Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_y6aSaujc92gnm9UIW_U--L95as.roa
File: _y6aSaujc92gnm9UIW_U--L95as.roa (raw, json)
Hash identifier: PYTSfAlwrFO+TEaUeBmzui60rJVnmtr5+UKvg8NbS90=
Subject key identifier: FF:2E:9A:49:AB:A3:73:DD:A0:9E:6F:54:21:6F:D4:FB:E2:FD:E5:AB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193F857D1AD5738018603E0933156818D69
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_y6aSaujc92gnm9UIW_U--L95as.roa
Signing time: Tue 24 Dec 2024 11:05:25 +0000
ROA not before: Tue 24 Dec 2024 11:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:f857:9fd0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:57:d1:ad:57:38:01:86:03:e0:93:31:56:81:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 24 11:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff2e9a49aba373dda09e6f54216fd4fbe2fde5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:7c:c4:ae:8a:a7:c3:e1:06:f5:a6:cb:32:
88:b4:cc:f4:c6:08:88:7e:56:ef:f6:42:ed:78:a5:
2f:75:d6:2e:28:7c:00:15:46:ce:60:95:da:ed:bc:
38:26:bf:5c:5e:63:49:f4:e2:7a:60:37:cd:d6:05:
89:2d:2b:18:91:2b:ca:5a:c5:ea:df:61:54:dd:60:
41:f4:60:59:bc:83:c4:c1:98:22:da:4e:21:91:6b:
dd:45:97:4d:7d:5f:93:c5:43:d6:8a:3a:ca:f3:3e:
ca:f1:8e:39:d2:34:6c:6b:58:86:b5:26:ee:30:04:
2f:4a:a1:64:c8:6a:b1:78:11:4b:53:66:1c:9c:bd:
5b:65:1d:55:8f:a9:3a:5e:33:59:07:88:ef:9b:f3:
59:a9:ce:67:31:af:2b:23:63:ee:8a:3f:cd:52:32:
50:bb:9a:98:59:0a:89:a2:98:54:df:b8:24:a9:48:
85:1c:78:9d:ae:92:47:9b:aa:46:1c:fc:1b:af:07:
23:51:00:4f:3c:28:33:48:6a:02:d2:ed:78:67:17:
9f:5d:24:d2:86:84:cd:32:a0:67:a6:45:a2:5f:81:
40:21:00:e8:b4:0a:cc:84:25:f7:a8:b3:38:66:f2:
8b:67:98:66:47:54:1b:35:d7:b2:d8:c7:b6:8c:76:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:9A:49:AB:A3:73:DD:A0:9E:6F:54:21:6F:D4:FB:E2:FD:E5:AB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_y6aSaujc92gnm9UIW_U--L95as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:f857:9fd0/128
Signature Algorithm: sha256WithRSAEncryption
1a:a4:58:8a:78:6b:f4:3a:9a:6b:1a:20:6a:30:5e:b9:04:73:
00:fc:f5:60:cd:f1:b9:cf:62:54:ef:62:ff:f9:57:cd:f9:00:
80:39:2a:19:87:53:fb:4f:48:15:e6:35:79:18:43:06:5a:9f:
20:51:c9:b6:7e:62:d0:1a:20:58:93:6c:1b:3f:3d:b2:db:d6:
45:94:ad:f7:db:87:d1:92:18:21:f7:e7:4e:be:9b:79:4f:d9:
34:4c:2a:7b:24:2c:a1:92:54:0b:90:67:fb:6f:3b:e1:c4:34:
81:77:56:56:ed:bf:77:18:84:45:34:66:c9:13:0b:61:a5:58:
3d:d3:96:69:fd:c7:ca:0d:06:c9:b1:cb:e8:1d:97:6a:84:9f:
3f:6a:33:4b:a8:57:1c:2e:29:c7:96:80:73:03:94:67:8b:90:
6f:09:fa:a4:a6:d5:fe:53:25:a1:55:2d:8b:da:96:10:b6:99:
f3:0d:a7:1f:98:44:2f:01:a2:b2:11:cd:94:8b:ac:cc:3a:7e:
d9:f1:82:4e:d1:6f:14:d7:08:2b:13:e3:70:15:ae:57:7e:3a:
16:e5:39:09:fb:a9:1b:58:4a:4b:e5:fa:aa:8b:8e:1e:0c:4d:
97:e8:b6:4d:90:84:b4:16:b6:b6:c5:47:a7:9f:60:f3:38:ac:
d2:1e:fb:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:37:39 2025 by rpki-client