Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_M0-oJ4s92R4t3VmSr7YHD58PXg.roa
File: _M0-oJ4s92R4t3VmSr7YHD58PXg.roa (raw, json)
Hash identifier: y7JIlzzt75azLL7HxQOhBZ+Nra3o1DVIc1iQum6N2nc=
Subject key identifier: FC:CD:3E:A0:9E:2C:F7:64:78:B7:75:66:4A:BE:D8:1C:3E:7C:3D:78
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019118268AB74E7E401F3222F6AEAC9C72CF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_M0-oJ4s92R4t3VmSr7YHD58PXg.roa
Signing time: Sat 03 Aug 2024 12:11:04 +0000
ROA not before: Sat 03 Aug 2024 12:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:26:8a:b7:4e:7e:40:1f:32:22:f6:ae:ac:9c:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 12:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fccd3ea09e2cf76478b775664abed81c3e7c3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:d5:84:94:2c:83:11:d0:5e:1e:5b:b7:b5:
bc:a6:86:94:82:fb:a2:08:61:5c:82:28:e7:d8:07:
75:74:63:42:0a:c3:3a:a0:2e:ca:d4:46:e1:9c:0f:
06:c4:b4:0c:9c:fc:47:53:1e:8a:c2:99:39:8f:67:
7b:20:ec:96:71:0a:fa:62:a2:2e:90:bc:17:77:5e:
3a:09:5f:cd:12:cd:44:3c:f8:ee:8a:f9:26:d9:82:
93:43:3d:99:9b:70:63:08:00:d0:eb:c9:b9:93:5d:
3e:ab:ee:0d:be:6b:03:b2:76:bb:4e:1c:b0:b3:64:
5a:85:e9:7b:ee:67:a4:18:f5:62:f8:94:1d:ed:54:
9f:48:c0:84:17:0e:a5:41:7c:ad:db:31:de:ea:07:
8f:54:8c:8c:8f:f5:d3:92:04:e3:0c:54:07:08:55:
69:2e:e3:81:db:3b:bc:e1:be:33:58:11:c8:08:eb:
62:83:5a:58:a0:75:5a:60:69:51:df:53:fd:a8:0f:
a3:f4:6e:62:07:7d:cc:a0:be:19:88:1d:40:2f:49:
7f:20:f6:7f:b6:1e:84:dc:af:0a:c0:08:db:44:9d:
74:03:0b:ab:df:c5:b6:75:9c:fd:d1:33:a5:bb:ef:
ca:9c:ae:40:92:2b:9b:29:1d:9d:12:4a:41:d2:6d:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:3E:A0:9E:2C:F7:64:78:B7:75:66:4A:BE:D8:1C:3E:7C:3D:78
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_M0-oJ4s92R4t3VmSr7YHD58PXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
93:aa:96:7d:d1:c9:fd:8b:0d:27:27:17:d4:f6:47:2d:4c:e0:
55:4e:f9:29:93:55:0e:04:18:8b:09:1c:f6:cd:00:2d:98:2a:
ec:53:06:0a:e1:b8:af:5f:ff:a0:6a:4d:a8:13:f4:36:fa:36:
c0:f8:3d:f3:06:0b:56:3d:46:fe:7f:81:83:22:12:58:a6:79:
81:44:64:31:e3:e6:f2:97:c9:67:07:b6:fe:de:cc:8f:44:0c:
ae:d6:65:01:ba:2a:d3:65:f0:a6:97:f2:c0:63:c6:8c:d5:65:
78:a9:33:8c:c0:4a:a6:e3:53:d7:9c:bd:c5:37:92:76:b4:fe:
ac:23:7e:1d:a4:81:f3:9e:3e:2f:61:3e:d7:9c:5e:b3:5d:ea:
a7:0d:be:c0:26:cb:1c:1d:f7:52:54:c6:be:85:d0:3f:3b:aa:
0a:0e:f4:d4:ba:60:82:fc:59:d9:71:1c:d3:dd:a6:73:37:88:
9f:b8:82:bd:94:c4:42:13:72:56:ef:22:a4:c8:ca:3a:bc:0b:
85:e9:f7:fd:88:a1:70:c4:f3:e0:19:e9:8a:8c:94:de:cb:10:
5a:fb:e3:dc:ec:6e:4f:59:70:e0:fb:42:fb:4f:8d:0e:76:dd:
50:87:b5:23:c8:e5:7f:13:1a:f0:7b:d9:68:f0:bd:a4:ea:dd:
46:26:38:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:56 2025 by rpki-client