Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a-IohD7UlFXEGGQrI55JqbMFKOI.roa
File: a-IohD7UlFXEGGQrI55JqbMFKOI.roa (raw, json)
Hash identifier: 4hthoB8sHd0Vx6STX8C3stJ7SSH59ga1EW1TB+Al+Qw=
Subject key identifier: 6B:E2:28:84:3E:D4:94:55:C4:18:64:2B:23:9E:49:A9:B3:05:28:E2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914D94711A2C73FAEF310CA5AB3CCF5289
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a-IohD7UlFXEGGQrI55JqbMFKOI.roa
Signing time: Tue 13 Aug 2024 21:10:59 +0000
ROA not before: Tue 13 Aug 2024 21:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:94:71:1a:2c:73:fa:ef:31:0c:a5:ab:3c:cf:52:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 21:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6be228843ed49455c418642b239e49a9b30528e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:3f:65:ae:0b:b0:2f:a1:db:06:41:b1:82:
0c:59:45:c5:64:03:35:fd:fc:62:eb:94:ef:f7:8f:
04:77:4d:ed:42:e0:44:02:d5:4d:cb:d5:d3:30:5a:
6b:16:27:2c:8c:8d:77:d6:c5:46:53:a8:ac:4a:5b:
64:0c:51:1e:49:b2:a7:ca:7f:66:f7:ed:38:3d:61:
a1:15:c9:6e:39:0c:7e:e6:17:07:c0:21:8f:e9:f1:
87:68:da:b1:b8:1d:a2:de:eb:55:49:8c:ae:1f:d8:
fa:f6:09:6a:52:2c:ab:2a:4a:64:23:2d:c2:8f:fa:
ee:f3:54:2a:1e:7e:30:54:32:d4:12:69:a9:e2:e6:
c3:97:f9:ad:1d:f9:9b:d5:04:65:29:38:32:93:06:
65:a5:75:11:4a:d4:d6:7f:26:54:6b:c1:b8:46:04:
3c:99:6a:a4:62:6e:8a:4b:2e:79:a3:6a:68:8e:45:
cf:4c:f7:02:ef:f7:d3:e0:cd:16:b5:bb:8c:97:7d:
a1:ab:6e:b4:85:b6:13:49:50:04:45:55:49:ba:d5:
2a:ec:76:b3:af:01:89:37:50:4e:95:72:e4:29:a5:
3a:26:f3:af:23:78:bb:c2:0e:23:01:8a:9d:ea:a9:
9d:6e:7d:a6:ed:0e:05:75:ad:71:25:3b:55:f9:5f:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:28:84:3E:D4:94:55:C4:18:64:2B:23:9E:49:A9:B3:05:28:E2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a-IohD7UlFXEGGQrI55JqbMFKOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
20:b8:a9:9c:96:d0:5c:34:1c:0b:f4:b3:fc:36:fc:46:79:e3:
f6:8a:b7:94:4c:98:01:ac:97:c8:f2:4c:91:5d:c8:d5:5a:70:
0e:87:1b:93:6b:7a:18:fe:80:f4:d0:2b:78:dd:fe:7a:1e:f5:
12:59:ba:be:88:e6:03:c3:f7:21:0b:21:23:6d:fc:7b:fa:67:
8e:60:71:e6:78:7a:ac:ff:2f:83:81:22:f1:43:e6:0e:d3:87:
83:5f:fe:76:42:c6:bf:93:cf:d2:9a:24:1b:2c:33:58:7a:60:
36:3a:cd:98:f7:81:0b:87:05:4f:a4:ed:55:0e:78:ae:92:80:
28:eb:b0:70:35:78:62:93:40:0d:3b:0f:6c:9b:55:2b:45:a5:
34:65:21:bc:0d:9e:e0:f8:09:9a:7e:dd:43:6c:41:b0:a7:95:
38:17:9f:71:2a:eb:a5:6f:59:05:28:1d:c1:01:64:a6:ed:40:
d4:ec:fc:f8:52:20:2a:8e:e8:22:8c:df:51:75:2d:79:d0:dd:
84:db:0e:c4:d2:9b:d5:57:21:9c:da:2f:70:58:b6:cc:ec:00:
df:44:c3:9b:21:c3:af:0a:44:ca:36:8b:fd:e4:ef:d4:21:da:
51:77:4a:f3:c9:7e:6e:97:4f:d8:8f:50:e3:49:20:70:51:3f:
4c:83:c8:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:14:30 2025 by rpki-client