Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PumjE40yatd350EU5UN5OGVm2Ac.roa
File: PumjE40yatd350EU5UN5OGVm2Ac.roa (raw, json)
Hash identifier: iVGyMvojSckzRFdeNSzw5qhoCW6LgdDFCBMvXPgGyVY=
Subject key identifier: 3E:E9:A3:13:8D:32:6A:D7:77:E7:41:14:E5:43:79:38:65:66:D8:07
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944ED7960AF7EB6B716488AA631EC825F4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PumjE40yatd350EU5UN5OGVm2Ac.roa
Signing time: Fri 10 Jan 2025 06:12:19 +0000
ROA not before: Fri 10 Jan 2025 06:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4e:d7:96:0a:f7:eb:6b:71:64:88:aa:63:1e:c8:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 10 06:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ee9a3138d326ad777e74114e54379386566d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:ad:25:7f:b1:13:96:b0:4b:ec:cc:38:3a:
4f:05:d5:39:04:b3:da:a2:0a:f6:2f:94:23:32:09:
cc:79:d7:3d:98:8f:24:78:0d:b9:cb:12:1d:1d:52:
b4:d8:0b:a8:c8:b2:bf:ef:c5:01:6d:e6:fc:4d:51:
03:8b:40:b9:8a:fe:e0:0f:ae:3c:8f:02:2d:71:3c:
6c:5a:94:81:d1:68:16:c6:8b:64:ad:c7:68:78:72:
2e:df:a8:eb:5c:fc:9e:93:22:22:10:db:80:03:4a:
3f:72:85:dd:7e:8d:33:39:b6:a6:a3:28:ac:79:54:
c2:af:50:3e:89:8c:40:e5:57:9b:e4:bf:65:0b:09:
a9:2d:38:8f:2d:33:f8:91:ed:2f:e6:44:75:52:02:
d4:69:b9:91:fa:34:42:38:1c:14:62:b6:d7:52:2f:
29:45:90:ca:ba:87:f5:83:bd:e8:88:0f:4c:d8:7f:
7a:e2:12:87:5b:ad:3e:ef:10:68:af:2f:7f:cd:6d:
12:29:e2:a3:a2:06:74:c6:58:f0:e6:b3:41:9e:17:
cb:09:ef:ec:8f:94:68:e1:43:f5:c3:af:e2:f5:7c:
27:29:a8:2c:25:db:3c:45:a6:ee:fd:bb:12:ab:1d:
8c:b1:5e:9a:02:17:5a:c5:e8:2d:dc:ae:6d:33:38:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:A3:13:8D:32:6A:D7:77:E7:41:14:E5:43:79:38:65:66:D8:07
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PumjE40yatd350EU5UN5OGVm2Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
92:46:51:37:c7:8a:8f:c6:cc:2f:8b:6c:f9:35:a5:6b:81:d7:
08:83:8a:e6:0b:bf:d0:12:d1:04:90:dc:ea:8f:34:03:b9:2f:
ff:f9:bf:3b:5a:37:74:f3:de:4e:f8:cc:79:5f:fe:e2:a6:9e:
16:13:7b:2c:4d:c8:a5:2d:ce:21:c8:33:7a:48:c4:e7:bc:5b:
fb:7e:ee:ff:d3:eb:61:c1:2a:ac:0c:3b:24:09:8a:c8:40:53:
13:e0:94:72:87:76:c4:a7:3f:40:c0:8c:a8:c0:6c:49:de:a9:
6e:f2:4e:96:3e:24:01:bd:fc:ed:38:cf:45:ef:6e:91:35:e8:
93:cf:9e:b2:e0:12:ca:78:73:e5:d0:07:af:3a:af:56:c1:a1:
6b:94:3f:ee:95:4d:e6:03:2b:28:01:df:9b:3e:a0:53:e8:24:
16:13:28:f8:e8:b0:7b:81:99:2b:6c:d3:58:49:f9:74:74:a8:
48:cb:36:88:e3:8f:2b:aa:87:c4:0c:86:e9:97:5e:95:46:6b:
bb:5a:6d:c2:0d:c9:33:bb:2e:1c:c6:05:61:79:b2:96:e0:07:
7e:f6:91:43:b8:76:fa:1d:02:6b:02:7f:1f:78:6e:ae:68:91:
50:2e:7d:56:cf:8f:2b:95:2b:4d:a4:c0:22:ca:82:29:19:c8:
44:f3:f4:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:52:58 2025 by rpki-client