Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/b1pgbiy8bRrfl8oSZQBuVAfxqGM.roa
File: b1pgbiy8bRrfl8oSZQBuVAfxqGM.roa (raw, json)
Hash identifier: CudhnzjnbwbeyC5xugaBoGK7hjdtD1kBPwiKu0Vng+E=
Subject key identifier: 6F:5A:60:6E:2C:BC:6D:1A:DF:97:CA:12:65:00:6E:54:07:F1:A8:63
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192EFFC97E673524D6267C4CE0014C3E965
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/b1pgbiy8bRrfl8oSZQBuVAfxqGM.roa
Signing time: Sun 03 Nov 2024 03:06:01 +0000
ROA not before: Sun 03 Nov 2024 03:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:effb:ac71/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ef:fc:97:e6:73:52:4d:62:67:c4:ce:00:14:c3:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 3 03:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5a606e2cbc6d1adf97ca1265006e5407f1a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:49:87:6e:ef:30:e9:77:76:a0:67:dc:60:
d7:ef:b8:3d:1c:29:53:9b:83:59:1d:ca:2a:66:5a:
8d:66:b2:ee:54:74:02:86:f3:2d:c8:aa:8a:aa:1c:
81:c0:f7:64:a5:c9:79:71:5a:d2:ce:a1:ad:1a:6d:
e4:b9:55:a9:61:f5:45:10:0e:fe:de:08:65:6e:0d:
61:b4:2d:93:f5:3a:be:75:ee:ff:e2:3d:d3:4a:fa:
d7:f1:c7:71:d7:47:35:99:4f:96:69:59:0a:d3:40:
1e:4f:26:55:d3:48:96:0c:b2:2e:0d:5d:58:de:c1:
95:3b:f3:0b:ab:b5:35:eb:68:c7:00:4f:8a:5e:16:
10:ed:f9:ea:d1:b4:db:a2:6d:48:0e:c8:8f:12:39:
db:54:8a:41:df:7d:8f:86:2f:86:83:d1:33:0a:cd:
3d:8e:06:69:82:41:16:62:40:2f:7c:af:67:dc:a0:
88:37:d4:84:cb:fe:8b:df:97:f5:da:d4:ee:88:e0:
02:68:20:70:d0:cf:92:92:b5:15:a6:c4:b8:fd:c5:
9e:a9:50:7d:30:21:21:46:e4:0d:1c:a3:46:86:32:
e7:38:0d:3b:9a:99:fe:1a:5e:28:60:82:3c:61:96:
b3:19:13:12:e2:c2:2c:a0:0b:b1:2a:0d:4b:2b:10:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:60:6E:2C:BC:6D:1A:DF:97:CA:12:65:00:6E:54:07:F1:A8:63
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/b1pgbiy8bRrfl8oSZQBuVAfxqGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:effb:ac71/128
Signature Algorithm: sha256WithRSAEncryption
5f:f9:4b:05:b0:7b:0c:b9:e7:46:6a:4d:de:fb:b7:c6:2a:b7:
d4:ec:11:e4:35:95:5f:ce:7f:f6:fd:27:41:19:85:8d:ab:47:
e1:30:86:d4:91:67:50:78:94:9f:2b:ee:d2:56:2e:fb:a1:99:
54:8f:68:6c:dd:06:0e:59:b6:b8:6a:e2:eb:34:89:b6:75:1d:
7c:e9:32:5f:89:9e:74:0a:bd:e8:21:39:12:fe:09:9b:7a:33:
a8:8f:cd:6b:c6:c9:6d:c5:90:46:af:75:60:8a:48:90:2e:7a:
03:d8:1d:fc:48:7f:1b:d9:81:13:bd:a3:36:e4:7b:5d:02:d0:
74:e4:37:e8:de:38:f9:61:25:4e:fe:98:01:9c:d3:4f:07:2e:
1f:a3:71:a1:8f:dd:71:ec:7e:70:84:fc:2a:81:ec:e5:c3:27:
e9:b1:c3:bb:c9:e1:74:84:f2:3a:b8:ae:c6:22:6f:4d:09:a8:
54:94:f5:b9:56:01:33:45:23:02:be:d6:db:e7:45:80:b8:f1:
ac:d6:0d:cb:6c:b4:6d:3a:b6:b0:62:7a:f2:02:ac:c8:0b:1e:
a5:9b:cc:b7:52:7f:a0:33:9b:b1:16:9c:37:55:7c:c2:b8:14:
20:72:21:df:18:36:25:91:e0:fa:21:7f:4a:15:c7:54:48:ec:
bf:14:c3:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:39 2025 by rpki-client