Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a4SnviqBXRc8L2IfPdsMnfv5YAM.roa
File: a4SnviqBXRc8L2IfPdsMnfv5YAM.roa (raw, json)
Hash identifier: aH9rExzXicuMiVrQyzUD35x4W4ZkJU836go55kjw3LU=
Subject key identifier: 6B:84:A7:BE:2A:81:5D:17:3C:2F:62:1F:3D:DB:0C:9D:FB:F9:60:03
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01948590CB22E3F7DB0BC8D668AC71893E58
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a4SnviqBXRc8L2IfPdsMnfv5YAM.roa
Signing time: Mon 20 Jan 2025 21:14:06 +0000
ROA not before: Mon 20 Jan 2025 21:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:85:90:cb:22:e3:f7:db:0b:c8:d6:68:ac:71:89:3e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 21:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b84a7be2a815d173c2f621f3ddb0c9dfbf96003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:e6:c5:22:9a:17:db:61:46:e6:0f:78:6b:
b5:0f:87:e0:9f:6f:bc:9c:29:57:f3:69:c8:16:1e:
32:e5:54:d4:e7:47:15:8b:b3:87:30:63:ce:5e:12:
75:fe:41:31:28:d9:85:6d:1c:95:5f:f6:3a:9e:e0:
12:d2:fb:c2:93:c7:2b:4b:cf:38:06:ca:15:60:48:
f8:cd:0a:61:bf:2a:36:a5:01:d5:81:c4:b4:6c:6e:
68:f3:44:79:63:f3:d0:25:d0:11:63:27:50:a4:81:
5c:d9:c4:ac:cf:6d:41:f2:19:00:b1:04:99:ea:80:
6b:b9:59:eb:1e:39:e4:72:2b:87:b0:1c:18:7c:21:
35:55:60:e2:f6:ce:0f:28:70:83:00:2f:95:8e:d0:
8b:2b:ad:3f:cc:db:65:0f:75:31:47:08:c9:37:39:
fe:03:cf:57:1e:b0:d5:d1:64:cf:38:61:fe:1f:09:
83:7a:3b:50:3e:22:f5:bc:da:7f:65:b8:a7:92:bd:
3e:7a:35:9a:90:a5:cc:f8:bc:e2:c9:61:a4:fd:ad:
e0:3d:99:ac:d8:ff:0a:cc:1b:70:2d:8b:51:72:5a:
02:74:9f:9f:a1:87:72:8e:17:48:b0:53:0c:a5:d7:
76:53:bd:50:23:32:fd:cf:39:05:56:a1:8a:a6:a0:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:A7:BE:2A:81:5D:17:3C:2F:62:1F:3D:DB:0C:9D:FB:F9:60:03
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/a4SnviqBXRc8L2IfPdsMnfv5YAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
0c:6c:80:2c:dc:05:2e:76:57:ea:f1:d0:ce:2e:d5:2d:4c:69:
0f:a3:3c:af:36:fc:ce:04:71:7d:6e:fa:1d:34:4f:6f:fc:31:
5d:3f:47:5f:a6:03:0d:21:99:89:0b:f2:4a:5b:f0:00:14:c9:
cb:cb:4f:2c:95:50:98:8b:b9:b6:e9:67:87:d9:4b:1f:d6:b3:
a9:2f:91:94:bc:04:a2:84:62:b4:8b:c4:40:9d:41:2e:e6:49:
0e:0d:cd:f0:7a:c3:63:74:b7:61:2f:b1:0e:f7:8b:c1:f0:ab:
71:d1:7f:89:c8:b0:43:de:4a:35:71:1e:4a:32:9c:3f:0d:ca:
f9:82:bf:4d:e3:94:33:b5:38:c1:f2:ed:18:3b:c1:89:7d:d2:
6c:65:44:71:be:15:89:0a:63:03:a6:25:a0:88:ce:b9:80:25:
22:9d:31:06:f0:fd:d9:3d:cf:fa:39:63:84:a4:30:18:04:30:
39:07:b7:1f:e3:ab:df:48:93:77:84:36:42:b0:42:94:7c:d4:
28:45:e0:4a:ef:53:14:db:0c:00:e2:a6:a1:86:c5:1a:96:f1:
fc:ba:71:e1:44:e6:f8:c8:3a:fa:70:98:09:2d:22:17:e7:27:
1d:78:fa:d8:a6:2d:b4:61:09:a1:59:eb:41:30:85:9d:52:d0:
76:6d:5a:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:52 2025 by rpki-client