Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PY_AIJsQ_KEiHmpzsyx8_A4BPLo.roa
File: PY_AIJsQ_KEiHmpzsyx8_A4BPLo.roa (raw, json)
Hash identifier: ov0RZV3ucuVDMh62ZUOKOhOWkN7sov27WcV2yk4mwd4=
Subject key identifier: 3D:8F:C0:20:9B:10:FC:A1:22:1E:6A:73:B3:2C:7C:FC:0E:01:3C:BA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019138871DB95F67FC535EEFB7D38B61CC8A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PY_AIJsQ_KEiHmpzsyx8_A4BPLo.roa
Signing time: Fri 09 Aug 2024 19:04:24 +0000
ROA not before: Fri 09 Aug 2024 19:04:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:3886:f66a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:87:1d:b9:5f:67:fc:53:5e:ef:b7:d3:8b:61:cc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 9 19:04:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d8fc0209b10fca1221e6a73b32c7cfc0e013cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:ce:e5:4a:f2:d3:0a:69:c8:aa:89:0c:71:
7b:7f:63:65:00:5e:5f:c1:15:cf:7b:4e:03:03:3a:
78:56:70:33:50:5f:a1:7c:c1:34:c5:62:1b:fe:f3:
60:24:5c:3a:05:0b:3d:79:06:cd:f5:02:7c:80:ba:
2d:98:51:2c:ec:f4:f1:90:79:04:7d:16:25:14:77:
98:05:6d:21:e4:a8:2a:4c:0e:c4:cd:6f:f9:27:df:
35:59:58:c7:56:da:2a:22:27:6b:45:bd:44:e2:42:
cc:b2:36:25:ea:1f:9b:13:01:cf:f1:9c:4c:bf:5e:
32:3a:05:60:b9:4c:bd:53:25:d4:77:3b:72:d7:63:
a8:ac:eb:55:3c:4c:4d:b5:03:8e:1f:13:3c:74:db:
bd:52:27:72:22:49:f5:df:53:0f:21:03:e7:72:93:
8f:13:ff:0b:52:e7:0c:80:0f:4b:17:d3:8a:f3:09:
58:78:23:d7:ee:c1:9f:e8:93:85:ac:38:e6:ab:54:
6e:9a:8a:bf:d5:b8:40:00:a5:34:2c:77:32:fc:f4:
69:0f:d0:f7:7c:5d:55:da:97:04:2d:d5:ef:dc:73:
35:0f:82:a4:80:0c:8e:13:4b:2e:3d:39:ac:bb:36:
1c:51:8e:ad:61:68:e7:e4:ce:16:a4:a9:7e:d9:e0:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:C0:20:9B:10:FC:A1:22:1E:6A:73:B3:2C:7C:FC:0E:01:3C:BA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PY_AIJsQ_KEiHmpzsyx8_A4BPLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:3886:f66a/128
Signature Algorithm: sha256WithRSAEncryption
2a:ea:d9:ab:34:e1:47:28:cd:6f:22:b9:d2:96:b9:ea:cb:23:
29:c8:fe:ad:50:43:1d:e7:dd:7e:8d:86:5e:c1:2f:cb:22:eb:
a1:f3:28:90:b4:78:82:54:38:d9:0b:cc:45:76:d0:5e:34:0a:
9d:38:dc:d8:eb:c0:4f:1f:73:91:11:c2:ba:13:5f:dc:85:00:
1d:99:8d:2a:d6:ad:90:02:16:7b:ae:a7:4a:90:f8:99:7c:6b:
46:fb:8f:82:d3:ca:02:b8:ca:4a:2f:b3:97:32:ff:a5:60:63:
18:fa:9b:6b:b6:cf:7b:9d:e0:0a:06:00:2a:a3:de:37:d6:27:
30:bf:1c:9c:f7:55:e3:7c:74:1a:ab:ca:7d:5a:82:b0:17:c1:
9a:a5:62:3e:5c:05:9d:24:0d:ce:df:8b:53:e1:ec:f8:ee:f5:
88:c9:2d:8a:5c:31:84:7d:52:c7:b6:7c:6f:95:c2:85:01:d5:
47:78:25:22:e9:50:59:89:73:20:0d:ec:8d:d9:85:ca:2f:29:
c6:8e:89:55:fb:28:13:71:c9:a7:38:f8:ac:16:94:f8:b9:ea:
50:44:fd:4b:b6:79:e5:72:07:b7:c0:56:87:66:99:27:aa:a3:
fa:24:1d:db:89:d1:2a:34:34:34:c2:a3:e8:32:c9:62:9c:02:
f5:ff:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:36 2025 by rpki-client