Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UT-CoRRWWTVqIICTHgVgAi8bZww.roa
File: UT-CoRRWWTVqIICTHgVgAi8bZww.roa (raw, json)
Hash identifier: QZ6jpsEQg+zFUhHVG6shCBsdL4zGP96fBTPUzOixHAY=
Subject key identifier: 51:3F:82:A1:14:56:59:35:6A:20:80:93:1E:05:60:02:2F:1B:67:0C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019453221A67793EF13978BF0E715A7D81C6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UT-CoRRWWTVqIICTHgVgAi8bZww.roa
Signing time: Sat 11 Jan 2025 02:12:11 +0000
ROA not before: Sat 11 Jan 2025 02:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:53:22:1a:67:79:3e:f1:39:78:bf:0e:71:5a:7d:81:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 11 02:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=513f82a1145659356a2080931e0560022f1b670c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:33:b4:ee:30:c1:22:44:b1:2f:7a:99:37:
48:c6:f7:ac:91:aa:e6:a5:f4:9b:7a:e4:47:22:99:
a7:b4:ae:5e:5f:67:1e:0f:66:8e:58:79:a2:e6:40:
8e:1f:e6:d4:68:ca:e6:27:9e:45:fa:6b:c2:be:48:
9d:f6:f9:da:50:b8:35:8b:01:66:1f:24:46:eb:b0:
b0:d6:3d:85:2f:1d:6a:81:ef:c4:92:8f:fc:6c:ce:
c3:a3:1e:eb:bc:2e:17:76:68:f2:84:89:f2:28:da:
1e:a9:0c:85:b3:06:5c:83:9c:85:ee:33:c5:56:07:
dd:4a:ad:cb:e9:3f:39:9b:69:ca:2e:0d:c1:ea:3b:
50:3c:1b:37:16:b6:5a:82:16:89:86:ab:2b:a9:db:
43:e8:b9:5c:fd:be:f2:05:5a:9c:45:9c:7e:9b:03:
43:e5:35:2c:a3:7a:6a:14:cf:ca:89:7b:88:fe:fa:
38:2d:2a:c5:83:cd:ab:19:c7:a2:23:21:c8:ee:5b:
6e:d2:e8:e9:96:f7:cc:e9:68:c0:a3:ff:a6:d4:d2:
42:2a:2b:40:59:64:3e:e2:04:31:30:2e:70:ef:8b:
7b:61:a1:70:20:f3:1b:15:c2:3a:b7:4b:f4:0f:dd:
a6:56:97:00:c0:3f:d9:35:61:f3:b2:fa:33:74:e3:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:82:A1:14:56:59:35:6A:20:80:93:1E:05:60:02:2F:1B:67:0C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UT-CoRRWWTVqIICTHgVgAi8bZww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
0e:4a:96:cc:47:39:7f:07:8f:39:39:66:13:7c:ac:a8:eb:da:
0d:46:b5:3e:03:4d:82:12:b0:19:d3:3d:e7:68:eb:3e:aa:ce:
c6:11:b1:1b:ff:13:50:44:fa:dc:b6:35:96:00:f8:40:7f:e2:
a3:b5:3a:6d:f4:ea:cc:5d:65:30:77:c0:48:40:31:83:00:85:
50:7d:79:09:f9:e7:a9:ab:1f:96:6e:e4:d7:82:ae:c0:25:7b:
0e:67:12:00:8c:48:99:e1:ca:2b:11:07:8c:39:e7:cf:58:18:
8e:b0:e8:c1:e9:a0:88:95:9e:08:ce:3b:4a:e2:4a:79:a0:0d:
dc:7e:66:8d:f4:a1:28:9d:ad:c5:99:ea:c9:77:98:09:f3:f1:
3b:0b:7b:4c:33:6b:b7:c6:f4:a6:74:5e:12:e8:4a:c4:11:47:
8f:78:7e:ae:66:4f:f0:6a:24:d9:bf:5f:cb:7b:8b:ff:1f:b2:
5c:22:fa:ca:a6:02:29:0d:11:08:6e:0b:e4:d2:c8:76:98:2a:
2b:65:3c:62:0c:06:fc:80:8f:a4:c9:80:29:96:a8:c0:18:bb:
9f:f1:9c:0b:cc:6e:3f:7c:b8:4d:10:2f:91:42:60:3d:3d:72:
1b:49:16:aa:84:9a:4e:1a:b6:86:d2:f9:07:28:2b:ef:bd:bc:
41:8d:71:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:43 2025 by rpki-client