Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TUEN7YkxlHbZiB8FeqVVxF_Pxgg.roa
File: TUEN7YkxlHbZiB8FeqVVxF_Pxgg.roa (raw, json)
Hash identifier: IxxFda+0aKllRg2I5RiPR+XgX9MVg5qD8DwVp3n57+E=
Subject key identifier: 4D:41:0D:ED:89:31:94:76:D9:88:1F:05:7A:A5:55:C4:5F:CF:C6:08
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194302109865BE5F893B0E7D25D9581B07A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TUEN7YkxlHbZiB8FeqVVxF_Pxgg.roa
Signing time: Sat 04 Jan 2025 07:04:19 +0000
ROA not before: Sat 04 Jan 2025 07:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:3020:e7ba/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:21:09:86:5b:e5:f8:93:b0:e7:d2:5d:95:81:b0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 4 07:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d410ded89319476d9881f057aa555c45fcfc608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:d0:10:dd:c5:e5:d3:d9:e3:1d:31:22:23:
6b:2c:aa:d5:35:97:a6:d1:a4:d6:60:71:21:d9:92:
de:3e:f6:fa:5a:5a:48:b1:7d:88:57:a7:39:46:49:
0d:dc:df:40:75:aa:b1:dd:df:4d:d9:c6:af:59:4a:
5b:ec:55:30:58:e7:9b:56:bf:c1:36:85:a7:2d:ce:
cd:5d:4e:58:64:af:da:11:3f:12:b1:1b:9f:c2:f1:
08:e8:89:72:0e:fc:e8:c5:47:65:e2:7f:9f:b3:85:
c6:c8:74:f1:fe:52:a4:38:65:e6:96:7b:57:16:0b:
50:4e:a9:2c:d5:94:37:d1:eb:5b:c6:9f:1a:93:3d:
51:71:31:35:60:dd:7d:a9:90:aa:cb:e2:82:81:e5:
48:23:a8:f5:45:74:59:25:c1:43:40:eb:8c:81:60:
d6:aa:44:06:21:34:6b:b8:36:0f:eb:1d:68:09:0e:
7d:17:7b:b0:3b:db:44:b2:bb:4c:12:6f:a4:39:36:
25:5f:52:a2:ea:4b:76:67:29:97:e9:3c:6c:14:c3:
e8:0c:06:7a:cb:e6:50:41:18:95:7b:2a:c7:9c:b9:
57:cd:42:ce:bd:21:53:bb:06:d4:a9:6a:09:8c:8c:
af:15:ec:80:e2:f4:2e:89:66:1f:4f:59:d2:a8:01:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:0D:ED:89:31:94:76:D9:88:1F:05:7A:A5:55:C4:5F:CF:C6:08
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TUEN7YkxlHbZiB8FeqVVxF_Pxgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:3020:e7ba/128
Signature Algorithm: sha256WithRSAEncryption
20:b9:fe:fc:88:d4:04:a0:79:1a:8b:5b:ee:4c:5b:7f:98:cc:
d8:24:0a:15:4f:76:09:6c:e3:17:b5:b3:36:a7:89:f9:b8:a7:
16:cf:40:11:b5:a0:b1:98:23:15:85:10:6f:c3:93:1f:4c:55:
71:0b:5b:7f:fc:90:bf:8d:76:88:91:bf:17:d1:67:91:04:2d:
11:f9:e7:c3:13:02:6b:4c:ba:44:6d:5f:d9:63:e4:16:87:9c:
d4:00:ea:42:21:ff:7a:ac:29:f9:52:fb:a0:e0:89:43:36:9f:
9b:e9:d1:b7:6e:ed:59:a1:41:da:b9:36:d7:24:dd:86:ba:bd:
21:79:d0:a7:91:40:3a:36:6d:a4:50:6c:22:be:bf:d2:7a:be:
4a:39:d5:2c:a7:26:2f:2c:58:93:0b:6c:17:f7:59:ea:3d:98:
e1:86:72:93:37:d1:9c:6a:ca:08:6f:96:5d:98:d8:ea:f7:b9:
76:14:98:ac:24:54:06:4b:75:dc:8a:fd:5e:5c:f7:98:24:fd:
bb:6b:94:4d:a0:1d:00:81:27:dd:bb:8f:42:39:9e:20:8e:eb:
37:cc:b7:98:02:dd:cd:13:0d:d3:7d:26:ee:3d:65:e3:b6:91:
27:c5:e4:81:51:a2:ba:85:82:49:ce:fa:40:d9:4f:7e:2e:5b:
c3:a2:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:35 2025 by rpki-client