Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_aiBU6dA9aeYk-4wGsLWtBfUSU0.roa
File: _aiBU6dA9aeYk-4wGsLWtBfUSU0.roa (raw, json)
Hash identifier: o5WH74EqhDmoVU3vKQFcWnjJ5+F/3+kDSx4aN4RFEw0=
Subject key identifier: FD:A8:81:53:A7:40:F5:A7:98:93:EE:30:1A:C2:D6:B4:17:D4:49:4D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01920083C6AD0C8ADB357E4FB9A29EA713FA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_aiBU6dA9aeYk-4wGsLWtBfUSU0.roa
Signing time: Tue 17 Sep 2024 15:04:48 +0000
ROA not before: Tue 17 Sep 2024 15:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:83:3f0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:83:c6:ad:0c:8a:db:35:7e:4f:b9:a2:9e:a7:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 17 15:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fda88153a740f5a79893ee301ac2d6b417d4494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:3d:53:60:95:e5:c8:5e:10:01:23:34:a2:
18:02:34:75:2d:44:32:7d:8c:a8:b4:90:6d:de:88:
0a:8a:d4:ec:50:a2:59:65:b0:c3:36:08:46:f3:a1:
30:8c:31:0d:36:51:73:a6:cc:cb:6e:98:07:3b:41:
41:28:f5:1b:9e:56:95:1e:4c:34:40:6d:b6:75:d0:
6f:ce:0d:03:58:fe:f5:41:8b:4e:25:85:26:b3:2b:
19:75:8c:0f:07:1e:09:5f:d8:45:e2:a0:66:7e:1c:
fb:c9:d2:3b:9f:e4:66:1c:20:dc:95:1c:fb:bd:11:
2e:09:aa:7b:af:e6:e7:ad:a5:b5:b8:21:a9:15:9c:
a8:6f:33:83:0c:bb:1f:80:a8:41:71:68:f8:7d:28:
0f:ff:17:b2:b4:cd:8b:d8:e4:d3:77:34:29:d3:71:
18:da:26:55:d3:41:fd:00:22:48:05:52:4d:e5:fe:
72:a4:16:7d:10:af:2c:bd:d3:06:3f:f2:d7:26:77:
d2:ec:a3:18:68:f8:c7:e0:45:10:35:41:1b:8e:1c:
e5:13:02:4f:d8:31:4f:0b:cf:2b:da:1b:a5:3c:4d:
b3:bc:a4:1f:65:47:38:df:64:0f:7f:59:be:b7:25:
8f:2e:0b:73:f0:3e:48:ab:87:be:35:99:81:19:8d:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:81:53:A7:40:F5:A7:98:93:EE:30:1A:C2:D6:B4:17:D4:49:4D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_aiBU6dA9aeYk-4wGsLWtBfUSU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:83:3f0b/128
Signature Algorithm: sha256WithRSAEncryption
71:e2:bd:a0:55:fa:d5:8e:89:17:dd:9f:a1:06:ae:f3:12:e1:
52:42:eb:ba:5c:5d:8a:03:78:80:22:7b:e0:23:3a:e7:87:19:
31:2f:8c:1b:8e:82:4b:0c:ac:63:b6:90:bf:a0:8c:64:da:87:
75:ba:92:fd:ac:ad:5b:e6:fe:ab:d2:cd:77:8f:99:d1:a0:b5:
95:89:83:44:d1:36:01:ca:21:b4:3c:d9:a6:fc:36:89:1a:e0:
22:5f:d4:d6:6d:75:20:c6:bd:75:53:e1:a3:d4:db:ef:52:90:
ae:ff:5e:78:09:dd:eb:1e:03:42:fe:84:39:51:b3:60:25:78:
7b:94:42:c8:06:37:2a:6f:0d:0a:3c:0a:7f:ef:f9:11:a4:56:
18:12:b7:fe:a1:8c:57:c2:6b:d7:b6:52:93:64:64:2f:03:f3:
2e:e8:53:3f:f1:ca:f8:7c:a0:0d:50:52:aa:28:77:f4:31:7a:
c9:89:d0:3a:9f:7a:4c:79:29:26:5a:a2:2b:77:66:37:3b:d8:
3c:84:ca:82:49:63:74:61:c3:09:ee:b4:dc:67:55:ea:53:15:
8d:66:88:c0:4d:de:ce:68:9f:44:4d:d8:e3:ec:c2:12:70:47:
e9:50:2c:31:08:dc:ae:5b:42:6a:ee:3e:e5:19:4a:fe:ac:fe:
de:f9:40:4f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZIAg8atDIrbNX5PuaKepxP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTE3MTUwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGE4ODE1M2E3NDBmNWE3OTg5M2VlMzAxYWMyZDZiNDE3ZDQ0OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2549U2CV5cheEAEjNKIYAjR1LUQy
fYyotJBt3ogKitTsUKJZZbDDNghG86EwjDENNlFzpszLbpgHO0FBKPUbnlaVHkw0
QG22ddBvzg0DWP71QYtOJYUmsysZdYwPBx4JX9hF4qBmfhz7ydI7n+RmHCDclRz7
vREuCap7r+bnraW1uCGpFZyobzODDLsfgKhBcWj4fSgP/xeytM2L2OTTdzQp03EY
2iZV00H9ACJIBVJN5f5ypBZ9EK8svdMGP/LXJnfS7KMYaPjH4EUQNUEbjhzlEwJP
2DFPC88r2hulPE2zvKQfZUc432QPf1m+tyWPLgtz8D5Iq4e+NZmBGY22uwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFP2ogVOnQPWnmJPuMBrC1rQX1ElNMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvX2FpQlU2ZEE5YWVZay00d0dzTFd0QmZVU1UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGSAIM/CzANBgkqhkiG9w0BAQsFAAOCAQEAceK9oFX61Y6JF92foQau8xLh
UkLrulxdigN4gCJ74CM654cZMS+MG46CSwysY7aQv6CMZNqHdbqS/aytW+b+q9LN
d4+Z0aC1lYmDRNE2AcohtDzZpvw2iRrgIl/U1m11IMa9dVPho9Tb71KQrv9eeAnd
6x4DQv6EOVGzYCV4e5RCyAY3Km8NCjwKf+/5EaRWGBK3/qGMV8Jr17ZSk2RkLwPz
LuhTP/HK+HygDVBSqih39DF6yYnQOp96THkpJlqiK3dmNzvYPITKgkljdGHDCe60
3GdV6lMVjWaIwE3ezmifRE3Y4+zCEnBH6VAsMQjcrltCau4+5RlK/qz+3vlATw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:22 2025 by rpki-client