Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bxJD7a1DfaAMi_soYvegOO36G1s.roa
File: bxJD7a1DfaAMi_soYvegOO36G1s.roa (raw, json)
Hash identifier: RzXWJRqghbG3gqZHmWu6tpokqlhkUGbmTZs5OdpjjrM=
Subject key identifier: 6F:12:43:ED:AD:43:7D:A0:0C:8B:FB:28:62:F7:A0:38:ED:FA:1B:5B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192F0A0792F7146D5C95243B25550EE14A7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bxJD7a1DfaAMi_soYvegOO36G1s.roa
Signing time: Sun 03 Nov 2024 06:05:01 +0000
ROA not before: Sun 03 Nov 2024 06:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:f09f:c064/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:a0:79:2f:71:46:d5:c9:52:43:b2:55:50:ee:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 3 06:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f1243edad437da00c8bfb2862f7a038edfa1b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:8e:54:da:51:36:7b:97:31:6f:09:93:ef:
f8:6c:4b:7b:fc:99:30:88:b3:09:9c:87:7c:6a:97:
c9:bf:81:08:23:30:df:d5:9e:05:95:8d:77:61:86:
d9:43:8c:fb:70:9b:fb:cc:ad:8f:87:39:57:3c:84:
4e:cb:bb:de:c7:c7:ab:93:70:f0:9e:f4:e2:f6:a3:
d5:ac:eb:22:1e:0f:13:4f:f2:ad:a8:c7:b6:b3:b4:
2f:e6:1b:f2:41:01:95:9d:0e:2e:8e:90:3f:be:42:
7b:64:d0:7c:73:48:fd:de:d3:44:33:a4:47:67:cb:
b6:00:97:ec:e5:98:27:7c:10:02:ff:87:8f:c7:91:
d1:b6:4a:c8:fa:39:1e:9c:1a:f8:98:a0:03:d1:7e:
1c:97:6c:fe:35:29:08:98:00:7c:8f:6f:fb:d2:a3:
6f:71:3a:25:8f:d5:2e:f2:0c:f8:ce:74:e5:d0:47:
2a:0b:17:19:5c:06:27:a2:2e:47:50:a8:99:02:6d:
bb:7a:d8:f2:da:92:6e:6d:9d:25:6e:e1:0b:59:fb:
96:4e:8c:d3:b3:6b:5e:38:d6:1f:d9:78:0a:71:14:
3d:29:3c:b4:ab:44:13:25:66:80:27:80:59:c2:56:
a8:6f:33:97:19:d8:74:55:f8:98:18:ee:39:f6:b4:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:43:ED:AD:43:7D:A0:0C:8B:FB:28:62:F7:A0:38:ED:FA:1B:5B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bxJD7a1DfaAMi_soYvegOO36G1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:f09f:c064/128
Signature Algorithm: sha256WithRSAEncryption
23:3d:f1:6c:2a:67:7d:0d:b9:06:09:32:4e:58:1a:32:a2:b5:
f2:14:b4:a4:39:60:df:76:6f:c8:67:92:fa:25:78:00:96:1d:
9a:6d:21:41:33:81:73:84:3f:26:77:0e:cd:38:46:ff:3a:3f:
6f:eb:9c:69:91:00:4a:ed:ab:c5:46:d8:b6:21:e7:75:50:9c:
80:05:ae:42:50:68:00:a7:97:5e:a1:70:52:65:7e:d4:b8:48:
a8:d9:75:41:6e:5e:18:af:32:2e:b1:d0:6a:8a:53:bf:5c:82:
92:78:10:87:ed:92:51:af:43:11:c3:22:54:0c:dd:27:3b:9c:
89:6e:75:e6:ec:c3:c8:c7:1f:2e:36:aa:05:57:bd:52:5d:60:
ec:bc:c8:ad:56:df:1c:a1:7a:fb:7d:52:03:e0:c3:28:7f:9e:
8f:93:b1:88:95:07:2c:27:c0:8e:f6:73:9f:2d:fd:64:70:b9:
7d:24:0f:af:93:58:96:94:e2:3f:27:32:bc:28:62:12:4c:e1:
0f:3a:c7:17:ae:1a:f5:12:a0:95:38:47:94:33:dd:be:4a:49:
f2:88:6f:2c:cc:74:14:c4:06:d9:8e:ed:e6:0d:e7:1b:76:5b:
8f:57:2e:d1:51:b3:03:3d:fb:1b:ea:19:14:37:ab:cc:a9:a9:
d5:67:5c:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:51:42 2025 by rpki-client