Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SzEDu-6IIJf-BqFx-1MAKvbZw84.roa
File: SzEDu-6IIJf-BqFx-1MAKvbZw84.roa (raw, json)
Hash identifier: t6prbODVrSWEexr080r4dgl2vlu5XxZTG4VmYuZzT9c=
Subject key identifier: 4B:31:03:BB:EE:88:20:97:FE:06:A1:71:FB:53:00:2A:F6:D9:C3:CE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194464251D92428E2F8B365E7007679D72F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SzEDu-6IIJf-BqFx-1MAKvbZw84.roa
Signing time: Wed 08 Jan 2025 14:12:18 +0000
ROA not before: Wed 08 Jan 2025 14:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:42:51:d9:24:28:e2:f8:b3:65:e7:00:76:79:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 8 14:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3103bbee882097fe06a171fb53002af6d9c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:de:e1:6a:ba:03:34:fa:5c:06:60:94:48:
d4:d4:ff:b4:86:c8:d0:e0:e2:9a:08:7e:0e:58:2d:
43:05:e9:0d:d5:f1:9d:39:de:e2:56:71:43:b7:86:
cd:22:47:ff:3a:39:1d:b0:75:a1:43:2b:53:87:4e:
f2:ba:e3:58:3b:bf:97:6d:77:87:00:7a:c9:f7:d5:
66:7a:00:f6:24:a5:c8:3a:dd:2b:4c:01:11:89:b4:
f8:2b:b5:05:d1:27:5e:72:3b:bb:30:a8:3d:45:b0:
57:bd:08:74:25:f2:69:79:a6:94:5a:44:89:18:62:
78:13:6e:29:75:3e:d5:96:3b:a3:fb:99:c3:e9:7d:
ca:73:de:82:6e:ef:67:a6:d8:73:3c:7a:ce:1f:93:
f1:0c:8d:bc:0f:9f:e6:0d:3e:72:87:43:74:9d:98:
72:9e:5a:60:47:0a:29:8f:d6:9a:b5:f7:5c:f3:24:
3c:97:8a:6f:dd:77:7b:c0:02:e2:df:c9:b7:36:e0:
88:3a:ba:7f:98:0d:a8:f9:18:e8:7d:b7:50:4c:6c:
f1:0f:50:e3:a6:1e:51:ab:af:be:e1:4f:57:6e:52:
3b:4b:e9:2f:73:15:2d:2d:b1:e3:8b:bd:54:89:9a:
84:1e:94:09:fb:92:2a:74:89:3f:c4:52:bb:de:21:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:03:BB:EE:88:20:97:FE:06:A1:71:FB:53:00:2A:F6:D9:C3:CE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SzEDu-6IIJf-BqFx-1MAKvbZw84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
5c:ad:4b:f8:1a:e5:a2:3d:68:21:62:37:05:5d:59:12:de:10:
34:0e:35:cc:a2:3b:c8:c5:4b:98:9c:4a:ae:c3:f8:31:16:a0:
66:fc:93:20:a2:db:fe:20:0a:44:eb:9a:c1:96:14:0f:45:92:
79:b4:5d:ff:53:7b:80:76:7b:41:72:9f:b9:ef:ec:fb:3f:f1:
8b:c3:5e:af:eb:d2:3f:46:d4:47:c7:af:33:3f:d1:16:df:53:
61:f3:f0:30:2e:4e:8c:54:86:8b:56:d7:85:d4:53:ad:48:d2:
7d:7d:75:bf:66:18:1f:9e:82:de:89:60:08:0d:5c:dd:cf:e1:
f5:3e:14:e0:d8:92:a9:5b:da:4b:1e:69:d9:fe:77:9e:d3:bd:
f4:95:19:9b:e2:e4:e3:94:da:57:88:c5:d0:01:2e:38:ea:74:
fb:c8:bf:2d:f9:d1:06:9d:6e:11:ec:4a:23:56:35:98:df:1b:
3c:de:ea:e5:6c:55:82:c4:e1:03:83:ae:c0:20:de:42:46:3e:
05:ba:9e:46:62:5f:12:b1:66:68:cd:aa:4a:8a:37:ef:8f:44:
4f:57:f3:a2:4d:be:07:8b:cf:c1:9a:8e:d8:58:c1:d3:72:cf:
55:c6:39:67:06:9b:30:46:97:69:ac:a6:3c:87:da:4c:4c:80:
03:9c:7c:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:20 2025 by rpki-client