Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N7EZnYMEnTzk1IURX2Ozpm_99iM.roa
File: N7EZnYMEnTzk1IURX2Ozpm_99iM.roa (raw, json)
Hash identifier: 9cDnvUMF4jHNmIRKvjTJad52nNCeGRJxeCFUK1qKzQ0=
Subject key identifier: 37:B1:19:9D:83:04:9D:3C:E4:D4:85:11:5F:63:B3:A6:6F:FD:F6:23
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192459BC34EC0395C2D18AD44C552A9F1BB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N7EZnYMEnTzk1IURX2Ozpm_99iM.roa
Signing time: Tue 01 Oct 2024 01:04:48 +0000
ROA not before: Tue 01 Oct 2024 01:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:459b:37b8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:45:9b:c3:4e:c0:39:5c:2d:18:ad:44:c5:52:a9:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 1 01:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37b1199d83049d3ce4d485115f63b3a66ffdf623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:1e:d8:38:20:fe:8f:13:e5:5d:d5:8f:51:
dd:e4:91:2d:e9:08:14:28:96:a8:1c:1b:28:53:50:
fd:dc:5b:91:7b:ca:35:61:29:dd:09:c3:a4:af:ec:
30:d5:3f:2b:d8:35:ed:a8:9e:c4:c1:54:3a:fd:c3:
4b:6e:78:5b:9a:a0:ab:76:57:bf:d8:56:e8:70:eb:
dc:f7:7d:48:b2:68:49:57:d0:e5:54:d9:45:01:13:
6b:2e:0e:51:05:07:d3:09:52:24:84:bc:52:dd:d8:
35:cb:cb:bd:29:e7:57:54:96:42:4e:4e:b2:12:e3:
1d:00:d5:9f:0f:71:cb:6c:88:28:46:d9:4c:d1:65:
1e:94:72:9c:0c:15:f0:b1:3d:85:3e:f9:8b:1b:1c:
b1:a0:2f:59:f8:b2:f6:93:73:9d:8e:0d:a1:7b:bb:
65:98:75:81:b1:09:f6:50:ee:ed:51:15:d3:4d:0d:
47:ac:61:99:3b:7d:95:de:4e:c9:e2:87:64:18:53:
fb:f1:1a:87:9e:c3:39:05:68:15:31:86:e8:a4:77:
da:f8:7a:1c:52:64:51:ef:2d:2d:36:28:89:49:35:
61:42:f9:a8:d7:1c:e8:d9:05:3a:4b:c5:90:ff:87:
81:76:f2:e2:7a:b6:30:aa:4c:0b:4e:ac:92:ff:cc:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:19:9D:83:04:9D:3C:E4:D4:85:11:5F:63:B3:A6:6F:FD:F6:23
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/N7EZnYMEnTzk1IURX2Ozpm_99iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:459b:37b8/128
Signature Algorithm: sha256WithRSAEncryption
55:64:50:7b:33:2f:0c:26:42:bb:2d:33:09:c8:35:28:7d:ae:
6c:c0:a0:95:09:18:b7:7c:66:25:7e:fc:3e:cb:8d:4c:0c:86:
c9:83:2b:32:6b:a5:78:e7:b5:81:f2:bd:ae:ea:92:bf:2f:57:
fd:f4:75:6d:34:16:5d:b9:63:eb:94:bb:7c:e9:1a:94:7a:27:
28:92:b2:66:2a:3e:a3:c5:38:0c:b7:27:9d:52:fe:ef:4c:99:
b4:40:c2:54:79:e8:d7:fe:4b:84:87:fa:71:26:3a:f8:70:7f:
73:81:0d:5f:b9:f7:e3:eb:22:60:18:19:3e:9f:fc:be:3a:0e:
ca:71:64:9a:34:9c:bf:b5:eb:51:59:45:88:d5:5e:ab:67:07:
20:de:5a:63:e2:0e:a0:aa:ce:c8:b1:04:75:b2:0f:b8:7c:02:
82:b4:e1:6b:52:b6:3d:2c:eb:9b:70:ca:d2:2f:12:11:38:59:
d2:b4:12:5b:70:df:69:18:bc:ca:37:6f:db:cb:46:20:b8:23:
2c:bf:a4:db:75:65:bb:0a:f1:b0:c8:07:28:da:73:88:3f:25:
8d:0f:84:da:5a:87:2f:10:5b:ca:0d:9d:82:a8:af:18:e8:da:
da:09:75:b7:62:28:c3:65:0e:ec:ae:4a:24:87:00:96:56:ac:
fd:15:ea:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:27:52 2025 by rpki-client