Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bk6Cpg0FmfI9fyazW_XtCg1Zgkw.roa
File: bk6Cpg0FmfI9fyazW_XtCg1Zgkw.roa (raw, json)
Hash identifier: hCYWdf5mwqTRk7VHwPobaHemUGydTnVtMiMVF8qA8ok=
Subject key identifier: 6E:4E:82:A6:0D:05:99:F2:3D:7F:26:B3:5B:F5:ED:0A:0D:59:82:4C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019154E108BE93065A85B8A3305F106A3288
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bk6Cpg0FmfI9fyazW_XtCg1Zgkw.roa
Signing time: Thu 15 Aug 2024 07:11:59 +0000
ROA not before: Thu 15 Aug 2024 07:11:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:e1:08:be:93:06:5a:85:b8:a3:30:5f:10:6a:32:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 15 07:11:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e4e82a60d0599f23d7f26b35bf5ed0a0d59824c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:c0:34:ce:02:36:df:06:14:1a:d0:75:dd:
dd:77:b3:f4:fc:70:69:0e:bc:b5:49:aa:ff:f0:de:
bd:3a:3e:b2:df:5b:46:fd:cf:c4:c9:dc:50:3e:18:
d9:5f:c9:9e:56:f6:2d:47:7c:c4:59:c5:29:30:32:
39:48:fc:34:f6:15:21:fd:31:90:11:62:c7:ff:3c:
78:7e:98:9a:90:c8:7c:74:74:4f:84:e4:df:9e:ec:
b7:68:6c:ed:75:b6:42:7b:79:5a:3f:a6:0f:74:c2:
b3:b1:f5:c2:fa:b8:cc:0f:de:ed:13:4a:08:69:6a:
9f:1c:12:6a:3d:16:2a:ce:a6:d3:1c:91:3d:f5:20:
82:71:00:75:59:69:44:5f:07:bf:32:9c:a3:de:73:
18:81:10:5e:01:6e:7a:53:15:c0:92:07:25:11:02:
89:b8:49:c8:ec:97:4e:9d:62:1b:85:94:bb:9b:f3:
ca:7e:c2:d4:f2:19:56:7f:ba:6c:0a:4e:0e:d4:67:
20:67:c8:f5:9f:8d:23:e3:bf:db:ec:0b:d3:58:c7:
c5:39:19:00:4f:a8:ef:e3:4a:0c:70:a2:fa:90:00:
03:3f:97:15:4d:ab:94:1e:49:8b:84:fe:ac:02:72:
3d:6f:40:6c:b9:1d:e7:21:19:4c:28:22:75:b7:d4:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4E:82:A6:0D:05:99:F2:3D:7F:26:B3:5B:F5:ED:0A:0D:59:82:4C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bk6Cpg0FmfI9fyazW_XtCg1Zgkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
29:7d:66:fe:8a:d1:78:43:59:9a:fe:cc:3d:c0:51:2d:d8:ac:
55:09:ae:aa:bb:e1:72:89:be:ea:8f:10:d6:e3:be:b9:13:5e:
94:fa:6f:39:cf:31:a4:b5:f5:41:83:1b:25:7f:3b:2e:8e:d5:
c4:b4:4a:f8:0e:e3:0d:ec:15:14:12:46:d0:6d:af:d3:f7:6a:
52:bc:a1:ee:56:5a:b8:ca:b7:6d:df:e0:43:40:70:5d:a3:81:
b6:9c:1d:06:41:20:df:d5:b8:31:9c:48:d0:ca:a9:78:bf:16:
33:c9:0b:0e:1a:c6:4b:8f:97:ff:ce:89:49:9c:3e:de:bf:40:
7b:a9:06:76:fe:3e:86:ba:7e:25:24:a5:45:50:dc:a0:4c:16:
5d:05:af:55:70:be:09:cd:0b:72:31:00:a0:a5:be:51:6b:90:
4e:83:52:e5:af:f2:cc:e8:5e:c2:7a:28:bb:5b:71:24:b3:f2:
7d:41:92:17:df:24:49:b1:42:02:f8:23:5a:1e:e0:a5:97:43:
3c:17:d0:94:66:ea:63:7e:cb:bc:e1:30:4b:90:2e:96:a5:67:
46:db:c3:f4:16:44:37:7b:73:f4:9c:f9:44:9a:78:a9:ce:2b:
15:50:96:7c:84:59:05:01:14:e3:4d:a5:ea:b2:54:dd:6a:7d:
e2:90:17:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:13:56 2025 by rpki-client