Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cOecbvRPpsJ39o1m5VBevsVFa44.roa
File: cOecbvRPpsJ39o1m5VBevsVFa44.roa (raw, json)
Hash identifier: m9jgDsttzIFrujbYP94Objp/tdD5yiNF6+YqmP8sGQg=
Subject key identifier: 70:E7:9C:6E:F4:4F:A6:C2:77:F6:8D:66:E5:50:5E:BE:C5:45:6B:8E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B239B7934C186BD6B896992422ABCD36
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cOecbvRPpsJ39o1m5VBevsVFa44.roa
Signing time: Mon 02 Sep 2024 10:13:32 +0000
ROA not before: Mon 02 Sep 2024 10:13:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:39:b7:93:4c:18:6b:d6:b8:96:99:24:22:ab:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 10:13:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70e79c6ef44fa6c277f68d66e5505ebec5456b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:68:f7:d5:25:57:ec:72:fd:ba:84:28:10:
37:09:27:1e:89:40:14:6b:4f:91:e2:68:f8:5f:f3:
4d:d2:06:f1:5a:2e:a2:5e:2e:f4:e3:fc:a1:9a:cd:
7d:3f:ef:87:24:bb:d6:17:17:31:9c:13:4c:19:08:
fc:8c:33:8b:b3:40:f4:49:c0:83:21:23:61:b7:f7:
eb:f3:a4:72:66:e5:b4:e6:8b:21:0f:3f:54:74:6a:
b1:1a:7f:04:2c:38:e0:3e:57:a1:35:65:5b:c1:17:
87:a6:8a:ac:1d:a4:8e:f5:85:ec:b2:bd:0e:8e:f5:
4d:b8:59:b7:28:fa:5f:a1:c0:03:1e:00:06:4b:aa:
b5:57:74:57:7a:16:35:0f:59:42:95:47:8d:83:3b:
35:2c:40:1a:2d:da:b2:13:06:2d:0e:b2:f8:84:a3:
76:5c:ad:67:f9:84:24:70:c1:68:b0:89:fe:0d:53:
8d:fe:fa:2e:a5:bc:e1:24:59:a8:0d:a9:02:da:9f:
0e:43:6a:1b:85:74:a4:d6:06:84:51:86:d5:08:a3:
a4:26:03:b3:37:e0:64:3d:ba:db:5c:fb:ed:0b:2f:
8e:fa:d8:99:ce:83:db:58:a6:2e:3c:4e:4f:98:3e:
ab:29:b3:b8:33:66:e7:40:a4:67:8c:db:7c:21:20:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:9C:6E:F4:4F:A6:C2:77:F6:8D:66:E5:50:5E:BE:C5:45:6B:8E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cOecbvRPpsJ39o1m5VBevsVFa44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
77:1a:f7:10:09:21:27:10:49:f6:cc:1c:35:39:7f:b8:5b:82:
0b:ae:26:c2:36:80:1c:99:da:5f:93:a8:b0:2c:2f:68:9c:7f:
22:a4:b9:ba:4a:f6:b5:bd:5d:b5:5d:8e:3d:8a:ef:10:7b:fb:
87:a2:85:84:bf:33:ea:9a:49:ee:93:c0:91:08:a6:5b:69:9e:
68:dc:5b:0d:26:4d:4a:2b:3f:e9:93:c3:26:02:bb:5f:9b:22:
b3:86:59:e4:a0:bf:dc:e0:f3:48:f4:10:54:5e:77:dd:2f:5b:
a2:e2:6a:49:49:0b:5a:0d:3e:b7:d2:32:8a:6d:5c:3a:3f:c2:
10:fe:80:31:bf:16:92:79:30:8c:8f:5b:75:9b:10:fb:2a:a2:
e3:73:23:47:bf:1f:d1:bd:bc:6c:c7:0a:78:32:b3:96:62:ba:
a5:91:f0:0d:bd:40:cc:4b:06:30:db:a0:d8:93:f9:de:0a:d1:
14:9e:63:e3:19:33:91:c6:ea:89:43:de:fd:77:66:e6:80:6f:
11:97:e1:1a:dc:86:5b:a2:4f:0f:e9:44:bf:ab:86:5a:77:89:
13:a7:25:7b:7f:fa:de:10:88:1c:34:9c:27:24:8d:ba:c8:5f:
54:17:45:3d:6a:ef:81:29:1e:be:2b:49:78:79:99:b0:93:ed:
3a:f2:0c:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:22 2025 by rpki-client