Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6UxrpOPfX79UXOTAIifbvwPJjE.roa
File: R6UxrpOPfX79UXOTAIifbvwPJjE.roa (raw, json)
Hash identifier: QLaBOdOpYGHEez17Q48heoK4MNqA6wANgNboYb6GfKo=
Subject key identifier: 47:A5:31:AE:93:8F:7D:7E:FD:51:73:93:00:88:9F:6E:FC:0F:26:31
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019327213D31A5BA636B91D4D3D5D80A52C6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6UxrpOPfX79UXOTAIifbvwPJjE.roa
Signing time: Wed 13 Nov 2024 20:05:09 +0000
ROA not before: Wed 13 Nov 2024 20:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:2720:6dd6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:27:21:3d:31:a5:ba:63:6b:91:d4:d3:d5:d8:0a:52:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 13 20:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a531ae938f7d7efd51739300889f6efc0f2631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:f2:64:76:04:f0:b1:80:73:43:23:89:36:
8b:00:25:c8:dd:0e:87:ec:11:18:00:30:48:5a:19:
b9:4a:86:b6:4f:60:e5:90:80:6b:27:d9:61:fa:37:
fa:12:77:74:43:a2:9c:8c:8e:b7:85:17:2d:02:b0:
bc:38:c9:75:14:93:60:ff:2d:d6:3b:c8:3d:cd:53:
73:36:b3:ab:57:b9:3a:ac:a4:34:c3:8a:dc:5f:ae:
4b:35:a8:99:a6:93:75:ad:b4:b3:3e:76:45:cb:c8:
68:5b:de:64:00:46:02:1d:d7:64:6c:3f:08:8c:de:
54:a2:50:1e:4a:1e:67:f7:b4:87:f0:a1:ea:b8:10:
02:5b:f0:f5:fe:25:ba:05:0e:10:af:47:75:3b:39:
43:8a:98:5d:92:86:f5:e7:dc:69:ca:46:df:57:01:
41:2a:f1:b2:b1:78:a0:94:80:d2:a7:90:49:65:4f:
b4:4d:64:9e:1b:62:09:c1:2a:91:9a:09:52:63:60:
5d:86:5f:11:50:3d:a6:bd:1e:23:74:ea:0e:04:8b:
87:27:d9:9f:aa:a5:01:96:84:9a:bd:f5:09:c4:0c:
3c:de:ea:3f:23:93:e2:a2:97:60:29:29:92:02:fd:
74:92:6e:a4:b2:7d:10:ba:e2:e2:f1:20:a9:9c:26:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A5:31:AE:93:8F:7D:7E:FD:51:73:93:00:88:9F:6E:FC:0F:26:31
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6UxrpOPfX79UXOTAIifbvwPJjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:2720:6dd6/128
Signature Algorithm: sha256WithRSAEncryption
85:76:b4:fc:4e:68:23:76:e9:1b:e0:32:9a:23:f8:ec:07:00:
8b:db:13:81:8e:6a:08:07:da:03:8a:30:57:a6:70:15:ad:6d:
a0:17:1d:ed:88:55:2f:8d:58:1f:b1:09:f3:ba:4a:bd:7f:0e:
73:73:66:c3:01:38:30:0b:31:ee:22:1b:8c:28:4c:77:43:ec:
07:88:c3:e2:49:62:6e:60:f9:2a:80:14:4e:6c:a8:27:d1:2d:
74:3a:60:a0:32:f9:2b:c0:7a:ff:44:68:56:e1:1a:d5:c4:21:
42:13:33:22:b8:c3:2b:55:44:1b:be:c7:76:f1:f3:cd:7f:d4:
63:d5:57:50:9c:bd:87:7e:6a:91:08:40:fa:97:39:29:53:d8:
a1:ff:42:95:c5:02:d1:62:62:f3:f8:25:cf:b5:dd:ce:bf:4f:
ea:de:c6:22:63:87:97:fb:f6:b0:a5:0a:2c:f3:39:bf:29:fa:
52:f1:48:c8:58:45:b7:d0:8d:5b:1b:0b:93:08:1f:b1:a1:ba:
35:78:09:91:49:46:12:4d:2e:59:13:cb:b2:f7:42:a7:0b:6f:
7f:04:a8:c5:38:32:77:15:1e:98:ef:a9:c7:66:0c:b2:ed:70:
c0:fe:c9:3a:55:f0:d4:d3:f4:8a:89:42:cb:46:c4:c0:b7:09:
5c:a2:6c:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:21 2025 by rpki-client