Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/by-iJkAUbReaJsN66OT7EfOsfnU.roa
File: by-iJkAUbReaJsN66OT7EfOsfnU.roa (raw, json)
Hash identifier: Ve1wamY2kehfSLmq89epfdeFkQQt8Q0E+dZEQCHdsR0=
Subject key identifier: 6F:2F:A2:26:40:14:6D:17:9A:26:C3:7A:E8:E4:FB:11:F3:AC:7E:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913A0EF5E81155C1BAEC55D2AAC9229A57
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/by-iJkAUbReaJsN66OT7EfOsfnU.roa
Signing time: Sat 10 Aug 2024 02:12:24 +0000
ROA not before: Sat 10 Aug 2024 02:12:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3a:0e:f5:e8:11:55:c1:ba:ec:55:d2:aa:c9:22:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 02:12:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f2fa22640146d179a26c37ae8e4fb11f3ac7e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:09:fa:21:bd:02:df:d5:18:97:ec:33:03:
64:09:d4:16:4f:2b:6d:5e:0e:bd:e7:3a:37:31:07:
ef:23:7c:30:76:78:cf:8f:f3:d0:45:15:9d:5b:87:
82:75:73:bf:7a:c9:a6:68:54:c9:6a:f2:42:29:15:
90:a5:af:58:ec:22:fd:8d:69:f6:d7:61:82:4a:99:
da:d2:ae:8c:ea:c6:09:2e:6b:55:ac:99:af:a0:d7:
f7:7c:ae:76:19:c9:67:13:db:06:94:60:01:f8:95:
5a:b3:6a:aa:49:56:57:9f:5e:d8:5b:30:d0:c8:dd:
d9:44:75:0e:6e:75:ce:8b:d6:4e:2f:1d:2e:96:dc:
bf:bb:c7:9f:21:d3:97:f7:c0:8f:6e:b3:07:80:8d:
01:51:00:68:69:26:11:ae:e1:22:65:2d:52:12:62:
25:51:d4:83:b1:fd:cb:7c:37:5b:82:74:5a:2d:4d:
14:24:ac:81:0c:a4:18:9a:59:92:c8:1b:04:9c:c2:
51:cb:30:4e:a1:53:13:e5:b8:bd:ba:5b:02:2a:9c:
3b:0d:22:fc:15:87:3f:5c:ca:d6:e7:6f:77:8e:34:
bb:f0:aa:3e:5f:12:f5:80:cc:7d:66:2b:b2:42:15:
06:df:d5:37:6e:9b:c0:86:c2:83:9c:8b:51:42:e6:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:A2:26:40:14:6D:17:9A:26:C3:7A:E8:E4:FB:11:F3:AC:7E:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/by-iJkAUbReaJsN66OT7EfOsfnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
67:9f:8f:d8:59:e8:b6:2b:06:c0:b8:4c:34:94:e1:fa:7e:16:
fb:a0:3a:1e:11:82:19:95:25:be:77:ba:a5:a0:20:f3:c7:c4:
9f:70:22:40:34:29:b7:ca:5a:9e:1c:0b:b2:90:61:00:4b:22:
6c:0f:d5:72:08:4d:a6:62:92:80:58:fc:3f:f7:16:b9:54:f1:
04:3a:7b:95:39:e2:a8:fd:9f:9e:d3:19:43:61:96:9a:ae:54:
ef:e6:91:05:e3:f3:c6:d0:ff:d2:2b:30:02:be:a7:09:3b:8f:
15:ae:11:e2:64:a6:2b:6f:42:ef:81:60:67:69:3c:d8:7d:3c:
a2:8c:d5:13:6a:95:3e:96:f8:27:3a:0b:ef:22:64:bb:50:1f:
d0:60:6a:3b:7c:69:53:86:bd:3d:8c:04:a0:a1:8f:be:0e:b4:
4e:88:17:a8:7c:d1:3c:de:72:af:ca:b0:17:8f:28:08:72:71:
58:0e:68:59:85:26:10:26:90:4a:c8:47:a7:c3:c6:e3:f3:e4:
d3:96:44:41:92:ce:c3:03:2f:f9:39:98:74:c5:5b:37:72:0c:
e0:7d:99:05:8f:60:f1:12:47:fb:3d:46:b0:fa:cd:2e:4a:1e:
d2:23:fe:8c:a4:5c:a7:77:e8:16:e7:91:3c:ec:a9:01:aa:f7:
2b:32:1e:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:16:29 2025 by rpki-client