Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OPwwOXrtdEvDpxRgL9F_if0utvs.roa
File: OPwwOXrtdEvDpxRgL9F_if0utvs.roa (raw, json)
Hash identifier: vDG9x6/lTPdHlrTchQLT0m/GeRwGW+WsqGXuIb6sWpQ=
Subject key identifier: 38:FC:30:39:7A:ED:74:4B:C3:A7:14:60:2F:D1:7F:89:FD:2E:B6:FB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191791DA2629B1AC479BBECC034AB1B60CF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OPwwOXrtdEvDpxRgL9F_if0utvs.roa
Signing time: Thu 22 Aug 2024 08:04:30 +0000
ROA not before: Thu 22 Aug 2024 08:04:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:791d:51d2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:1d:a2:62:9b:1a:c4:79:bb:ec:c0:34:ab:1b:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 08:04:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38fc30397aed744bc3a714602fd17f89fd2eb6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:67:65:e9:6d:66:5b:7e:4c:39:97:69:19:
a2:bb:45:fb:98:6b:3e:2a:14:1c:6f:c6:7c:89:9a:
ed:0d:31:7c:15:00:c0:1a:97:bd:49:f8:a5:ff:f1:
ff:86:e9:1e:56:be:13:6d:f5:6d:87:9d:0e:d7:22:
5c:80:f3:f5:b0:c0:21:fb:a9:20:fa:5b:27:4f:eb:
62:ed:d5:32:36:dc:60:4b:e9:bd:0e:0f:9a:70:cb:
cb:05:b7:30:1c:6a:14:a9:e9:02:9b:de:26:7b:13:
72:9d:a2:0d:a7:87:14:e5:7b:8e:60:ae:9e:74:69:
ac:3b:51:e7:fe:d1:23:b9:ce:03:aa:7d:42:29:d0:
9a:90:b3:c7:b8:b5:18:1f:c8:5c:62:29:bf:c3:f6:
38:8a:d6:e6:86:b0:db:59:80:51:fe:93:66:c7:49:
68:6c:2d:d5:ad:db:2d:5a:cd:1e:06:1f:07:dc:3d:
3c:ee:4d:58:73:c9:85:2a:be:37:ec:14:4e:3e:b8:
16:d5:58:01:ef:8c:f6:a2:69:24:d4:7e:12:f9:79:
7b:28:73:07:23:9c:55:41:1c:16:89:87:ec:31:34:
32:e7:48:14:7f:74:be:8c:d2:85:65:6c:d0:c0:65:
3d:76:ae:90:6d:a4:a6:80:53:7e:31:83:38:42:c3:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FC:30:39:7A:ED:74:4B:C3:A7:14:60:2F:D1:7F:89:FD:2E:B6:FB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OPwwOXrtdEvDpxRgL9F_if0utvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:791d:51d2/128
Signature Algorithm: sha256WithRSAEncryption
50:35:8a:0d:bd:aa:74:78:4a:49:ed:f0:f7:39:77:b0:9a:a3:
e0:3a:67:99:60:23:58:7a:19:99:f6:55:4c:10:5a:69:0f:0f:
2b:86:cc:75:0a:82:10:12:f0:ea:4a:17:5c:b5:e7:38:54:0e:
83:28:4f:c8:ae:36:aa:5f:cc:d6:c5:c0:8f:d7:0a:f7:eb:f9:
3d:be:48:16:95:ce:3b:b8:34:80:3a:72:e1:82:6e:a3:be:6d:
79:f5:4b:b7:e0:8d:0d:4a:3c:19:f7:bc:db:05:9d:f8:e5:23:
2b:f4:72:ab:a1:14:99:a2:be:af:c9:fd:a4:89:35:df:49:fe:
c2:1d:f0:b8:54:01:e0:48:50:d9:68:19:54:c9:7b:e9:48:5d:
9b:60:ce:c8:9a:64:e1:04:50:42:31:5c:76:d3:3b:52:27:3d:
8c:e6:d0:97:be:dc:b7:ed:11:ef:b0:62:d1:6f:3c:37:81:ec:
a7:f0:d4:a7:8a:6e:83:2b:22:7d:bf:fe:50:c6:f9:bc:d1:e6:
81:2b:7d:31:8e:7f:56:44:ba:77:1b:21:68:4c:a2:7f:76:be:
2d:b3:8d:34:eb:a9:92:5e:dc:5b:d2:85:e0:ca:85:20:49:1e:
23:30:18:3e:53:31:db:a1:f7:ff:9f:47:fa:6f:cc:0b:76:b7:
c6:98:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:23:05 2025 by rpki-client