Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TEE8QAK8QlcxdahUqz_P4KUPtgI.roa
File: TEE8QAK8QlcxdahUqz_P4KUPtgI.roa (raw, json)
Hash identifier: k8RCesWo7fMS6Y3DnYC3pfqh6JoNEjXtp+YuXwzBVf8=
Subject key identifier: 4C:41:3C:40:02:BC:42:57:31:75:A8:54:AB:3F:CF:E0:A5:0F:B6:02
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01946CACB966471527D25A76B4D680D78F23
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TEE8QAK8QlcxdahUqz_P4KUPtgI.roa
Signing time: Thu 16 Jan 2025 01:14:06 +0000
ROA not before: Thu 16 Jan 2025 01:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6c:ac:b9:66:47:15:27:d2:5a:76:b4:d6:80:d7:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 16 01:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c413c4002bc42573175a854ab3fcfe0a50fb602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:54:41:50:16:cd:b1:ac:9c:db:c7:ee:98:
bc:7b:23:29:2c:7f:a5:82:f1:13:ca:f0:62:e3:40:
c9:c4:ad:7a:b1:b6:45:c1:c7:cb:fa:05:1f:b2:71:
b0:52:a9:2b:92:0e:9d:b5:7c:7d:f6:06:dc:54:f7:
ef:22:11:4d:01:84:d6:ae:9b:85:1a:50:28:d0:2e:
d7:b4:ea:be:f1:ac:be:c1:9c:39:d9:3e:ad:76:a3:
60:15:62:cb:b6:15:07:35:48:bb:c5:d1:e3:cd:1f:
e2:b5:ef:e9:34:37:be:e8:87:d3:61:d2:4e:d2:17:
6c:47:6f:a3:f8:74:e0:d6:66:a4:73:e4:41:a2:89:
8b:a6:72:17:8e:83:98:41:de:40:04:3c:a7:7f:07:
9f:3e:de:72:ee:99:10:02:73:f4:63:c5:53:46:e9:
ea:0d:2f:0c:b2:18:d6:54:44:ef:49:bf:7b:d1:ae:
6d:55:e3:8f:2c:4b:81:c2:d0:73:66:e1:08:1d:65:
e1:69:0d:e6:fa:65:fc:14:3e:d3:50:f3:21:70:51:
ef:02:9b:a5:2a:ba:b7:14:1b:a4:0e:22:5b:80:61:
1b:7a:30:c2:52:0c:f6:f8:53:6b:1a:2c:52:d1:2a:
36:f2:73:de:fb:78:18:e2:b3:aa:36:d2:78:21:3d:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:3C:40:02:BC:42:57:31:75:A8:54:AB:3F:CF:E0:A5:0F:B6:02
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TEE8QAK8QlcxdahUqz_P4KUPtgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
12:69:4d:93:34:87:40:4d:17:95:56:08:bf:58:3a:22:25:36:
cf:8c:02:28:92:60:0a:5d:d8:13:31:06:10:b6:49:39:10:74:
75:e3:2b:6b:34:7c:5f:a9:69:49:dc:f2:61:19:40:9b:eb:cd:
e5:03:77:ec:ee:f6:37:28:b1:84:c4:7b:1e:18:84:1c:d4:64:
00:24:64:6d:55:fd:24:fa:ac:4b:b5:b3:4a:31:17:62:1a:8b:
76:8d:ce:69:9b:5e:c2:85:3e:21:71:eb:01:86:e0:48:49:83:
0e:01:e8:7c:c1:dc:ce:2d:d8:e2:17:1c:e7:04:b7:b3:95:06:
15:94:ef:e8:11:3f:a6:00:a1:74:55:3c:81:65:25:90:d9:49:
3e:d9:74:03:5a:38:bf:38:b4:00:8e:ba:33:9f:0f:89:3d:c1:
6d:69:04:42:59:08:a2:37:fc:7a:01:a2:b9:7e:d8:b0:48:57:
74:25:0a:37:66:83:af:fe:c7:0b:84:0d:4d:d3:9f:d7:b2:1c:
07:67:d5:d8:d1:12:25:9f:49:00:25:a2:40:b0:e9:a1:84:13:
83:e8:e2:6d:a4:ae:99:37:de:b9:53:7f:9a:63:11:59:c7:77:
77:c0:eb:ba:ee:ca:57:c3:85:eb:46:b0:0e:b6:eb:1f:fe:55:
58:35:0c:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:46 2025 by rpki-client