Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TDhSniIUf0WGTmbUd4nSwtuTQ1A.roa
File: TDhSniIUf0WGTmbUd4nSwtuTQ1A.roa (raw, json)
Hash identifier: /rmB8B++DB338DmNPE/koo8441AspHgqudFuXHxbA2E=
Subject key identifier: 4C:38:52:9E:22:14:7F:45:86:4E:66:D4:77:89:D2:C2:DB:93:43:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01937D2CD424A0EF8A20B3B4B3A6CAB7546D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TDhSniIUf0WGTmbUd4nSwtuTQ1A.roa
Signing time: Sat 30 Nov 2024 13:05:09 +0000
ROA not before: Sat 30 Nov 2024 13:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:7d2b:f57d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:2c:d4:24:a0:ef:8a:20:b3:b4:b3:a6:ca:b7:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 30 13:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c38529e22147f45864e66d47789d2c2db934350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:68:5f:17:aa:f8:98:15:46:49:3c:b7:a7:
f1:12:12:29:20:9f:c7:02:ce:cd:17:fc:32:bf:99:
88:17:56:86:ce:f4:8a:61:26:6b:7a:b4:ce:2c:f2:
a9:4e:e2:68:4e:46:07:cf:88:5d:a2:d2:4e:ce:30:
d1:7f:d0:7f:f7:57:e8:f1:e5:8b:f6:ed:ea:18:b6:
57:81:0d:ad:22:02:92:d2:ae:a8:34:b3:60:aa:82:
ad:61:9b:a0:8c:02:ac:f9:4d:9a:b5:fa:86:dd:33:
a1:a7:7b:34:89:62:5e:c1:19:80:65:40:f1:f5:9d:
b3:41:c1:ca:ec:6a:df:c1:17:c5:82:fe:07:31:06:
55:c1:81:f3:85:6d:b2:53:65:08:0f:ca:9d:39:47:
7f:6b:fa:8f:50:91:f4:2a:45:0e:c4:3e:55:8f:27:
29:37:6c:b7:f3:0b:5a:18:fa:f5:0c:34:4b:7f:47:
f9:97:bd:80:09:6f:bf:9c:d7:6f:e8:9e:b4:62:83:
3d:9e:34:a2:c9:d0:0d:e1:37:c1:63:b6:ab:e2:b6:
84:f9:88:58:6d:7f:a3:a8:79:41:cb:4d:2f:04:31:
f8:b3:8e:2c:08:30:aa:df:a3:d2:7c:b6:7a:9b:76:
35:df:99:79:84:b0:25:65:31:5d:77:98:c5:25:e3:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:52:9E:22:14:7F:45:86:4E:66:D4:77:89:D2:C2:DB:93:43:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TDhSniIUf0WGTmbUd4nSwtuTQ1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:7d2b:f57d/128
Signature Algorithm: sha256WithRSAEncryption
45:ca:27:8e:09:e4:3e:c7:94:90:0b:d2:77:c6:8d:dc:01:58:
ec:7d:74:08:12:b4:71:ae:97:ed:a7:d4:10:06:91:37:26:16:
bc:6b:09:c1:3c:43:32:88:cc:4b:7d:c3:eb:7e:38:0c:82:fe:
c8:90:f6:21:03:c0:16:e2:04:5d:ba:0f:da:e9:be:34:97:67:
e7:f3:04:51:bf:35:ba:03:28:80:4b:e6:22:26:3a:5d:25:11:
33:a5:49:eb:c1:a4:9f:4a:c1:98:92:5c:10:68:87:30:a2:17:
66:34:8c:64:29:e8:c3:da:51:37:67:fd:cf:cb:25:03:bf:34:
a9:43:69:36:00:ce:b7:88:21:e8:b0:2c:2d:08:81:9b:61:b1:
1a:f5:76:02:3c:98:e5:f9:56:34:3d:7c:a9:c3:59:05:a5:66:
8d:55:89:c1:d1:0d:ea:2f:85:bf:6b:67:b9:6e:47:04:79:15:
79:85:48:23:d5:c4:73:a9:e5:56:82:57:a1:e7:65:fa:e5:23:
74:38:ce:31:96:bf:ab:93:3b:fe:d9:c0:4f:a2:34:56:ab:cc:
be:d4:f6:4f:79:09:21:f3:2b:9e:c5:16:98:c3:5e:a8:d8:c0:
cb:4e:a8:c1:a5:af:c1:0a:e3:4d:bb:58:6d:4f:16:c9:f4:6d:
ef:c3:fe:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:35:20 2025 by rpki-client