Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aFxZerYdJE5MxjyXhGsPyB_I-vY.roa
File: aFxZerYdJE5MxjyXhGsPyB_I-vY.roa (raw, json)
Hash identifier: a3O2J22oqe1Z0SJZAtDJIeJYVffFcAQaW58wmtx/vVY=
Subject key identifier: 68:5C:59:7A:B6:1D:24:4E:4C:C6:3C:97:84:6B:0F:C8:1F:C8:FA:F6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019434AAD7718B1C5F152AE62E82A62662D1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aFxZerYdJE5MxjyXhGsPyB_I-vY.roa
Signing time: Sun 05 Jan 2025 04:13:18 +0000
ROA not before: Sun 05 Jan 2025 04:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:aa:d7:71:8b:1c:5f:15:2a:e6:2e:82:a6:26:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 5 04:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685c597ab61d244e4cc63c97846b0fc81fc8faf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:de:6b:c5:0d:0e:c6:c6:d3:39:44:c5:24:
6a:5c:3b:34:76:c0:18:4e:5d:0d:54:20:8a:c6:2b:
23:d4:27:4a:06:c3:12:63:9c:c9:49:77:4f:ff:00:
7a:c0:92:16:7e:e5:60:53:7d:0e:4c:9c:65:8b:be:
14:1b:df:dc:0e:e0:b1:ae:d4:54:2d:07:2b:bc:ef:
7f:ec:c6:9f:8c:5a:60:c4:57:91:eb:ab:9c:c1:6b:
2e:c7:6a:40:da:f3:5a:d2:95:27:58:7f:05:5f:bc:
d7:36:9a:83:af:36:ab:c4:05:78:53:6a:b0:00:19:
ce:d5:36:44:73:b3:6c:79:8c:bf:e6:a3:7b:f8:95:
f4:6e:67:f2:cd:18:75:de:74:19:06:99:9b:a5:bd:
b6:3e:f6:b5:2e:65:19:e4:09:fd:38:10:09:80:2f:
cf:86:c8:dd:8f:55:35:97:97:c3:e0:21:54:ee:21:
df:5e:22:ad:8e:40:32:79:a3:7a:8e:b6:15:e5:f3:
72:7c:d4:11:18:1d:6c:25:fb:18:87:81:74:e5:7a:
2e:31:c3:27:12:be:8e:fe:85:f8:73:6c:b1:ab:a6:
65:fa:ff:2d:0d:3e:eb:5a:84:ed:66:c7:36:0a:09:
cf:08:58:67:25:16:db:0d:50:1d:cc:c4:13:0c:8c:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:59:7A:B6:1D:24:4E:4C:C6:3C:97:84:6B:0F:C8:1F:C8:FA:F6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aFxZerYdJE5MxjyXhGsPyB_I-vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
54:0b:1f:33:48:f3:f7:44:03:66:ba:44:b2:1c:25:fe:c5:b1:
d5:45:84:ac:09:ab:b6:f0:06:c9:cc:33:1b:f9:35:a7:78:2e:
c9:5e:fb:e5:54:2a:81:99:0c:c8:b5:d5:61:9d:ab:3b:ba:42:
d6:81:44:27:f1:93:b7:f3:a9:c7:09:41:ca:7b:1a:89:3e:0f:
fa:5e:b3:13:1b:5e:65:47:66:d5:14:1d:1f:ed:2a:b7:6e:64:
00:18:6f:91:65:2d:73:da:be:c7:6d:a8:ba:7e:75:5b:f7:9f:
6c:80:8a:10:a4:78:cb:60:87:96:72:e0:a0:95:72:0a:50:01:
87:6f:f2:8a:e0:09:d3:94:17:5e:ca:40:ae:06:fd:c1:76:50:
a5:d9:2c:93:1e:00:83:a0:83:f1:40:1a:cf:d7:59:4b:85:91:
8b:30:61:b2:fa:2f:dd:93:f8:7a:e3:e5:33:37:5c:9a:7b:c0:
38:52:2a:0e:a0:4d:2a:91:bd:28:e2:9c:7d:7f:f0:05:3e:77:
ef:c6:d9:99:89:fc:29:da:57:b9:90:b1:02:c8:6c:2d:e8:a5:
fb:c6:f7:e4:50:3c:cb:ee:ee:c4:e1:bb:80:74:ee:d6:56:2b:
9d:9e:a5:7b:93:c8:8c:2b:24:31:ee:6c:07:e9:bc:0e:ef:f0:
60:1b:35:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:29 2025 by rpki-client