Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P23iyu_-M4SC85EyJSvqyDTcRpo.roa
File: P23iyu_-M4SC85EyJSvqyDTcRpo.roa (raw, json)
Hash identifier: atg9tHQVLz46j/mwTsf1a5kUVpn2M+KMGsZLcvkIoJM=
Subject key identifier: 3F:6D:E2:CA:EF:FE:33:84:82:F3:91:32:25:2B:EA:C8:34:DC:46:9A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D78D520966EAE22A922BAB7A1338FE1A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P23iyu_-M4SC85EyJSvqyDTcRpo.roa
Signing time: Mon 09 Sep 2024 16:10:48 +0000
ROA not before: Mon 09 Sep 2024 16:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:8d:52:09:66:ea:e2:2a:92:2b:ab:7a:13:38:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 9 16:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f6de2caeffe338482f39132252beac834dc469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:ab:34:55:d9:da:bc:2a:ea:03:68:30:70:
d0:9a:3f:53:5b:59:b5:cc:49:2c:c3:e2:70:0b:20:
bd:54:ee:8e:4e:c6:9f:91:96:12:11:9f:90:de:87:
1e:dd:be:fc:bc:f4:68:b5:0d:ef:d1:9d:20:b5:24:
64:18:7a:e9:51:ae:11:f5:62:35:19:8c:5f:3d:28:
06:88:58:20:e8:87:e7:9d:b7:4a:b9:47:10:e4:4a:
1d:fb:47:16:12:15:ed:62:5b:97:25:11:b1:0d:38:
e4:62:41:1f:18:ee:be:3e:90:82:f9:24:2c:13:37:
bc:f9:af:8b:c2:97:e2:0b:3f:96:80:0f:5b:8f:dd:
3b:46:37:38:33:e5:79:67:47:0a:69:a8:80:38:f4:
e8:c1:be:9e:53:33:f7:eb:ec:c2:fa:26:21:7c:eb:
07:26:59:94:e0:f0:d4:9d:46:27:06:f5:3b:5f:32:
79:8d:81:01:79:da:f6:72:6b:82:c8:a4:89:77:2d:
e7:a8:c8:4c:96:23:1b:25:97:97:36:c7:25:d3:41:
17:14:1b:00:96:e2:39:ad:d5:71:b8:fc:16:2c:a9:
8c:02:06:1f:f0:70:a9:eb:a0:2f:ac:26:8e:9e:4f:
fe:a0:61:48:30:0e:f9:38:63:49:cb:9a:d6:ca:5e:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:E2:CA:EF:FE:33:84:82:F3:91:32:25:2B:EA:C8:34:DC:46:9A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P23iyu_-M4SC85EyJSvqyDTcRpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
Signature Algorithm: sha256WithRSAEncryption
6c:37:d0:05:08:cc:79:b1:0d:d4:19:3d:da:69:92:44:ec:5c:
a3:b3:f4:a3:27:cc:c6:d8:dc:a4:d6:1c:b4:79:20:b7:61:11:
57:3d:ca:f1:eb:ea:43:a9:23:c1:5e:57:ed:2e:d3:9b:52:fd:
c9:0e:f1:57:bc:a1:b2:1a:01:62:6b:17:45:bf:c0:2e:7b:28:
8e:b5:8e:6a:24:1a:fd:40:28:83:cb:2d:60:94:e1:38:32:bf:
83:b5:2b:1d:74:0d:7f:14:2c:2a:ee:2a:37:84:1c:e8:b2:77:
cd:50:eb:df:d1:d0:85:38:f9:e6:f2:12:14:01:88:b9:ee:ab:
6a:5b:4a:62:0c:0c:1b:98:f1:35:bc:8c:43:e8:54:c5:aa:9a:
e9:62:0c:6b:d2:0a:77:81:28:86:18:93:bd:bc:33:fb:86:20:
d4:3c:63:cb:cd:fe:91:37:ee:d9:ca:18:4a:a1:b2:b4:a5:f5:
f8:03:3d:e6:e8:ea:f0:18:84:e1:51:cd:10:89:93:e8:11:23:
f3:ac:91:08:f1:1b:a4:c9:b9:94:df:c4:b5:09:6e:82:c9:e8:
2b:5e:cc:bc:cf:bf:27:be:bd:79:2e:92:14:44:ea:a1:34:88:
99:a3:71:0d:b6:47:9f:9f:a5:c7:9a:48:cb:85:87:81:99:82:
98:79:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:45 2025 by rpki-client