Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/W5wOiSa8HlBMXMGoihB0bFnQVvw.roa
File: W5wOiSa8HlBMXMGoihB0bFnQVvw.roa (raw, json)
Hash identifier: RDB/NSAfGGUNcYkYa5ztBJfBTtBs6hv55ZFtW8DsnAE=
Subject key identifier: 5B:9C:0E:89:26:BC:1E:50:4C:5C:C1:A8:8A:10:74:6C:59:D0:56:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01937B086DE3CFC74F02F93ABAD6D6904D85
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/W5wOiSa8HlBMXMGoihB0bFnQVvw.roa
Signing time: Sat 30 Nov 2024 03:06:10 +0000
ROA not before: Sat 30 Nov 2024 03:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:7b07:9902/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7b:08:6d:e3:cf:c7:4f:02:f9:3a:ba:d6:d6:90:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 30 03:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b9c0e8926bc1e504c5cc1a88a10746c59d056fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:8c:74:c3:ea:04:bf:c8:4d:f9:02:64:7e:
01:1e:08:7a:60:c3:4c:33:73:c5:b3:33:e7:62:00:
9f:cc:fb:40:99:c2:0c:aa:fe:3e:62:74:e9:7b:8b:
cf:7e:c3:e4:17:ad:03:65:87:39:e5:ea:6f:7e:33:
a2:18:48:6f:f2:bf:f0:06:36:66:a4:79:79:f9:66:
21:5e:24:bd:be:bd:fc:79:e0:df:77:87:36:4c:4c:
28:d2:8d:2a:16:8a:4d:bd:d1:69:bf:b0:03:92:10:
b4:32:72:9c:d5:5e:83:fb:16:f8:03:08:7b:e7:e2:
2b:66:e2:13:23:2a:76:54:56:b5:3a:67:8c:94:3d:
8e:6e:e5:68:93:63:a0:31:c6:e1:61:53:58:9b:a7:
2a:9d:75:a4:2d:75:d3:e6:e4:0f:68:d3:2a:65:39:
df:a5:45:3b:2d:37:fa:c6:14:c9:1a:1a:af:1d:ae:
da:cf:86:f5:5e:4c:db:04:a2:ed:ae:96:5c:5c:25:
c2:7c:e2:0c:54:54:98:7b:65:03:2e:7f:b4:d6:6b:
5c:31:5f:f6:d5:89:1c:84:06:20:3b:47:5d:42:d3:
fd:3f:4d:a8:af:f9:1f:e1:d3:eb:cf:89:ea:14:06:
1a:18:0d:3f:23:7d:93:03:c1:7a:2b:19:bf:48:8c:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:0E:89:26:BC:1E:50:4C:5C:C1:A8:8A:10:74:6C:59:D0:56:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/W5wOiSa8HlBMXMGoihB0bFnQVvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:7b07:9902/128
Signature Algorithm: sha256WithRSAEncryption
4f:0d:11:06:e8:0b:7a:42:59:11:c9:03:09:81:bb:75:94:4c:
12:62:3e:be:14:50:74:e6:01:43:cb:43:da:c6:af:d8:74:f7:
f7:b0:3f:b2:d2:26:88:ba:5d:8b:50:f5:7a:5a:2d:4f:4b:7e:
2c:ae:d9:8b:e2:27:6f:22:f1:d4:42:da:1b:68:a8:ed:80:bb:
c2:6d:86:d0:5f:52:6d:7f:12:7f:e6:93:02:46:64:1a:fa:91:
0a:2f:62:f6:4f:4f:3f:31:83:32:a0:1f:b4:8d:5b:63:6c:0f:
d2:bf:6a:5f:dc:05:37:f2:33:c7:21:04:54:fa:f3:25:e3:0b:
f5:99:36:f0:be:66:f5:1e:0a:ad:ea:2d:1c:50:f4:b1:06:22:
2d:55:83:ca:07:1c:fe:ad:b6:b6:03:50:7c:2a:90:29:1b:57:
04:ec:2b:09:c6:03:c3:0d:72:7e:f9:80:84:8e:cf:62:54:29:
d4:4b:1e:47:fb:c6:b5:b2:2b:0a:9f:72:77:24:64:d9:2d:c8:
04:f5:4d:f4:88:b0:30:5e:0e:9e:96:59:53:9b:75:79:68:e6:
6f:13:8a:23:2a:71:34:6e:1b:76:b1:fd:b6:95:5f:e3:70:d8:
d9:ad:c2:f2:6a:46:18:46:f7:ad:5a:30:fb:47:7f:8b:95:58:
c2:3c:15:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:52:46 2025 by rpki-client