Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xro5-E_gwUUefG8vlpowKAl9X8o.roa
File: Xro5-E_gwUUefG8vlpowKAl9X8o.roa (raw, json)
Hash identifier: iCkJGsnDu5MbN84xp8mfSz0c4TvRAauNzx4DAST1Q5s=
Subject key identifier: 5E:BA:39:F8:4F:E0:C1:45:1E:7C:6F:2F:96:9A:30:28:09:7D:5F:CA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D152FDB450F75795B8398C4CDCE47080
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xro5-E_gwUUefG8vlpowKAl9X8o.roa
Signing time: Sun 08 Sep 2024 11:09:22 +0000
ROA not before: Sun 08 Sep 2024 11:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:52:fd:b4:50:f7:57:95:b8:39:8c:4c:dc:e4:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 11:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eba39f84fe0c1451e7c6f2f969a3028097d5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:a8:43:d8:1a:ef:25:84:d7:a6:7b:06:b8:
65:e0:39:95:74:17:af:65:75:f1:45:57:d0:62:36:
22:59:c9:11:62:ff:be:20:35:fe:89:7a:33:db:ec:
62:f2:b3:16:3f:0e:bb:78:97:04:68:37:66:f5:ad:
e0:82:1a:6d:ca:4e:a7:d3:6a:f5:58:34:59:99:83:
b6:f2:d8:14:43:c4:fd:de:0e:34:1b:77:c1:eb:f3:
60:36:7c:48:ea:d1:da:14:79:68:4f:df:fd:17:1d:
6d:d6:fe:a1:fe:ee:a5:64:05:cc:4d:71:60:9e:09:
27:42:99:33:e4:0a:ca:d5:47:96:59:a3:fd:33:1f:
0d:cd:97:99:a4:3f:8b:99:91:40:3e:c1:f8:ea:63:
cc:69:3b:5e:0c:4f:8b:48:d5:1f:54:c3:e9:18:95:
e2:ce:76:64:e0:da:e4:55:06:a6:31:a1:e3:ca:23:
23:6b:eb:1e:df:dc:6f:0f:77:53:79:2a:ad:1d:a7:
e6:07:fe:20:3c:3a:a9:b3:ea:6c:cd:6b:a9:f5:d2:
6e:83:4d:a0:01:77:0f:6b:b4:53:ed:58:dd:f9:4a:
1d:91:57:d5:be:9a:d4:1f:f8:ff:14:bf:ae:5c:a6:
3d:e2:f5:d1:3c:73:1a:fa:74:b2:c2:48:03:48:75:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:39:F8:4F:E0:C1:45:1E:7C:6F:2F:96:9A:30:28:09:7D:5F:CA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xro5-E_gwUUefG8vlpowKAl9X8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3c:a9:09:75:cd:75:d7:f8:08:47:17:7b:ba:7f:d3:bf:39:83:
9e:67:1c:13:8b:a3:e5:23:73:0d:8f:fb:3e:a2:89:e3:27:3f:
20:c9:93:77:cd:0a:92:43:c6:6d:38:31:6f:2b:ca:ed:36:69:
7d:aa:af:05:61:9a:9c:b5:4b:88:2c:1e:61:10:d1:6a:4a:21:
aa:a5:56:5e:20:20:b5:1f:57:98:b9:86:0d:09:fa:b5:58:c2:
fc:97:a4:37:19:6d:58:e6:16:50:69:c1:76:ed:09:cc:05:a4:
c0:65:e6:25:8f:90:fc:dd:84:14:cc:68:83:05:fa:8c:84:65:
a6:b2:53:4e:1c:2a:43:40:34:73:50:9d:1a:12:87:82:90:40:
f2:b5:95:01:6e:f8:ca:fa:30:31:13:70:e8:59:b1:6e:d9:27:
f8:07:d8:b5:21:71:66:44:76:3d:b8:b4:de:51:a8:14:44:7c:
4b:5f:65:35:4a:5a:f9:9d:da:04:94:b3:48:54:5c:8a:54:64:
38:ba:8f:e7:11:f1:ab:8e:6b:df:56:35:eb:5f:22:01:c9:eb:
a4:5f:cf:79:7e:97:f7:eb:29:41:f2:2f:fc:2d:cc:9f:27:f8:
29:b9:fd:fa:2d:1b:08:c0:02:fa:cf:68:1c:fb:e4:54:a8:48:
d9:95:ee:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:47 2025 by rpki-client