Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P932o4Fe_lMtKMZNn-T0ovstb_w.roa
File: P932o4Fe_lMtKMZNn-T0ovstb_w.roa (raw, json)
Hash identifier: +DvToBlfihd+Ka3eb0jM7AORt4SBNnVvPlyA7Xheq1U=
Subject key identifier: 3F:DD:F6:A3:81:5E:FE:53:2D:28:C6:4D:9F:E4:F4:A2:FB:2D:6F:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190D1513658DADD9340CA597DCABD82014E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P932o4Fe_lMtKMZNn-T0ovstb_w.roa
Signing time: Sat 20 Jul 2024 18:04:38 +0000
ROA not before: Sat 20 Jul 2024 18:04:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:d150:cfaf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d1:51:36:58:da:dd:93:40:ca:59:7d:ca:bd:82:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 20 18:04:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fddf6a3815efe532d28c64d9fe4f4a2fb2d6ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:71:8c:bc:89:08:16:5a:5c:18:cc:ec:c1:
f8:8f:6b:34:8a:a8:ab:4f:a9:ba:27:7f:e4:5c:39:
4f:bc:50:8c:77:2e:6a:3a:c2:13:44:a1:34:f5:65:
df:fd:e3:47:eb:a2:d0:7d:37:9f:81:b3:11:1f:9e:
71:de:6e:66:a6:3f:93:a5:04:a9:6d:81:d9:81:72:
47:e3:72:27:4c:46:9b:2f:76:59:40:09:49:5f:bd:
a5:34:82:1a:8d:2f:e6:44:43:2f:9c:28:fb:ed:5a:
f9:86:3f:f4:6c:cc:95:e6:26:66:04:68:01:63:fe:
0f:5c:12:60:91:70:da:b9:f8:79:e6:c5:8f:11:21:
29:66:0b:d1:60:9e:ec:3f:80:7d:22:e9:ff:ae:e9:
33:70:7b:97:ef:a8:e6:68:a6:81:57:88:6b:87:48:
69:ce:95:4c:a1:8c:4f:11:3c:b5:6f:0d:73:19:49:
3e:f1:fc:69:84:55:5e:a5:5c:82:f3:06:3b:af:6f:
8e:53:e3:db:73:60:cf:4e:ee:db:f6:85:71:c0:2d:
cf:b2:11:ba:3c:40:3b:be:27:54:64:80:d3:71:c4:
28:d5:e8:ae:a0:24:2a:f7:d5:4c:95:86:2f:18:2e:
82:b1:1d:19:b8:65:80:72:13:43:a7:ff:4b:88:14:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DD:F6:A3:81:5E:FE:53:2D:28:C6:4D:9F:E4:F4:A2:FB:2D:6F:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P932o4Fe_lMtKMZNn-T0ovstb_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:d150:cfaf/128
Signature Algorithm: sha256WithRSAEncryption
88:cb:38:0c:f8:e8:f5:28:b2:48:3b:80:60:26:1b:71:5d:6a:
f0:a5:39:01:80:35:eb:e8:d0:e8:4f:d5:f0:ca:30:13:27:22:
0a:ac:5d:8d:ec:90:5e:a8:c1:c8:62:cf:48:b2:0f:fe:89:03:
ac:82:c1:a9:3d:80:6e:fb:80:77:a2:38:a9:7f:eb:2a:8a:e8:
13:b8:7a:32:2a:13:f6:c5:5b:95:e0:6b:d8:ce:1c:06:9b:d5:
a0:9c:f1:75:db:6e:7d:16:40:d2:50:80:3d:9d:f0:dd:4f:be:
e3:91:bd:dc:7e:59:76:e3:5e:ce:ac:05:c3:d8:51:fe:ba:39:
d1:78:e0:e4:e7:3d:67:76:47:ae:51:29:07:df:65:0d:7c:1e:
de:0c:41:9c:cf:ef:83:b5:26:46:c1:06:e6:d9:1a:af:85:47:
9a:78:f6:db:1e:06:25:88:3b:d3:cd:46:19:29:6b:0e:9f:88:
e9:d8:71:55:b1:38:49:bc:48:36:e7:f8:99:97:5d:6b:4a:71:
52:3b:ed:0b:93:b3:a4:9e:77:d1:fd:3e:fd:d9:54:12:51:a4:
b4:e7:98:54:f6:6b:b2:ea:0a:40:4b:c1:29:38:58:c3:b1:45:
87:2f:c1:a3:7c:29:33:6d:3b:d3:c0:0f:74:a1:d7:03:bc:80:
41:bb:8d:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:50:03 2025 by rpki-client