Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Se5KtCmx7SfHSJoUSOdteRAg0yE.roa
File: Se5KtCmx7SfHSJoUSOdteRAg0yE.roa (raw, json)
Hash identifier: Wo4VBJI3Z2GFxG9+MrOjaFvVYqhopmPaq5Sm+7XXxmw=
Subject key identifier: 49:EE:4A:B4:29:B1:ED:27:C7:48:9A:14:48:E7:6D:79:10:20:D3:21
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913C6A4A9C6E45EBD1F5764A46797C7B0B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Se5KtCmx7SfHSJoUSOdteRAg0yE.roa
Signing time: Sat 10 Aug 2024 13:11:24 +0000
ROA not before: Sat 10 Aug 2024 13:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3c:6a:4a:9c:6e:45:eb:d1:f5:76:4a:46:79:7c:7b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 13:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49ee4ab429b1ed27c7489a1448e76d791020d321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:05:a0:1f:c3:48:e1:e7:72:7c:87:28:d4:
4a:3f:5f:ab:9e:0d:16:66:a1:e7:5c:9d:ce:88:23:
b7:5e:2d:0c:f8:fc:4a:93:7a:42:be:2f:0b:f3:73:
f2:21:fd:98:b2:4e:8f:76:db:d3:2a:57:93:fe:d3:
ca:e4:bd:b6:09:d2:2c:6e:1b:61:5c:2a:35:55:60:
8d:b3:79:3b:90:93:50:61:a9:e6:6d:7b:40:52:ac:
7f:5a:c9:ea:bb:ca:a3:a7:30:4d:ca:bd:b0:23:ef:
9f:2c:3f:2c:00:84:40:7e:24:43:80:a0:d6:2f:4b:
b3:ba:ca:a1:47:7d:34:b0:78:1a:e1:9b:51:06:7c:
cf:16:2c:66:9e:2c:13:fd:00:40:ed:59:dc:44:12:
27:4e:df:57:23:7e:f4:0f:be:02:89:f7:32:ac:f9:
fc:6f:f8:99:78:e3:dd:83:48:96:d3:50:25:02:f2:
29:fb:dd:a7:cb:d2:4a:47:35:6a:ce:84:ab:6e:58:
a1:f2:34:af:13:6b:d8:0e:4c:71:6b:3b:f9:7d:f6:
9b:11:7d:24:85:03:d7:c2:47:b8:10:2d:a1:9e:e1:
de:b9:eb:f8:1d:dd:dc:2d:ae:9f:d7:a9:a2:41:3f:
86:03:67:aa:3a:cf:dc:32:04:c8:fa:74:76:c6:2f:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:4A:B4:29:B1:ED:27:C7:48:9A:14:48:E7:6D:79:10:20:D3:21
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Se5KtCmx7SfHSJoUSOdteRAg0yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5b:80:16:17:41:fe:a3:fb:2e:93:89:5a:4b:09:6c:01:bf:96:
aa:b0:6c:e0:35:2e:99:d3:66:da:02:47:8c:d1:b9:55:71:0e:
bf:9c:5f:ff:d6:98:5d:41:27:83:61:fe:86:fb:42:01:7f:18:
fe:25:1b:a0:89:01:cb:1c:e4:7b:2c:14:2b:85:7b:f1:19:79:
be:2f:cd:69:21:ee:29:52:da:7d:eb:4b:a6:9d:b7:49:0d:b8:
f0:7f:c4:b3:9d:17:05:6f:b6:cc:ad:bb:f7:b6:a1:77:c7:ba:
35:98:41:d9:d5:e6:9a:c1:0e:00:59:1c:fa:41:ee:ed:2c:1d:
6d:78:17:61:9f:82:2d:45:74:a1:74:d5:f9:d7:64:b7:69:6f:
c1:ed:f5:8f:01:05:04:a2:34:99:06:47:95:c8:3d:a0:70:d7:
8e:22:5e:fc:6d:2e:5e:84:9a:16:a2:05:58:79:eb:7c:65:ec:
e6:b8:b2:d2:aa:cc:92:ba:fa:00:5d:1a:28:04:8c:34:2c:6a:
8a:fa:30:7b:2d:7c:ea:b7:30:3e:13:98:8d:03:d4:31:76:2b:
fd:56:ef:a1:b0:ac:02:af:79:6a:89:b5:34:c4:fe:44:78:ee:
55:59:13:5e:1a:60:0a:63:4d:51:cc:af:35:5a:b0:cc:fa:c6:
02:d6:aa:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:08:41 2025 by rpki-client