Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/O7EPQSGPTxoLKAOeKIpqfN7-LHw.roa
File: O7EPQSGPTxoLKAOeKIpqfN7-LHw.roa (raw, json)
Hash identifier: NpTH6EQdXAYCKYVgveBeeEUhzyQrz/h21Dg9LY9pWX0=
Subject key identifier: 3B:B1:0F:41:21:8F:4F:1A:0B:28:03:9E:28:8A:6A:7C:DE:FE:2C:7C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A9A3632CB33E256882010A8FB47E9327
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/O7EPQSGPTxoLKAOeKIpqfN7-LHw.roa
Signing time: Sat 31 Aug 2024 18:12:22 +0000
ROA not before: Sat 31 Aug 2024 18:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:a3:63:2c:b3:3e:25:68:82:01:0a:8f:b4:7e:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 18:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bb10f41218f4f1a0b28039e288a6a7cdefe2c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:6e:d7:06:3a:5f:31:75:48:ba:75:4d:f7:
55:93:ce:56:32:fe:0f:02:c8:f2:89:0d:3f:af:ea:
f7:d2:c7:2e:69:4d:2e:87:65:b7:a9:81:a8:7c:c7:
2e:ff:e3:ba:76:62:ca:21:5e:22:5a:46:f4:a8:87:
9e:e1:7a:79:25:d7:ab:65:b6:52:61:ae:9d:7e:de:
65:7c:ca:61:3b:c5:04:f8:7e:81:38:f4:72:84:ee:
c9:34:07:36:95:fb:5d:a7:50:29:a7:5e:c6:2a:32:
6c:bf:1e:2b:13:a6:54:a0:9a:63:c3:a3:9a:43:1b:
21:32:1b:78:b0:be:03:f7:aa:e3:b2:9a:65:03:05:
d6:e0:1b:7b:04:59:db:0f:ff:c8:99:6d:cf:b0:0e:
42:25:01:cf:1d:39:36:ca:51:bc:b8:c4:94:a0:90:
c1:14:0c:94:16:c0:0b:42:99:12:60:14:5a:f4:4e:
da:73:73:53:ca:54:06:f2:ae:8b:3f:e9:e1:69:4d:
5f:52:95:5f:48:a9:73:cb:40:51:75:de:e4:23:d7:
1a:f6:c4:d1:d9:7c:dd:7e:45:4b:5a:ce:4d:e6:a0:
11:d2:fc:6b:ef:59:f2:b6:bf:a1:2b:54:20:04:45:
b6:06:70:d5:2e:38:12:47:2e:18:bb:8d:7c:71:27:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:0F:41:21:8F:4F:1A:0B:28:03:9E:28:8A:6A:7C:DE:FE:2C:7C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/O7EPQSGPTxoLKAOeKIpqfN7-LHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
91:0e:27:52:e3:64:1d:96:21:03:d1:18:9b:2e:5f:f7:42:76:
6f:a8:0a:ea:43:2a:64:7b:3a:ea:0d:b8:ea:5c:56:9f:a5:5a:
32:12:39:d4:28:e2:db:56:a5:6e:28:32:7d:71:d4:65:b4:1f:
29:6b:53:7b:3c:b8:c4:64:1e:f7:f6:5b:5b:f6:b8:ff:70:d1:
05:f9:19:57:c5:b4:85:74:1a:a0:68:95:4d:0c:1f:ed:1f:de:
80:3c:9f:34:0f:e2:87:79:ec:35:8d:8f:ab:a0:3e:7c:5b:18:
e8:04:48:b7:90:0b:f7:37:d4:fd:15:5b:50:30:de:22:4a:00:
44:8c:8d:b7:19:af:87:ec:92:5f:86:e7:83:1b:43:8f:a8:7f:
2d:d6:1c:9c:12:d7:f7:91:15:3d:a8:79:b6:71:ed:76:c5:a3:
b2:b6:0f:d2:a9:2e:38:6e:8e:ff:80:a0:4b:05:21:72:fa:a6:
ac:c3:3a:33:13:0a:a4:49:5f:78:1b:fe:62:3d:2d:42:9c:ef:
da:30:86:57:ef:97:a7:5c:70:71:9a:81:bb:8f:64:3a:d2:d0:
15:1b:aa:b7:39:6e:d1:a2:06:29:41:4c:26:fd:b7:83:53:1b:
18:31:83:0c:b7:56:6f:67:6b:15:76:8c:ea:2d:2d:08:99:9e:
f8:0a:81:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:42 2025 by rpki-client