Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bujnFYXMUURrzr1NWMVI4fP20Sg.roa
File: bujnFYXMUURrzr1NWMVI4fP20Sg.roa (raw, json)
Hash identifier: VrK96hSxU7LC91OkUqhjl+LraF63CH5pMmh+bQJOtd8=
Subject key identifier: 6E:E8:E7:15:85:CC:51:44:6B:CE:BD:4D:58:C5:48:E1:F3:F6:D1:28
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191114A8F69E9FB04CCFA00AE0B1DA28C18
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bujnFYXMUURrzr1NWMVI4fP20Sg.roa
Signing time: Fri 02 Aug 2024 04:13:04 +0000
ROA not before: Fri 02 Aug 2024 04:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:11:4a:8f:69:e9:fb:04:cc:fa:00:ae:0b:1d:a2:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 2 04:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee8e71585cc51446bcebd4d58c548e1f3f6d128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:b9:bd:71:ab:a4:b3:aa:6f:82:c6:d1:80:
94:2f:b4:61:7c:24:40:70:55:18:59:68:f9:d4:20:
50:cf:2a:ba:db:65:2e:53:73:2f:f9:fa:62:ff:9d:
26:69:4e:8a:e5:0b:ce:82:44:9c:a2:4a:aa:14:43:
dc:32:34:48:71:ce:5c:eb:22:6e:97:7c:20:f0:83:
f1:5b:4e:2e:b2:84:bf:87:b0:28:b3:6b:0d:25:a5:
e1:6d:90:12:0d:10:2d:b0:37:54:23:56:07:a9:4b:
26:f0:63:aa:ef:d1:dc:b0:eb:d5:44:8c:c0:30:28:
c9:21:9e:5b:87:86:c5:1c:8d:c9:f1:9a:2b:d3:93:
66:a8:1e:1b:7b:4c:31:23:f7:0e:3b:66:8c:59:6b:
b9:bf:ae:c1:a7:81:9a:5f:79:a7:be:b4:15:ea:94:
4d:cd:d3:94:b2:63:d2:ca:15:4e:cd:7f:1e:ca:db:
28:af:ae:7d:cc:c5:5b:41:26:e9:6b:6e:69:89:7b:
2a:8f:82:a2:19:f4:db:4c:b7:fa:a1:11:0a:9b:41:
99:d1:02:f3:af:66:bc:6b:51:a9:eb:7b:6a:53:c1:
12:ac:50:17:58:ec:b4:f8:9f:8e:0f:d3:71:9a:8a:
f8:9d:d8:4d:88:fa:5e:e9:75:f3:91:ad:d3:b8:7f:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:E7:15:85:CC:51:44:6B:CE:BD:4D:58:C5:48:E1:F3:F6:D1:28
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bujnFYXMUURrzr1NWMVI4fP20Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5c:60:25:a0:70:3b:61:90:36:e5:ae:1d:c0:86:4a:35:74:14:
b3:1a:da:0e:3a:c8:31:a9:be:5d:6d:9b:f3:94:7c:3e:81:85:
5b:75:11:8f:6e:3e:ed:30:00:70:7e:8d:db:b3:99:22:21:58:
33:ad:39:65:23:ca:a0:a5:2f:3b:1a:32:aa:b7:86:46:43:2e:
7f:d5:d6:af:cc:74:a1:96:b0:e2:17:fb:89:88:00:c7:cf:3a:
3b:89:f9:4d:64:58:81:ec:29:dd:40:56:b9:47:ac:94:a7:78:
73:a9:27:39:69:71:6e:94:93:47:04:ae:df:80:c9:36:51:9d:
bb:18:a1:8e:1d:a7:a8:3c:dc:ae:89:ee:aa:85:be:c8:c8:46:
b3:fc:e4:e1:e0:c0:9e:60:17:8f:71:58:e6:90:a9:0c:e9:ce:
b4:fc:05:21:29:de:c9:fd:9c:d6:bb:e4:bf:af:70:02:ff:5c:
22:1d:cd:19:ff:b6:1d:65:ce:7c:76:18:6b:a5:ed:23:5a:75:
b2:cd:23:83:e0:57:a0:cf:0b:3a:f7:ca:bb:ea:45:d3:d7:81:
01:61:74:99:5d:05:59:66:27:ff:56:93:87:0c:c2:8c:ba:1d:
d0:de:cc:e0:43:cb:c6:a3:e2:38:0d:aa:85:41:4a:8f:af:60:
66:fa:d0:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:11 2025 by rpki-client