Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RseoBmIqRVnoDAEJ69hz5PuU1Ck.roa
File: RseoBmIqRVnoDAEJ69hz5PuU1Ck.roa (raw, json)
Hash identifier: X9kbSMKRG+HF8+b/UxCMUNZ951RemalZO0fVLmQ5PTY=
Subject key identifier: 46:C7:A8:06:62:2A:45:59:E8:0C:01:09:EB:D8:73:E4:FB:94:D4:29
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192F85A028E7E61B9DACCF4DD142DF843F8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RseoBmIqRVnoDAEJ69hz5PuU1Ck.roa
Signing time: Mon 04 Nov 2024 18:05:01 +0000
ROA not before: Mon 04 Nov 2024 18:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:f859:854d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:5a:02:8e:7e:61:b9:da:cc:f4:dd:14:2d:f8:43:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 4 18:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c7a806622a4559e80c0109ebd873e4fb94d429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:c4:02:2c:34:5f:07:54:24:43:2e:74:83:
00:23:2b:46:b7:97:19:66:fb:2d:0a:b0:85:c6:e7:
b1:e9:7e:3f:17:f0:3d:79:43:91:21:40:fc:64:ed:
a8:03:4e:0d:0a:92:a6:56:2e:9f:e9:b7:c5:19:db:
f7:8a:8b:e8:39:8a:24:fa:59:6e:a5:ce:61:b9:35:
ea:76:8d:53:53:1b:a5:24:d9:60:0b:05:78:49:00:
4b:35:c6:62:4e:b7:c6:4d:6c:70:1e:6c:b2:82:96:
fe:86:1d:2a:06:9a:c8:ed:cb:43:af:ae:b9:10:55:
ec:01:5b:2b:d1:fb:e2:e7:e5:8b:dd:2b:4f:24:b4:
3a:76:88:b1:74:a5:04:8d:ce:8d:2b:60:50:c1:7d:
49:75:5f:a8:cd:04:52:dd:bd:c4:e4:e6:c1:7f:59:
e4:19:49:8b:47:ae:be:14:19:bf:c1:5d:6b:fe:70:
0c:59:60:e1:87:93:79:b1:7f:b5:42:6b:d1:00:92:
e1:02:60:e0:b2:b1:92:60:db:c3:0d:71:b8:d9:b1:
10:25:d9:09:4a:8e:28:8f:88:65:86:dc:73:51:65:
7a:65:7d:b0:e2:ac:f8:c4:59:c7:8e:d9:62:4a:21:
03:ef:ae:ac:08:c2:27:87:01:a2:a1:90:d7:fa:75:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:A8:06:62:2A:45:59:E8:0C:01:09:EB:D8:73:E4:FB:94:D4:29
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RseoBmIqRVnoDAEJ69hz5PuU1Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:f859:854d/128
Signature Algorithm: sha256WithRSAEncryption
52:83:16:d0:1c:f7:5f:4e:19:4b:f2:9c:48:59:c4:7a:04:99:
33:cb:9c:25:27:55:b3:92:6e:6b:e8:fe:ca:e9:12:7b:ab:aa:
f8:7e:96:91:50:97:b8:6d:ed:b3:38:f1:7b:fa:e4:a8:64:27:
82:91:a3:88:51:a3:f1:49:70:38:03:a2:8b:1a:da:ea:56:c5:
d3:e5:0b:a0:fe:08:26:46:a0:84:2b:4b:5c:d3:01:96:37:ac:
49:93:bf:fe:57:63:5b:5f:ce:7a:87:8f:11:67:3a:5a:94:94:
4b:82:ba:2a:9e:3d:2d:dd:27:a8:d6:ee:69:5f:6d:92:69:ed:
30:43:ee:61:f7:a5:f6:3b:a4:a8:c6:5b:43:f5:a9:df:fe:1c:
9f:75:fe:da:a7:82:01:7d:bb:2e:a5:d3:15:7b:ec:8a:bb:3c:
10:ec:08:a4:19:db:76:13:d0:f1:be:83:af:67:04:e0:e0:82:
2d:83:d9:4a:fa:b8:fc:2d:61:e7:82:32:de:42:2d:1d:53:d3:
82:d9:78:23:06:cc:eb:a0:c0:d9:19:b9:46:5c:eb:87:86:1d:
bf:e4:0d:b3:21:b5:5b:01:69:ff:8b:e6:09:e1:07:b5:92:b6:
3c:53:ef:01:56:ff:ab:6d:8a:c2:4c:ad:29:e2:ab:8b:c9:6b:
b2:39:82:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:41 2025 by rpki-client