Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ROdTba-5CTtXeiHwD_Rvygx3_Sw.roa
File: ROdTba-5CTtXeiHwD_Rvygx3_Sw.roa (raw, json)
Hash identifier: I3455TCmZbKCPf7kN2yzD0KGa0zfc/bkI5cdheaeZfU=
Subject key identifier: 44:E7:53:6D:AF:B9:09:3B:57:7A:21:F0:0F:F4:6F:CA:0C:77:FD:2C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915585D3F6873F3DB38E8E73205E508042
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ROdTba-5CTtXeiHwD_Rvygx3_Sw.roa
Signing time: Thu 15 Aug 2024 10:11:59 +0000
ROA not before: Thu 15 Aug 2024 10:11:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:85:d3:f6:87:3f:3d:b3:8e:8e:73:20:5e:50:80:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 15 10:11:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44e7536dafb9093b577a21f00ff46fca0c77fd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:94:60:ce:64:aa:d3:c6:34:83:a1:10:38:
96:fe:02:51:2e:8b:aa:69:df:26:5a:fe:a6:e1:28:
59:b9:88:32:d6:97:ac:33:f1:7b:aa:49:26:dd:1d:
17:b5:9e:ae:fe:fa:9f:8a:a2:61:d9:57:cb:34:f6:
60:d5:e6:b6:fa:25:11:df:9b:d3:5b:23:73:11:6a:
82:40:90:d8:38:40:bc:c9:22:98:7e:38:4a:c0:17:
57:c7:fd:49:b6:9a:7b:ce:36:16:1e:dd:6d:62:23:
e6:c0:57:5a:1c:81:e6:f1:d9:bd:60:05:88:5b:12:
5d:82:b6:a9:22:73:e3:db:c6:22:d4:19:91:30:d8:
4a:03:14:a6:02:c8:6c:62:4c:6a:e8:fd:64:cc:91:
60:b0:1c:ad:f5:bf:0a:f4:56:b5:49:2b:f1:d7:d8:
62:e8:74:4f:c5:4c:85:35:0d:d3:31:b7:dd:24:20:
a6:24:1c:9b:e7:d9:a7:e6:55:53:aa:7f:a4:78:b8:
d6:61:29:33:3f:98:bd:10:fa:5d:42:20:c1:e6:32:
2d:fe:22:dc:e2:ec:42:95:29:3c:c1:c2:f7:67:5e:
fd:df:08:39:ae:bd:d3:b2:13:61:45:3e:53:a1:65:
55:7b:dd:20:e6:bc:e3:a7:e9:9a:d4:d9:0e:c1:dd:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:53:6D:AF:B9:09:3B:57:7A:21:F0:0F:F4:6F:CA:0C:77:FD:2C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ROdTba-5CTtXeiHwD_Rvygx3_Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
44:fd:31:70:d5:4b:48:ab:79:d1:1d:52:2b:c5:22:cf:7b:5a:
29:2a:a1:da:1c:3c:13:ea:13:7f:57:cc:a5:21:26:1c:d5:3e:
5b:51:37:bb:b5:c0:f2:b5:7e:48:a7:4c:7a:ec:41:40:65:08:
f9:32:fd:71:82:eb:c8:24:10:cf:2d:38:83:a0:fe:b3:d6:ab:
71:f5:eb:88:7b:19:e1:21:98:e7:bb:ee:0d:4c:5d:c1:87:b5:
f4:32:10:60:89:3b:eb:1e:cb:1f:73:f4:95:0b:b4:7b:6d:34:
3f:de:a5:4d:f5:2f:fd:dc:4a:8e:79:e1:f7:17:00:8b:31:29:
dc:b4:2f:31:b6:77:09:b1:5c:07:ab:1e:c9:31:f4:50:bf:97:
af:5d:f9:db:48:1f:ca:21:5f:4a:9d:c0:3d:e2:1a:28:3f:90:
6e:35:7d:7b:9d:31:bf:0b:fd:94:27:af:70:de:2d:6c:9f:04:
96:7e:6b:45:03:33:e0:57:4d:2d:6f:14:22:f2:13:24:2b:d0:
06:db:49:ba:9d:ad:0c:d0:80:e1:6b:e7:6e:32:ff:6a:42:f5:
26:86:2f:7e:f8:ea:57:63:b0:a1:4d:c9:fa:b8:05:43:17:b7:
81:66:51:ad:40:a2:5e:4e:55:b1:f4:92:b2:a5:ab:f3:ae:25:
fd:f3:b0:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:21:43 2025 by rpki-client