not before: Sat 24 Aug 2024 21:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:86:38:ea:d1:77:58:58:89:a8:8e:b8:94:47:c0:99:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 24 21:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=283c9136fa69d836ab3c97b9745552d2589cbeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:af:17:13:d5:43:f7:f4:98:d7:09:8f:24:
5c:43:55:63:73:14:fb:67:bd:1b:f4:ff:4d:ca:94:
eb:ea:65:bd:88:d8:7f:80:d1:b9:1d:34:e1:2d:3c:
a1:a8:85:e8:0a:8f:70:4f:82:ce:1f:e2:10:5b:71:
2a:22:06:8f:82:f8:2f:67:a6:23:ea:87:a5:ac:32:
bb:ca:61:74:a5:d5:bc:0f:e1:e0:54:0a:85:2d:55:
e8:55:f8:59:5b:b4:9a:68:cd:a1:72:34:ef:db:da:
ba:24:c3:ca:c5:98:b4:82:b6:86:17:02:17:a6:b0:
b7:1b:38:a3:82:30:ec:1c:79:4d:ed:9c:81:e1:46:
93:0a:3e:84:f1:b2:21:f5:73:20:83:f6:16:fb:91:
75:f1:ae:c6:18:03:19:1d:4a:83:09:4c:1d:f9:60:
ce:88:60:a7:ef:7b:03:7d:c2:fc:8b:0c:f9:31:7e:
2b:77:5b:f7:20:2c:e5:83:38:03:23:78:2c:0f:58:
f4:78:85:cd:c7:da:ca:cc:16:20:d5:55:04:b1:71:
67:97:b1:36:13:f0:aa:af:d9:33:59:b0:50:64:be:
22:f4:49:bf:28:26:2d:1d:81:f7:e9:e5:2e:78:3e:
db:7b:e3:a2:50:ec:a8:50:eb:4b:cc:0d:43:3b:79:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:91:36:FA:69:D8:36:AB:3C:97:B9:74:55:52:D2:58:9C:BE:AC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KDyRNvpp2DarPJe5dFVS0licvqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
2e:2b:2f:e1:33:8c:89:5c:98:a9:bb:8d:7c:3b:80:3c:d2:85:
13:1d:68:73:c7:51:44:31:4e:d4:95:d5:73:73:66:96:8f:ed:
4f:65:44:bb:c4:3f:1f:48:46:6b:db:43:c7:63:4f:30:27:49:
c8:fa:3c:d1:32:d1:77:8f:09:36:a6:d2:be:0c:98:ce:68:8b:
11:29:04:db:e6:de:85:c3:09:1a:ec:3d:c0:6c:6a:cc:da:22:
cc:c4:45:c7:0f:18:27:ba:f8:46:93:94:07:7c:f0:74:18:67:
60:b4:f9:2b:45:15:53:55:37:93:c2:c8:f2:df:07:f2:d1:6e:
10:64:7f:cf:0a:c3:d1:47:73:03:41:cd:eb:ee:dd:c3:3e:97:
41:05:95:a2:45:91:3a:30:5c:17:6a:72:c1:bf:b8:68:4a:a3:
b5:e4:c5:f1:12:ef:b2:64:00:07:26:ce:b4:9e:52:96:70:0e:
6f:d6:63:7a:99:88:f4:64:a5:1f:a4:c9:49:cd:3b:a4:b4:52:
f9:43:48:f8:0b:be:76:77:2c:a2:d1:68:ed:5d:f4:90:29:71:
10:22:8d:ce:af:41:59:77:a9:f7:0d:e0:e7:9c:9d:4c:cb:35:
96:ea:8f:8a:b6:d5:df:62:c0:25:1d:69:3a:5e:a9:14:35:4d:
0b:a7:4d:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:38 2025 by rpki-client