Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a2Gr2WYjtvxVpTIIf83kTcTDYbM.roa
File: a2Gr2WYjtvxVpTIIf83kTcTDYbM.roa (raw, json)
Hash identifier: euMIVWD1arOjCnDkPOlfTQx1q06RYKCfj0LY0b+k6IM=
Subject key identifier: 6B:61:AB:D9:66:23:B6:FC:55:A5:32:08:7F:CD:E4:4D:C4:C3:61:B3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01935A32F80D644B0DBE20A7B61EF2DA9BBD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a2Gr2WYjtvxVpTIIf83kTcTDYbM.roa
Signing time: Sat 23 Nov 2024 18:05:09 +0000
ROA not before: Sat 23 Nov 2024 18:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:5a32:3f69/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:32:f8:0d:64:4b:0d:be:20:a7:b6:1e:f2:da:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 23 18:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b61abd96623b6fc55a532087fcde44dc4c361b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:97:7b:47:4f:fa:7b:2b:1f:41:15:a6:81:
5d:5c:31:45:06:1d:f6:d5:fb:ea:68:5e:6e:7b:29:
67:c1:0b:29:d5:86:14:c7:66:2a:f9:4d:7a:41:05:
3d:aa:5e:c7:4e:06:b8:1a:52:0f:95:ad:3b:03:05:
bd:35:74:87:2e:d8:e8:52:c8:a9:f4:b7:dd:e2:ef:
5a:57:a4:b0:77:8f:ee:4a:ff:9d:2a:2f:7a:40:e8:
73:8f:b8:e1:53:13:de:e1:c7:0d:a6:09:5b:d6:02:
7d:67:6f:94:fc:67:ba:37:7f:d9:f1:8f:98:90:37:
69:cb:49:35:ca:6b:47:9a:29:27:ba:70:4d:34:2f:
de:13:26:94:70:54:d5:bb:3a:e5:30:3b:49:79:2c:
69:00:69:cb:52:a8:55:d9:d2:c7:6f:36:60:9d:c6:
5f:f4:79:8d:f4:d1:de:e7:a4:2f:5c:bb:dc:93:9d:
49:06:2d:ed:bf:2e:c9:7b:25:d1:d6:55:36:cc:21:
09:f2:24:19:81:4b:9c:04:0b:58:0e:40:0a:44:5d:
47:6e:26:83:07:a5:63:7a:9a:85:fc:5d:57:f9:ac:
54:4b:2f:6f:cb:c5:64:4f:b7:e5:f3:29:57:9d:2f:
6c:e0:6a:4a:31:a5:60:a0:32:1f:7c:fc:f8:a6:f5:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:AB:D9:66:23:B6:FC:55:A5:32:08:7F:CD:E4:4D:C4:C3:61:B3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a2Gr2WYjtvxVpTIIf83kTcTDYbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:5a32:3f69/128
Signature Algorithm: sha256WithRSAEncryption
82:5e:d4:11:16:d6:d5:60:8b:95:f4:92:af:ea:12:0e:f3:98:
82:1b:2e:ed:f4:17:40:70:2d:16:31:86:2c:b1:d0:7c:c5:44:
27:5c:a9:56:60:00:9f:b8:b7:9a:a1:3e:ff:68:5e:a2:cf:99:
8b:6d:b3:6b:97:e1:24:b0:69:32:9a:85:4d:3e:a0:e7:20:8d:
86:16:67:93:13:8f:ea:1a:76:72:39:ec:92:c0:2f:7d:ac:33:
bd:fe:e5:e4:e2:2b:e9:f0:a3:65:10:eb:88:b9:03:22:e6:78:
88:61:b1:f6:60:36:01:98:b5:73:d4:d0:a2:10:e4:7a:74:74:
5f:59:2d:0f:40:66:a3:51:4c:b4:13:cf:3b:95:a8:96:15:40:
9a:99:91:fc:99:8e:cf:dd:f0:f0:94:3b:75:7d:19:ca:a6:7a:
ad:59:13:49:fa:44:48:f7:2d:97:d3:dd:42:90:c0:86:28:63:
5f:13:c9:15:12:b3:3a:27:8f:80:99:35:38:df:14:35:2a:f7:
9c:cf:ae:b1:6c:83:6f:ff:2e:88:ed:53:8f:4a:42:b5:db:4a:
7b:ca:79:83:53:60:0b:cb:d6:2f:ed:20:fd:1c:d3:c6:c4:33:
34:19:d5:f8:39:06:67:be:bc:57:17:9e:d4:ef:28:ff:a8:5e:
4f:e3:4d:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:49 2025 by rpki-client