Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N4nrsUgjK8YO8MRRwLGIZu43o4Q.roa
File: N4nrsUgjK8YO8MRRwLGIZu43o4Q.roa (raw, json)
Hash identifier: TLif14lw7tJ4iNq5Qs5yg6644tnG4cV4qz34SEddwMA=
Subject key identifier: 37:89:EB:B1:48:23:2B:C6:0E:F0:C4:51:C0:B1:88:66:EE:37:A3:84
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915EF6422F7F95D442A4AD2BEBB5B0E7DE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N4nrsUgjK8YO8MRRwLGIZu43o4Q.roa
Signing time: Sat 17 Aug 2024 06:11:22 +0000
ROA not before: Sat 17 Aug 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5e:f6:42:2f:7f:95:d4:42:a4:ad:2b:eb:b5:b0:e7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3789ebb148232bc60ef0c451c0b18866ee37a384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:d1:41:a9:9d:9a:64:26:7c:11:ec:e7:7a:
a5:65:b6:46:b3:06:ce:28:15:e6:21:c8:77:20:cd:
f4:63:1a:13:83:89:c0:ad:64:c3:17:34:ee:f3:3f:
1e:14:6a:c1:28:aa:57:8c:1b:a9:69:5f:ae:6c:46:
4f:6f:bb:cd:ed:d8:28:3e:0b:f6:8f:08:4a:f6:76:
52:87:8f:95:be:bc:05:b4:fc:38:06:2d:e2:0d:fe:
0b:14:0b:69:b2:74:13:a6:80:0f:d1:ca:ef:72:ed:
c6:4d:4e:31:d6:76:34:84:db:26:d8:fa:dd:cf:c8:
20:a9:2c:95:24:16:53:ec:cb:96:2d:50:a0:f7:6f:
30:a3:e9:e2:88:00:34:4f:74:dd:29:6f:4c:06:f5:
b3:b8:4b:b5:d7:42:38:cc:34:d5:2a:72:8a:c3:ea:
af:d1:9b:93:8c:e6:95:92:44:fa:d4:21:27:e7:2a:
06:f9:ed:44:61:e3:a3:b1:6e:f0:c4:ef:8e:35:0f:
0e:62:db:0f:78:a9:38:c4:fe:dc:5f:ab:c6:59:38:
d7:fa:27:db:6d:1a:97:aa:a6:51:ce:1c:7c:77:82:
22:f1:fe:ce:f6:c3:31:b0:34:55:e4:45:0f:1f:6c:
c0:60:ae:57:7b:fc:12:fd:08:99:0f:f5:0b:3e:30:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:EB:B1:48:23:2B:C6:0E:F0:C4:51:C0:B1:88:66:EE:37:A3:84
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N4nrsUgjK8YO8MRRwLGIZu43o4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
17:3a:7e:71:e0:2a:14:50:7a:09:a2:e7:be:83:32:05:e0:37:
47:94:df:80:6a:4f:a3:23:7f:59:fd:53:af:9a:55:e4:6e:93:
59:d1:b2:c6:d7:f1:74:8c:0c:2d:c3:ac:e0:22:f8:5a:6d:b7:
63:9e:cc:8e:f5:df:3d:d5:de:c4:89:9d:fd:49:83:aa:b1:a4:
eb:e6:aa:52:54:74:f9:34:0b:49:b0:20:f3:5f:9c:7e:09:cc:
0d:77:e5:df:ab:df:dc:a0:84:e0:8c:0b:fc:69:2e:cf:3f:9a:
f8:18:ed:5a:60:de:53:c4:c9:a4:9e:90:05:93:44:82:ce:19:
91:cb:f6:59:7e:7e:c0:b4:dc:ab:1a:09:5c:9a:53:06:e1:0e:
1f:50:fb:eb:fc:94:10:75:e4:35:85:6e:1b:2b:7e:33:82:f1:
53:77:07:2d:33:82:b7:40:bd:fb:db:d4:32:1a:0e:2d:e7:7a:
d3:3a:5c:31:93:37:0e:ec:55:f0:c5:4e:32:7b:c5:24:7d:bb:
81:1b:19:ab:01:5c:77:7d:76:4e:55:bd:7d:aa:98:ae:4d:06:
3e:b0:6d:7d:69:42:6b:d4:cf:ba:21:6c:d2:79:89:99:7d:0d:
43:8d:eb:0d:31:b7:07:a2:25:32:d7:bb:46:e9:e0:21:02:5f:
b5:d0:69:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:28 2025 by rpki-client