Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TWm4srF9SzJYpyP7bHD0yzAalVw.roa
File: TWm4srF9SzJYpyP7bHD0yzAalVw.roa (raw, json)
Hash identifier: 1ywPCM0oAAmmktAZe5bg2sljZX3wv1mNqM6GuDKVhFs=
Subject key identifier: 4D:69:B8:B2:B1:7D:4B:32:58:A7:23:FB:6C:70:F4:CB:30:1A:95:5C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192C5EC662F9DD8E33ED301C569B1DE5AD6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TWm4srF9SzJYpyP7bHD0yzAalVw.roa
Signing time: Fri 25 Oct 2024 23:04:17 +0000
ROA not before: Fri 25 Oct 2024 23:04:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:c5ec:5c49/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c5:ec:66:2f:9d:d8:e3:3e:d3:01:c5:69:b1:de:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 25 23:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d69b8b2b17d4b3258a723fb6c70f4cb301a955c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:bf:9a:c3:0b:f2:3f:66:49:eb:bc:b1:16:
ee:9e:17:83:a9:10:8c:bd:62:b5:25:0e:14:2c:b4:
1e:39:e0:dd:8a:18:df:be:2f:e1:cb:14:64:15:af:
2b:9e:67:1a:cd:0e:8d:c9:aa:ed:d5:5b:09:69:e3:
a6:16:8c:d3:88:25:c8:61:38:9c:49:f7:00:26:0f:
12:f6:25:a7:63:85:1a:8b:51:f0:2e:a3:aa:16:54:
68:09:83:4f:97:3e:20:98:5d:1c:d9:15:b4:45:25:
7d:df:4d:14:60:92:25:b2:f6:4b:8c:57:cb:9c:96:
04:49:5c:88:1c:6a:a5:5b:7f:32:33:22:6b:46:66:
2b:76:50:78:05:f2:b3:a6:13:12:1b:62:3c:cc:e7:
21:bf:bb:af:a8:5d:f9:c5:45:3f:41:1c:a5:75:77:
ce:8e:a9:93:30:07:9f:b5:7d:54:6e:8d:24:21:9b:
98:d6:c8:8c:b1:9a:ae:e8:77:70:ad:01:11:26:8b:
40:64:68:7f:c3:69:e2:b3:14:8a:84:f5:39:5d:3c:
07:95:a5:cc:98:63:df:f2:d3:65:7f:4f:3a:41:cf:
b2:6a:28:ea:f8:cd:2f:49:99:54:5f:ba:f2:08:b4:
ae:1e:03:7c:91:fd:a7:be:44:b1:fc:13:c4:c2:34:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:B8:B2:B1:7D:4B:32:58:A7:23:FB:6C:70:F4:CB:30:1A:95:5C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TWm4srF9SzJYpyP7bHD0yzAalVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:c5ec:5c49/128
Signature Algorithm: sha256WithRSAEncryption
1c:47:92:fa:5e:bf:a3:56:72:75:4c:14:f5:2c:3e:ba:27:d1:
fc:50:7a:9e:cd:83:7a:45:4e:14:1e:de:27:4c:c8:0d:df:2b:
13:61:04:f6:e8:f3:cd:1d:ee:77:d1:b8:64:8b:d1:74:12:97:
c3:45:bf:02:72:7e:ff:d3:a8:49:89:ea:f4:86:11:96:cf:5e:
c1:cc:f3:b3:d5:3c:d7:75:73:a7:d5:b5:fe:af:b6:74:53:4a:
08:31:d3:77:10:5e:79:28:66:60:05:de:8d:a2:d8:bd:b2:08:
d7:cb:7a:54:f3:ba:3d:64:50:f9:2e:7a:33:32:0e:43:f5:1b:
45:81:e4:3b:14:a2:dd:36:a8:92:c0:c4:49:fc:ed:8f:6b:6c:
88:0c:b9:ff:97:1c:e9:b1:19:f4:9d:df:61:2d:34:4b:7d:56:
cc:f2:df:aa:0c:b3:a4:47:b1:60:57:b6:b3:6b:05:ee:28:c1:
8d:d7:c1:3b:ac:13:0b:cd:31:e8:b4:eb:bb:8c:78:00:81:aa:
c3:60:d9:8e:b7:bd:2f:b5:dc:c3:e8:f3:c8:46:cb:d9:19:58:
13:00:aa:2b:64:5d:08:40:a3:d9:ee:10:db:b3:ca:98:2d:94:
cf:d3:4e:7a:5d:18:2d:a4:d8:d6:78:c8:67:e4:71:5e:da:d8:
a8:b9:92:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:16 2025 by rpki-client