Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aj_FCpIR0PSZL1V25vDnS6uReL8.roa
File: aj_FCpIR0PSZL1V25vDnS6uReL8.roa (raw, json)
Hash identifier: Fn3orvGB8czPgIxkTgxGGwL8Hucbjy4yCcUtia08lPM=
Subject key identifier: 6A:3F:C5:0A:92:11:D0:F4:99:2F:55:76:E6:F0:E7:4B:AB:91:78:BF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191901333B583C7F6A4F9E07C6CFB2107B1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aj_FCpIR0PSZL1V25vDnS6uReL8.roa
Signing time: Mon 26 Aug 2024 19:04:23 +0000
ROA not before: Mon 26 Aug 2024 19:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:9013:1489/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:13:33:b5:83:c7:f6:a4:f9:e0:7c:6c:fb:21:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 19:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a3fc50a9211d0f4992f5576e6f0e74bab9178bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:a2:66:06:32:f6:78:55:4d:1d:a1:0a:a4:
51:3a:a8:a5:45:74:96:65:03:56:72:60:1f:7c:fe:
fd:14:c8:01:3b:75:60:2c:75:68:09:5a:74:fe:05:
e6:be:09:09:d2:45:0e:4b:2d:0e:29:ac:fc:a9:99:
6c:16:48:60:32:ae:99:3e:01:43:15:62:4d:d4:54:
a0:86:93:61:50:c2:e6:cb:b0:5c:13:70:6d:83:48:
a0:13:b7:be:bb:4c:b4:ba:a6:62:ca:6c:c4:02:71:
4d:42:c4:d8:a6:ce:87:91:0e:dd:12:ae:9d:3e:ce:
9c:78:e9:76:36:e5:ae:30:2b:57:6a:4b:8b:f2:05:
23:4c:d3:8c:e9:62:9e:cc:3b:1d:87:c9:0b:85:2a:
d6:8b:f6:e7:b2:19:66:29:b5:d8:3c:f6:6c:c5:00:
86:7f:2e:a0:78:40:87:d8:31:81:74:a1:fc:68:45:
f3:e9:5c:fa:ba:3a:dc:72:06:23:8f:ab:a6:49:b4:
5a:ca:b8:f9:14:ac:33:c7:6a:d6:bf:1f:08:f2:d9:
d5:4c:2c:54:7c:d6:bd:87:d5:c3:34:66:f3:a2:e0:
8f:80:ce:20:49:bd:d7:ce:92:fb:4f:1e:79:71:43:
6f:c2:e8:ff:42:8e:8f:db:08:ae:23:d7:5a:13:dc:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:C5:0A:92:11:D0:F4:99:2F:55:76:E6:F0:E7:4B:AB:91:78:BF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/aj_FCpIR0PSZL1V25vDnS6uReL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:9013:1489/128
Signature Algorithm: sha256WithRSAEncryption
10:b9:08:0a:fd:b8:0a:62:f0:cc:d8:dd:91:cc:05:cf:69:5b:
a3:6a:e0:51:a6:5a:71:56:ad:02:a4:5f:17:11:67:24:62:f2:
36:b4:88:01:a8:e6:b4:b4:fe:2f:20:be:80:70:32:46:3a:a3:
5e:cd:34:14:53:eb:2d:44:b8:1f:eb:51:81:97:65:28:9e:72:
8f:9d:d3:c6:f0:a8:d4:41:c8:75:b3:fa:c4:be:78:9d:6a:1d:
0d:70:0d:06:75:73:95:e7:1d:40:ad:13:91:d4:1f:d3:39:3b:
cb:81:32:a5:62:7c:76:59:e3:9a:07:9a:3d:4b:64:07:44:a4:
38:a8:4a:d2:ac:49:23:47:62:04:21:06:85:d6:d2:96:d1:39:
08:1f:91:b3:6c:2c:77:97:9e:bc:25:c6:74:65:49:c6:45:32:
1e:87:31:fb:dc:5a:58:f3:98:4b:0c:df:41:9b:71:b4:8d:51:
29:88:97:f9:0b:c2:0d:7d:b2:c0:6f:a1:2b:22:07:c3:bb:51:
3a:11:df:77:98:15:28:52:da:21:c4:45:c6:19:c2:ef:43:c6:
a3:f3:1a:ce:1d:42:fb:82:0c:30:96:8d:f8:eb:66:0e:df:eb:
9f:34:ff:7a:72:5e:80:06:da:e6:61:05:9e:26:91:52:17:1c:
79:a3:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:03 2025 by rpki-client