Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/THAyYWAoBa03bf6hciwDh8H0dSs.roa
File: THAyYWAoBa03bf6hciwDh8H0dSs.roa (raw, json)
Hash identifier: R6De5bNZERGH7/Ak7dbe9UuoOIcqqn0sC8IS0JMQlt8=
Subject key identifier: 4C:70:32:61:60:28:05:AD:37:6D:FE:A1:72:2C:03:87:C1:F4:75:2B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C9CBCE949B4F10C6412ACBFB58023063
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/THAyYWAoBa03bf6hciwDh8H0dSs.roa
Signing time: Sat 07 Sep 2024 00:04:22 +0000
ROA not before: Sat 07 Sep 2024 00:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:c9cb:a2af/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c9:cb:ce:94:9b:4f:10:c6:41:2a:cb:fb:58:02:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 00:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c703261602805ad376dfea1722c0387c1f4752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:c6:56:83:5f:0a:fa:77:e5:ed:71:13:fe:
af:25:b7:0c:47:e5:8c:80:fa:95:8f:b1:ff:63:51:
bf:59:79:64:74:02:9a:e1:d9:1b:ad:da:e6:2e:09:
82:ca:c5:a8:56:f1:c9:2d:d8:4b:6b:75:9b:3f:e1:
f5:54:c7:21:d7:66:08:0d:42:c7:b3:a9:95:f8:2c:
5d:e6:24:91:bc:ce:67:0a:bf:38:7c:9d:e8:fb:3b:
ac:12:4a:1b:1e:b8:ff:08:ea:f1:a9:65:c4:1e:70:
0f:bf:8a:5b:5e:68:c7:1e:f8:db:08:f8:15:51:ac:
2f:9b:d0:16:db:00:a4:39:23:3d:69:2f:f6:b3:fd:
63:88:44:98:0e:f0:79:17:9b:c3:5b:b5:48:aa:d4:
54:b8:35:8a:f1:29:fc:aa:b2:5a:56:ab:7d:a7:ab:
4e:8b:ef:10:84:f3:ee:b8:88:7f:12:c9:31:11:63:
53:7b:40:27:c9:db:99:da:34:9a:c9:99:c2:f4:7d:
b8:02:aa:70:a3:e1:be:5b:26:69:31:c4:93:72:e1:
3b:ff:cf:58:ec:25:5c:35:b2:e1:ed:e4:10:ff:06:
6e:a1:57:ed:09:0c:f5:c5:e4:cf:b7:03:ea:a7:7f:
e4:d6:cd:80:b6:2d:7e:33:fb:72:e0:90:cd:a4:b5:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:32:61:60:28:05:AD:37:6D:FE:A1:72:2C:03:87:C1:F4:75:2B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/THAyYWAoBa03bf6hciwDh8H0dSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:c9cb:a2af/128
Signature Algorithm: sha256WithRSAEncryption
84:8e:ff:bd:bf:e6:cc:a9:c3:56:d9:b2:9d:e2:8d:6c:58:99:
c3:ff:ac:39:a5:67:e7:df:47:00:7f:1b:c2:0e:f3:c2:dd:fe:
d6:07:50:b5:ac:b4:7a:6a:5f:ca:ff:57:03:52:99:57:1f:66:
43:de:f8:2c:63:5e:31:a1:d5:32:67:d7:fa:50:4d:fa:39:26:
ea:93:87:8b:48:af:4f:3e:63:de:00:1c:d3:8e:14:5d:8b:05:
10:6f:64:c0:42:ad:74:03:2d:de:97:c2:25:87:7f:fe:80:17:
fd:7e:6d:f7:30:95:38:f0:ca:37:61:78:53:d9:fa:ed:a6:5b:
bd:e7:cc:2b:54:74:96:16:03:ad:8e:7d:3c:2f:5d:4b:b9:2f:
79:fc:ef:7c:22:f4:ad:be:cb:5f:ef:1f:0c:11:4e:42:03:5b:
e4:08:fc:66:5c:2c:3b:37:86:9d:59:79:4f:4f:8b:54:7c:3a:
66:6d:a6:07:19:57:61:d4:c2:15:20:66:01:e5:50:55:43:3d:
03:12:b9:61:59:58:7c:e0:db:36:87:06:45:17:fd:e1:ff:0a:
5e:16:fc:a8:ae:fb:59:3c:62:10:ac:7e:c4:fc:11:99:02:14:
5f:75:d4:98:99:c7:a5:0d:7b:f1:dc:ec:43:cb:38:10:65:51:
44:ef:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:23 2025 by rpki-client