Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RXozW7znDhvHfNDgcEsGBabPShM.roa
File: RXozW7znDhvHfNDgcEsGBabPShM.roa (raw, json)
Hash identifier: KD7nc0ufIN1Ug8yanzil7ZkczjF0Jxt+TXRap2KoFbs=
Subject key identifier: 45:7A:33:5B:BC:E7:0E:1B:C7:7C:D0:E0:70:4B:06:05:A6:CF:4A:13
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192023B39C64B3D8F03F2F13BDCB8736C91
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RXozW7znDhvHfNDgcEsGBabPShM.roa
Signing time: Tue 17 Sep 2024 23:04:48 +0000
ROA not before: Tue 17 Sep 2024 23:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:23a:f5f2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:02:3b:39:c6:4b:3d:8f:03:f2:f1:3b:dc:b8:73:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 17 23:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=457a335bbce70e1bc77cd0e0704b0605a6cf4a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:dc:ed:8c:05:e3:a2:ab:1c:67:85:5f:31:
87:19:a5:33:de:ce:d1:69:2f:1f:7e:31:0e:0f:a9:
0e:02:89:3c:63:2a:72:a2:c4:37:be:94:f4:0f:31:
9a:32:16:d3:52:14:78:a1:3c:75:14:f1:ff:db:d7:
bd:47:19:fb:c1:2d:40:b2:0e:6a:2b:4d:e5:80:29:
80:2e:12:c6:4c:97:81:38:2a:16:68:23:7c:71:d9:
a3:88:dd:93:54:c6:2e:31:01:47:79:3a:f9:1c:20:
5c:9f:8d:9f:17:77:8d:5e:40:57:ec:4b:dc:07:e4:
51:40:01:4f:27:e6:0f:f3:54:0e:da:ad:41:17:44:
bf:a7:81:53:9b:d8:32:68:b0:da:3e:77:b8:aa:9e:
b3:59:84:49:fd:1a:43:82:92:31:ed:c4:15:34:10:
15:03:d7:66:ea:08:d7:95:e5:08:da:c6:8e:0b:9c:
66:ea:fb:11:7d:52:cf:41:e3:d9:9e:ea:89:1c:59:
2d:48:c2:74:56:ed:b5:a7:86:4b:a9:c1:3c:cf:03:
bd:30:7c:0f:b8:17:d4:96:81:dc:27:24:ad:8d:31:
35:84:06:33:d5:8a:3e:18:b3:76:b1:ad:7e:30:0d:
56:98:7d:a7:51:ad:04:7c:21:b5:70:c6:61:1d:c1:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:33:5B:BC:E7:0E:1B:C7:7C:D0:E0:70:4B:06:05:A6:CF:4A:13
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RXozW7znDhvHfNDgcEsGBabPShM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:23a:f5f2/128
Signature Algorithm: sha256WithRSAEncryption
16:ae:85:ef:b8:9e:81:cd:2f:1c:44:36:4c:57:4c:9a:93:af:
1a:39:7e:5b:63:6e:af:22:b1:02:d4:7d:29:a6:e4:0d:41:04:
f1:05:e4:03:c8:40:ea:9d:89:8f:63:84:53:7b:b2:d9:a2:96:
57:67:b6:59:97:14:8f:3a:77:3d:e1:78:ad:f3:26:f4:8a:c1:
cc:32:0c:12:33:98:58:12:39:8d:bd:0b:db:38:e5:46:54:27:
7a:68:4f:35:58:7c:14:42:76:f6:cd:b7:82:ab:78:11:10:34:
14:0d:9f:e8:16:11:d1:b3:ea:3a:54:7d:38:55:b6:2b:ac:0a:
03:0c:82:1a:21:06:85:8b:4c:94:7a:da:b0:9d:8f:e7:f3:56:
b8:73:0f:72:b7:ae:53:e3:ad:dc:e6:ab:cd:3a:89:f3:f9:4b:
e4:54:3a:b8:53:8a:ec:0b:ae:3c:0c:bc:b3:bd:c6:d7:5d:a1:
55:61:f2:9b:14:4e:c7:e8:e9:8d:c7:ed:37:d5:b8:1f:71:d2:
c4:fc:c7:2c:c4:e2:b7:fe:11:19:41:a3:84:0e:5f:b4:ff:5a:
a3:3e:f7:32:76:92:e2:83:ff:65:a3:22:78:88:29:11:60:ce:
0a:5a:06:92:ef:67:ac:5e:fa:d2:f2:50:20:14:98:b7:2f:96:
4f:26:d8:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:52 2025 by rpki-client