Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Utk7MaTwEgN8XMePslQzZRo86Z4.roa
File: Utk7MaTwEgN8XMePslQzZRo86Z4.roa (raw, json)
Hash identifier: GSwB6fykan06OfShulZ1oDZsO9UilTt7gWoaD+c1XWk=
Subject key identifier: 52:D9:3B:31:A4:F0:12:03:7C:5C:C7:8F:B2:54:33:65:1A:3C:E9:9E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916116147E56D949089A4F527E4C0B45AF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Utk7MaTwEgN8XMePslQzZRo86Z4.roa
Signing time: Sat 17 Aug 2024 16:05:22 +0000
ROA not before: Sat 17 Aug 2024 16:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:6115:3a8c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:61:16:14:7e:56:d9:49:08:9a:4f:52:7e:4c:0b:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 16:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d93b31a4f012037c5cc78fb25433651a3ce99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:95:f4:ca:3d:fe:75:58:02:1d:54:17:99:
6f:c9:63:4a:3d:4b:ae:10:a0:d8:24:47:e5:e8:59:
36:6e:17:1d:47:f0:e0:69:ec:31:d5:3c:a6:2b:ce:
09:d8:ef:26:d1:5b:11:61:29:5f:48:3c:59:69:00:
ea:ff:45:62:fd:4d:f3:93:38:df:2d:a4:f8:fd:d0:
25:b0:c0:bf:31:1a:a3:67:fb:ca:6f:e3:5e:d5:3b:
53:96:84:58:86:28:58:ba:11:94:fb:39:b5:c6:82:
32:0d:fe:41:8b:a0:69:7a:9c:36:c8:03:8b:ce:64:
e0:e6:1a:cd:92:9b:60:fa:b2:84:71:cd:6f:56:88:
08:99:79:09:aa:60:b4:f9:2b:0e:05:ca:ce:33:e1:
bc:db:21:de:34:c4:76:04:4e:a0:e5:c9:ed:7a:4d:
cd:3c:ca:e7:e5:33:85:60:30:73:88:f4:c1:94:9f:
4b:bb:aa:b1:d0:73:45:47:d1:af:85:d2:bd:07:64:
c3:1f:eb:76:ce:8d:97:54:f3:a4:05:07:37:47:aa:
ff:39:0a:5e:1d:c2:d2:22:a5:31:aa:ec:d2:d4:5b:
e4:e9:55:4c:0c:58:6d:33:28:7a:1b:06:37:cc:cc:
31:5c:99:7c:b8:2f:5f:af:50:bc:1d:2e:ed:55:88:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:3B:31:A4:F0:12:03:7C:5C:C7:8F:B2:54:33:65:1A:3C:E9:9E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Utk7MaTwEgN8XMePslQzZRo86Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:6115:3a8c/128
Signature Algorithm: sha256WithRSAEncryption
3f:a1:72:5c:f8:f6:b3:da:e5:74:cc:76:48:81:23:96:67:90:
e7:8a:6d:0f:9b:22:ba:51:11:4b:e2:30:1d:c5:25:02:59:5c:
9c:e6:f6:34:e8:0b:cf:52:53:21:23:13:86:6c:34:91:d2:9a:
ca:ad:47:7d:61:ac:81:ee:e2:8b:53:7b:6f:ab:08:68:40:78:
a2:3e:57:be:8d:82:7f:97:00:0b:41:01:8c:f4:3d:63:ef:3b:
b1:49:2b:33:31:98:f7:0c:8f:d6:51:75:d5:38:9d:e2:95:4f:
84:7b:26:ca:66:ce:e4:80:03:13:00:eb:ca:c1:66:09:48:3f:
a6:75:92:d0:06:ea:78:45:0a:0a:93:50:95:77:d3:89:05:6b:
47:63:38:93:9e:ac:ac:fe:c7:7a:d1:5c:20:db:56:09:e3:a1:
73:d3:07:ea:38:97:b9:64:af:8d:4b:93:0b:fe:62:d7:a6:48:
d7:4e:e8:be:96:ed:20:f3:42:07:72:22:94:1a:41:8c:f0:1b:
56:c1:6c:6a:2f:48:d4:05:56:44:e0:c2:ea:59:56:11:8d:58:
6b:82:5f:4a:b0:57:3b:2c:fd:a8:e4:b3:28:5f:b7:c0:47:ca:
12:fd:35:14:a9:55:c9:ac:a9:b7:76:fd:37:2e:cf:d8:64:5a:
dc:3b:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:45 2025 by rpki-client