Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RIXjQNJPS1JhbqfxWBphItO_InQ.roa
File: RIXjQNJPS1JhbqfxWBphItO_InQ.roa (raw, json)
Hash identifier: c7i6cB6qE5Of2jy1sWHJUdyeFcZBto7+J7M3sHkcNEU=
Subject key identifier: 44:85:E3:40:D2:4F:4B:52:61:6E:A7:F1:58:1A:61:22:D3:BF:22:74
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019119A7FA9E710BD8A0793873E9931EAC39
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RIXjQNJPS1JhbqfxWBphItO_InQ.roa
Signing time: Sat 03 Aug 2024 19:12:04 +0000
ROA not before: Sat 03 Aug 2024 19:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:a7:fa:9e:71:0b:d8:a0:79:38:73:e9:93:1e:ac:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 19:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4485e340d24f4b52616ea7f1581a6122d3bf2274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:43:59:71:a7:69:41:42:a1:cf:fa:54:cf:
3d:54:02:3b:81:76:c4:e3:61:01:37:f0:c1:e1:b0:
91:d7:d6:40:45:1b:f8:92:5a:3d:59:6c:14:48:cd:
5e:ff:d4:cf:3c:ba:7b:94:be:bd:82:eb:4e:a1:3a:
7e:d8:c2:84:28:aa:de:37:5f:fb:6e:86:b0:5c:80:
42:c3:6f:da:30:a5:21:18:04:a3:01:44:b6:22:d0:
53:a7:e9:3e:76:c1:a5:6b:80:3b:5d:f6:21:ad:41:
14:c6:5e:b6:e5:6d:ac:b2:97:0d:25:03:3d:16:4e:
43:3a:91:20:c5:d4:27:39:68:f4:c6:68:6c:46:53:
ab:af:4c:7e:c5:bf:b7:95:b8:e9:8a:58:e0:6e:ea:
b3:21:55:19:a3:ec:89:dc:75:fb:7e:75:2f:bd:41:
72:80:ce:e6:c0:1e:63:7d:65:fc:f3:de:aa:b6:be:
04:b2:c1:49:76:5e:46:d7:f9:24:eb:86:5b:46:4b:
24:f0:07:2d:e8:81:af:ab:a0:c7:3b:ee:7b:db:f0:
c4:3b:49:b4:a6:10:59:88:24:0d:0f:7c:5e:c7:44:
f2:25:df:8e:dd:b9:d4:34:4b:c3:36:df:22:ab:b1:
fd:61:58:dd:1c:70:d4:1b:b0:39:d7:82:c7:82:8e:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:E3:40:D2:4F:4B:52:61:6E:A7:F1:58:1A:61:22:D3:BF:22:74
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RIXjQNJPS1JhbqfxWBphItO_InQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1b:1b:76:f8:09:d1:2e:34:f6:6a:1d:b7:15:5c:b7:d5:ab:a4:
ca:07:40:a7:cc:b0:8d:e0:6f:84:08:1e:36:ba:b6:04:e0:ab:
72:4a:e3:8c:c8:c0:44:ca:98:6a:33:13:df:9a:3f:74:56:1f:
eb:14:20:d2:86:a4:9d:35:e6:00:93:ef:e7:56:b1:17:f2:31:
fd:b9:f0:d4:05:de:95:1a:45:80:e1:03:d7:96:a1:a0:5b:a6:
95:cf:3d:dc:c8:b4:dc:81:54:bb:39:34:ab:b8:ec:03:15:32:
60:f6:2b:3b:bd:c4:69:9c:3b:46:7a:ee:3b:f2:a7:4d:ae:dd:
84:0e:e1:40:d0:84:a3:60:62:31:b1:6d:d2:56:c7:ad:f0:b3:
ba:0d:c6:16:e3:b4:cc:a0:ce:4b:d2:4f:41:3a:2a:80:bf:87:
a6:e8:d4:2c:89:d7:0b:83:9b:9a:3d:32:b3:65:a2:1a:e3:73:
49:b0:30:50:85:7e:87:69:41:af:e3:13:43:13:47:d6:df:e9:
8e:05:be:75:16:0e:2b:88:c3:4f:90:1a:02:02:b0:0b:a4:1b:
23:5a:eb:57:82:11:ab:81:1e:d8:a7:bb:b2:1b:61:d6:22:cd:
26:bc:e6:60:ab:4b:43:9b:3b:ad:ee:33:d3:42:2d:61:bf:f2:
c4:f3:3b:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:51 2025 by rpki-client