Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NTix9iiV6gu7t6PeqMQFxP2GrkI.roa
File: NTix9iiV6gu7t6PeqMQFxP2GrkI.roa (raw, json)
Hash identifier: JnhRHQSbRMj4BLIHT0bUzVQP2/SQP3w1zBNiUuecRdw=
Subject key identifier: 35:38:B1:F6:28:95:EA:0B:BB:B7:A3:DE:A8:C4:05:C4:FD:86:AE:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918FE2AC47BB68D85D007BFECB8C321C11
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NTix9iiV6gu7t6PeqMQFxP2GrkI.roa
Signing time: Mon 26 Aug 2024 18:11:22 +0000
ROA not before: Mon 26 Aug 2024 18:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:e2:ac:47:bb:68:d8:5d:00:7b:fe:cb:8c:32:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 18:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3538b1f62895ea0bbbb7a3dea8c405c4fd86ae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:77:55:1a:a3:bf:18:b7:9d:6a:d1:77:1f:
e7:5a:58:82:7e:d1:12:ef:a1:54:bc:71:b4:3a:be:
c5:06:22:1c:ef:f0:b0:9d:ea:2a:78:77:45:ca:24:
a6:b9:4b:7a:78:01:e7:fa:29:7d:4b:eb:be:66:7b:
ea:2c:24:54:52:df:29:25:4d:e1:c5:bf:92:13:02:
59:92:bd:35:30:91:d2:37:cf:13:c6:50:25:b3:6a:
ca:63:8e:07:61:3f:1a:14:fc:b1:51:5a:eb:ee:5c:
94:f4:53:3c:40:f9:bf:3d:a7:8c:95:fa:01:b7:68:
33:1c:e7:a2:ef:2c:4d:84:d7:7e:2c:4a:48:a7:fd:
29:31:ee:98:ce:fd:52:79:64:04:9e:68:e3:1a:b6:
9f:98:68:56:d7:d5:5d:4c:31:d2:41:b2:94:1d:6a:
3d:39:d1:4c:3e:92:e1:de:db:84:7c:1f:dd:b4:51:
ce:65:7f:f5:f4:a6:2e:dd:cb:de:c0:44:53:1e:c0:
49:0c:31:de:9c:72:86:57:ef:09:31:a4:18:67:3f:
14:28:bd:71:fc:64:cf:69:9f:c7:db:41:73:e3:2b:
2d:d6:83:00:59:99:c1:8d:b5:7c:da:de:87:be:aa:
09:a4:9c:83:14:14:09:10:ef:43:61:ef:32:20:46:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:B1:F6:28:95:EA:0B:BB:B7:A3:DE:A8:C4:05:C4:FD:86:AE:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NTix9iiV6gu7t6PeqMQFxP2GrkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
07:0c:d5:c2:b8:5a:ab:50:f7:5f:84:ab:31:0f:c4:a3:c0:c5:
a4:ab:c7:d5:9a:fa:02:46:37:59:62:00:93:ec:11:08:0d:73:
be:17:7e:a7:b9:d2:78:af:1d:50:25:b0:4f:26:4f:ef:22:20:
7d:2b:ab:6e:9d:c5:b3:8a:cb:24:bf:aa:be:0a:9a:12:bb:1c:
7c:08:58:e2:bf:e6:45:7c:97:71:f1:17:98:37:a0:ce:ab:81:
93:d8:e0:11:31:15:ae:8d:25:18:4c:b8:24:73:14:fe:fb:bf:
14:7c:c5:f7:d5:57:ce:b1:71:d5:48:04:d1:a0:70:9e:d4:c2:
59:8c:a0:39:b2:51:bb:7c:6f:8d:9f:c4:7e:16:fe:79:1d:63:
df:78:26:1a:78:4c:33:f3:89:5c:e8:e2:84:4c:70:75:fe:3c:
d5:20:48:52:38:22:30:5e:c1:8d:0d:cb:00:3b:88:8f:45:68:
36:79:ab:6b:fe:e7:3a:b6:33:c7:22:b0:f3:8c:7d:7e:44:71:
e2:32:64:93:91:42:d0:2c:8a:c5:fa:5b:e6:2c:d2:ee:30:b6:
2e:90:79:2a:28:5f:28:45:28:45:e5:ff:aa:ad:5a:8c:fe:5b:
77:c5:c7:2d:90:31:85:32:f9:21:b6:08:83:62:c0:fb:85:77:
f4:b6:6f:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:58 2025 by rpki-client