Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WHrqAsVeUrHwkHkDGUbgpv7Ykuw.roa
File: WHrqAsVeUrHwkHkDGUbgpv7Ykuw.roa (raw, json)
Hash identifier: wkEW1Pgjr0ZSFMsnjdUjE/Yd6e1cbMWIh6B+gYFMtiU=
Subject key identifier: 58:7A:EA:02:C5:5E:52:B1:F0:90:79:03:19:46:E0:A6:FE:D8:92:EC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019109FDF7AEBC72EAC38422F2C6F2991EFE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WHrqAsVeUrHwkHkDGUbgpv7Ykuw.roa
Signing time: Wed 31 Jul 2024 18:12:04 +0000
ROA not before: Wed 31 Jul 2024 18:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:fd:f7:ae:bc:72:ea:c3:84:22:f2:c6:f2:99:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 31 18:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=587aea02c55e52b1f09079031946e0a6fed892ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:2b:3a:31:a5:b3:3c:be:5c:27:d1:26:44:
95:9e:a4:8c:2a:57:3a:a8:dc:ba:07:a5:ec:36:39:
13:4b:b0:89:0c:e2:e1:6f:59:c4:0e:be:49:fd:78:
ee:4e:86:f0:59:55:0a:12:8e:1f:c1:30:b6:de:f4:
73:71:a0:ee:93:f2:44:9d:93:65:c4:9b:e4:7a:5d:
dc:db:3b:e8:b4:58:2a:02:aa:60:7a:66:d5:79:f6:
26:10:06:83:f5:12:ee:e3:24:cb:59:bc:b5:37:68:
ac:29:e8:39:c4:56:a7:f5:4a:fa:09:a6:d2:f3:87:
74:32:74:e5:bd:4c:16:bf:f3:30:8c:78:79:98:a7:
45:57:8a:5d:21:67:87:29:f2:a8:38:6b:50:fb:f8:
d2:96:1b:ca:6d:48:42:89:74:1b:ee:64:ec:ca:ec:
76:46:4a:e9:dc:ef:63:39:73:63:87:c4:ba:4a:4d:
d7:85:89:6b:ae:0b:0b:b5:84:b8:ec:66:57:ce:27:
38:76:d0:be:3a:f5:6f:a8:81:2e:29:04:a1:86:e8:
06:2d:ee:40:5f:27:99:45:5f:1a:d5:cf:34:e7:a3:
ae:b5:f7:5a:76:1a:eb:15:2e:08:8a:b7:7b:6e:82:
b0:d6:17:53:c4:8a:63:89:a8:82:2b:6a:c5:8f:58:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7A:EA:02:C5:5E:52:B1:F0:90:79:03:19:46:E0:A6:FE:D8:92:EC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WHrqAsVeUrHwkHkDGUbgpv7Ykuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
6c:4e:49:ec:81:ed:4a:52:cd:97:76:0f:3b:e8:ad:a3:d4:36:
fd:0c:00:6b:3c:0d:11:23:aa:04:b9:cb:bb:e0:13:c4:da:06:
23:63:0b:d8:63:fb:94:ed:c6:5c:be:96:ed:fb:84:47:f0:30:
df:41:db:01:7c:88:14:94:cf:fc:08:9d:f3:cd:27:54:ad:cc:
18:ca:12:aa:eb:35:dd:c7:52:b5:1f:ea:94:ac:73:b9:a4:c1:
49:84:33:84:09:e8:00:87:db:39:f0:5d:48:08:5e:d7:94:9e:
95:73:8e:e8:91:df:28:9b:4c:8e:5c:d5:bc:70:7e:0a:d9:1b:
5e:e8:8d:e6:6f:6e:42:f0:2c:b6:e2:44:e6:a2:fb:86:06:a3:
ee:a8:b1:01:8c:9c:a5:f7:47:8a:66:03:f2:68:6d:9c:ae:b0:
dd:52:32:12:11:af:98:76:38:26:f6:34:87:13:ed:63:f4:21:
93:c1:2a:4c:3a:fe:4b:a4:39:7b:ab:cb:9d:a3:73:7d:38:a8:
20:47:f0:a3:6c:95:ac:be:ed:9e:de:fd:8b:d5:56:75:b9:d1:
c0:67:48:08:f1:d5:5a:d3:a7:56:76:69:0b:89:b7:cd:7f:29:
a4:a6:4e:8e:30:98:13:58:8c:fc:52:ef:bf:e2:f0:5f:10:d1:
61:9d:34:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:57:51 2025 by rpki-client