Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SWf4pmg872KUghHrvQzX9LFybBw.roa
File: SWf4pmg872KUghHrvQzX9LFybBw.roa (raw, json)
Hash identifier: 8G8qFPfqON01xpCFW3BFZeT3RXkydKSHCqVU1j1/0fs=
Subject key identifier: 49:67:F8:A6:68:3C:EF:62:94:82:11:EB:BD:0C:D7:F4:B1:72:6C:1C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C77710C11627172085E8C030C4AFE1F4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SWf4pmg872KUghHrvQzX9LFybBw.roa
Signing time: Fri 06 Sep 2024 13:12:34 +0000
ROA not before: Fri 06 Sep 2024 13:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:77:10:c1:16:27:17:20:85:e8:c0:30:c4:af:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 13:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4967f8a6683cef62948211ebbd0cd7f4b1726c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:a9:ba:08:16:88:79:7b:d5:9f:b1:97:25:
1a:22:fd:80:7d:df:0e:05:4e:4e:56:6d:10:1b:b3:
2f:08:46:28:b3:d7:40:66:d5:23:d1:0f:d1:47:2a:
dc:98:52:58:72:c8:2b:ce:ea:1e:45:a2:95:0f:78:
25:8a:28:52:16:6d:9a:ef:22:c1:cb:4a:af:aa:ec:
72:a1:83:67:5b:46:93:8e:16:9e:44:6b:8d:7b:e5:
3d:42:c1:7b:a2:76:e6:43:7b:9b:da:52:74:7a:01:
d0:cf:f6:52:02:7b:7a:06:69:c2:05:1f:a9:ab:11:
b0:26:ae:61:92:35:f0:e5:68:d5:7a:40:d1:e7:fa:
68:66:1b:84:74:1e:3f:ca:02:ab:d7:84:58:d1:4b:
a9:ea:d4:fe:56:05:81:4c:ea:8a:36:2e:a0:a4:d6:
f7:15:76:52:8d:52:60:52:ab:2b:65:48:bf:18:33:
d6:13:cf:c2:ab:3b:0e:04:e6:78:ed:ca:eb:e5:ce:
b2:fd:cc:a4:e3:14:76:53:be:0c:60:4a:75:9b:e7:
55:84:25:70:5b:2f:62:ae:b3:62:da:5f:90:d4:2a:
e6:9f:e9:95:e9:f6:67:6f:fc:5d:62:00:f2:8f:04:
ee:dd:cf:d5:7c:f0:04:01:ba:2e:0e:e9:63:12:81:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:F8:A6:68:3C:EF:62:94:82:11:EB:BD:0C:D7:F4:B1:72:6C:1C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SWf4pmg872KUghHrvQzX9LFybBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1c:ae:7a:cb:27:73:3f:86:b5:d2:54:2c:e4:92:94:eb:a6:82:
bd:b2:f5:6b:6d:be:96:2a:74:68:c0:b2:81:80:67:55:f5:31:
f8:c9:e6:53:c6:46:ae:36:ff:ce:b5:b4:df:76:dc:3f:46:42:
d3:d7:9c:75:1c:4c:20:53:d6:88:24:e3:2c:48:fb:aa:27:61:
10:4b:dd:d8:08:e8:01:34:d9:5a:eb:55:e9:43:b4:bf:fc:db:
c5:39:8b:72:6c:e6:3f:77:3c:24:ed:69:5f:b9:4f:39:65:00:
9d:df:9e:c8:d5:4a:8c:98:90:f7:45:b5:f5:a4:20:23:4d:61:
72:17:21:40:72:c5:24:43:48:c9:df:71:2e:57:08:10:03:48:
b8:18:1a:bc:b4:b5:e7:84:23:6b:20:10:6d:7f:31:80:5a:2c:
33:5a:bc:73:06:2c:54:d5:c8:a3:8d:01:ee:c2:4a:f2:b6:ce:
32:b9:6d:00:8f:64:3a:9a:cb:72:23:2f:2d:30:3f:35:fc:b9:
64:74:af:35:0d:8f:88:ba:fb:30:86:31:24:e6:d4:3b:35:91:
aa:87:77:ae:b0:11:35:68:b3:81:07:7d:09:16:f8:2e:36:0a:
e1:a9:3f:54:a8:57:ed:12:74:e8:b9:d1:7b:c6:49:b6:6b:2b:
0a:2f:38:a2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHHdxDBFicXIIXowDDEr+H0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTA2MTMxMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY3ZjhhNjY4M2NlZjYyOTQ4MjExZWJiZDBjZDdmNGIxNzI2YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqmpuggWiHl71Z+xlyUaIv2Afd8O
BU5OVm0QG7MvCEYos9dAZtUj0Q/RRyrcmFJYcsgrzuoeRaKVD3gliihSFm2a7yLB
y0qvquxyoYNnW0aTjhaeRGuNe+U9QsF7onbmQ3ub2lJ0egHQz/ZSAnt6BmnCBR+p
qxGwJq5hkjXw5WjVekDR5/poZhuEdB4/ygKr14RY0Uup6tT+VgWBTOqKNi6gpNb3
FXZSjVJgUqsrZUi/GDPWE8/CqzsOBOZ47crr5c6y/cyk4xR2U74MYEp1m+dVhCVw
Wy9irrNi2l+Q1Crmn+mV6fZnb/xdYgDyjwTu3c/VfPAEAbouDuljEoH+fQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEln+KZoPO9ilIIR670M1/SxcmwcMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvU1dmNHBtZzg3MktVZ2hIcnZRelg5TEZ5YkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAHK56yydzP4a10lQs5JKU66aC
vbL1a22+lip0aMCygYBnVfUx+MnmU8ZGrjb/zrW033bcP0ZC09ecdRxMIFPWiCTj
LEj7qidhEEvd2AjoATTZWutV6UO0v/zbxTmLcmzmP3c8JO1pX7lPOWUAnd+eyNVK
jJiQ90W19aQgI01hchchQHLFJENIyd9xLlcIEANIuBgavLS154QjayAQbX8xgFos
M1q8cwYsVNXIo40B7sJK8rbOMrltAI9kOprLciMvLTA/Nfy5ZHSvNQ2PiLr7MIYx
JObUOzWRqod3rrARNWizgQd9CRb4LjYK4ak/VKhX7RJ06LnRe8ZJtmsrCi84og==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:53:12 2025 by rpki-client