Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VsM2VCJ_OPzjKatMfZNE0WQ9A08.roa
File: VsM2VCJ_OPzjKatMfZNE0WQ9A08.roa (raw, json)
Hash identifier: bDdNJzja81pwvGdXcil5GEA3LPkv/96axc9T9uPP/TI=
Subject key identifier: 56:C3:36:54:22:7F:38:FC:E3:29:AB:4C:7D:93:44:D1:64:3D:03:4F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B9827DEE6BAD8DCDF2D0EEB6A0DD86DD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VsM2VCJ_OPzjKatMfZNE0WQ9A08.roa
Signing time: Tue 03 Sep 2024 20:10:22 +0000
ROA not before: Tue 03 Sep 2024 20:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b9:82:7d:ee:6b:ad:8d:cd:f2:d0:ee:b6:a0:dd:86:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 20:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56c33654227f38fce329ab4c7d9344d1643d034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:c4:4e:79:16:4b:65:77:8b:bc:50:dd:1d:
93:e4:2a:04:7e:dd:cf:b1:41:c0:e8:b5:32:ca:dc:
8b:6d:9e:06:57:12:5d:c5:a3:1b:55:31:a1:77:08:
2d:73:a9:6f:b9:1d:3d:66:d4:73:9a:99:8c:49:dc:
89:7e:43:f7:e1:71:58:24:20:aa:86:d3:de:a1:24:
80:49:9d:67:d6:d8:91:92:38:9d:c8:0f:b7:67:be:
21:89:be:05:a1:52:0b:78:0c:e4:79:a8:48:35:9e:
9c:fa:b4:54:ff:5e:30:7e:11:d7:15:85:1c:1a:ad:
52:83:e4:dd:b3:c8:ad:58:4f:50:e3:4c:8f:71:c1:
bd:7c:5b:c3:cb:7c:d0:c6:4e:28:4a:82:c7:bb:1a:
ad:2b:7b:02:9a:10:f8:3b:0c:86:c7:ff:dd:89:45:
b7:d0:4a:18:ff:a9:97:08:3c:0d:f0:6c:ab:4f:95:
09:6e:28:ea:2b:cc:29:fb:64:f6:69:e3:6b:6a:b5:
03:41:87:bd:ce:94:05:00:12:f2:dd:66:6e:a9:a0:
5d:3d:f9:ac:7d:a1:ef:9b:25:98:51:45:f6:76:00:
83:8b:a8:92:b3:15:5f:ff:54:65:8d:eb:3c:00:19:
14:8b:2a:13:1f:14:38:cb:d4:60:29:2d:b7:76:b7:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:36:54:22:7F:38:FC:E3:29:AB:4C:7D:93:44:D1:64:3D:03:4F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VsM2VCJ_OPzjKatMfZNE0WQ9A08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
77:47:c6:1a:c8:4e:d2:35:b8:23:c4:44:a1:31:f7:50:61:d9:
c7:e5:47:62:f9:8b:af:8a:4d:77:45:16:93:1d:e7:e4:e4:9a:
a9:93:2c:83:88:5c:3a:2f:ba:6d:a9:81:89:60:e1:df:e4:89:
01:91:e0:87:83:91:9f:a1:2a:8e:f7:be:79:8a:aa:5f:ec:a6:
e5:70:b7:7a:01:20:7d:57:dd:6f:2c:a9:d4:be:08:68:cb:7f:
27:09:6e:f4:75:e8:4b:0b:8e:d6:6f:49:23:e7:bc:ac:fd:ac:
e4:f6:16:87:f3:7a:bf:0c:1a:bc:13:c6:a4:1d:07:45:f8:97:
49:40:41:a2:a8:c7:dc:35:45:9f:c6:d8:16:c3:d0:f1:50:61:
cb:db:c2:a9:bf:47:d6:71:41:00:c5:41:8d:ab:d7:f9:7f:cb:
02:65:45:d4:70:ce:04:cb:e5:cf:ef:d7:be:a5:76:01:f0:c9:
e8:66:83:92:3d:cc:fc:ec:29:07:07:03:31:48:44:a7:81:64:
e6:5c:a0:74:31:37:59:ac:04:e3:7a:d6:6b:aa:ce:39:c6:63:
07:6c:89:2a:8e:6e:1f:1f:b2:46:5b:8b:8a:85:af:b1:52:88:
66:bc:73:52:dc:f7:5a:8f:69:f2:47:9e:ea:77:a4:45:2e:2e:
85:31:27:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:01 2025 by rpki-client