Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TnhHB9C0BHdv9WCuxgTcY_Fuk9M.roa
File: TnhHB9C0BHdv9WCuxgTcY_Fuk9M.roa (raw, json)
Hash identifier: A9jXAJL+XMxR1ykNdvUNkuKlEzjXmprECRY+JKXLObU=
Subject key identifier: 4E:78:47:07:D0:B4:04:77:6F:F5:60:AE:C6:04:DC:63:F1:6E:93:D3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192F0D7670C3C79303403597F6BE55A4E0F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TnhHB9C0BHdv9WCuxgTcY_Fuk9M.roa
Signing time: Sun 03 Nov 2024 07:05:01 +0000
ROA not before: Sun 03 Nov 2024 07:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:f0d6:afda/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:d7:67:0c:3c:79:30:34:03:59:7f:6b:e5:5a:4e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 3 07:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e784707d0b404776ff560aec604dc63f16e93d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:64:82:49:80:10:e1:f7:31:ff:e4:86:2e:
cb:88:86:ad:5e:93:a9:a5:cf:2a:d0:82:5c:11:23:
a7:6a:b1:7e:bb:ea:39:14:31:4a:f3:be:0e:26:7d:
f9:bf:fd:3e:32:d2:0c:c9:d0:65:05:7b:0c:e9:37:
1b:e3:19:91:ec:35:a8:c9:06:c5:23:66:52:3a:b8:
39:4e:06:3b:98:5f:87:83:bd:24:6d:e1:11:09:08:
7a:f3:fa:e6:c5:9b:3d:28:bf:d4:cf:ff:04:6a:0b:
4c:df:15:31:93:4f:57:76:65:26:17:dc:07:63:c9:
65:4a:39:b3:83:4d:6b:37:fa:e1:60:d6:88:02:19:
df:e0:4e:8e:f4:36:d5:33:19:7e:04:fe:15:dd:34:
ee:b4:74:f0:4d:2c:28:e7:0d:d7:c6:0e:ef:08:2b:
63:fc:80:f3:b4:db:24:fb:d4:4c:ff:56:d8:51:8f:
3a:1a:f7:9f:14:33:82:35:09:50:14:fb:19:a0:76:
12:69:9b:ae:b3:2a:be:ae:2b:bd:7f:2e:cd:d6:cf:
36:3a:71:5f:75:8f:16:55:bc:4a:95:c7:8f:45:26:
18:04:4d:98:84:a1:ff:fd:5e:a8:ad:9f:41:30:32:
1f:42:22:08:99:61:ce:7c:59:34:4b:4a:56:3a:26:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:47:07:D0:B4:04:77:6F:F5:60:AE:C6:04:DC:63:F1:6E:93:D3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TnhHB9C0BHdv9WCuxgTcY_Fuk9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:f0d6:afda/128
Signature Algorithm: sha256WithRSAEncryption
79:3f:58:07:dc:e2:0a:41:d2:b5:f1:f4:bc:a9:ae:54:d3:c7:
c6:51:e0:21:90:4b:42:9a:72:a6:40:82:a0:f2:e5:89:4f:53:
a3:5a:6e:e1:f4:93:e8:74:93:dd:a1:d4:dd:9b:5e:73:23:49:
6b:f5:a0:b7:f8:e3:48:9f:78:26:7a:29:f7:86:d3:62:d1:22:
08:30:33:26:77:2a:18:fc:ec:c2:de:a9:26:15:7e:08:bc:9e:
35:07:a0:5a:00:09:0e:63:e9:58:1d:7e:f8:ba:1c:2b:f4:f3:
a9:73:2c:4b:4d:ef:25:0a:eb:af:67:ce:68:26:03:89:15:11:
4b:59:7a:be:f2:5b:68:82:4c:59:4d:0a:1b:56:93:1e:39:7e:
d6:1a:85:09:24:8a:b5:3b:0c:f5:1c:db:63:1a:8c:2c:cd:5f:
a6:c6:78:e8:7b:a0:ff:51:ff:10:2e:be:e4:e8:be:66:44:28:
fc:37:1f:a9:86:c1:55:90:f8:5e:4c:42:a9:f1:68:8f:16:9a:
32:c6:1f:ac:e0:35:23:c3:8f:67:63:fd:e6:be:fb:6c:bd:4b:
d7:40:04:52:97:4b:ba:54:24:14:69:6d:1c:17:29:7e:9c:4d:
ac:7f:74:1d:ce:e8:eb:17:76:69:f6:4c:4c:fa:7e:ee:cc:7e:
df:72:4d:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:56:45 2025 by rpki-client