Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_yvCvfFFwstX4mYR0GuQYQlf6U.roa
File: c_yvCvfFFwstX4mYR0GuQYQlf6U.roa (raw, json)
Hash identifier: EZhBnkY7Bsi26nCYV91wQuHqix6eWI6G9ZNM6L5rfNY=
Subject key identifier: 73:FC:AF:0A:F7:C5:17:0B:2D:5F:89:98:47:41:AE:41:84:25:7F:A5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944B2FEB9E5D30548E8BE37A5E5191F5A2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_yvCvfFFwstX4mYR0GuQYQlf6U.roa
Signing time: Thu 09 Jan 2025 13:10:19 +0000
ROA not before: Thu 09 Jan 2025 13:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:2f:eb:9e:5d:30:54:8e:8b:e3:7a:5e:51:91:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 9 13:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fcaf0af7c5170b2d5f89984741ae4184257fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:4d:31:59:5b:3c:9c:43:df:0a:24:7f:ad:
89:d4:e2:6e:9c:08:25:d8:7e:ff:a4:c0:69:8b:10:
9a:a3:dd:2f:17:9d:f9:bb:80:99:52:f8:7c:16:44:
c2:d6:2b:96:94:ca:ff:99:c2:48:fd:fc:df:da:54:
3b:11:15:a2:f7:ad:2b:ad:18:e2:ec:24:24:08:3a:
6d:52:01:9d:9b:39:31:63:3d:a2:15:61:8f:c0:f6:
f3:ac:75:9e:fb:ad:7f:14:3c:dd:c8:8b:78:99:1a:
91:a8:fe:7e:87:fc:e9:d4:89:d0:ab:7d:06:e4:3c:
d5:e9:46:17:69:53:af:e1:d2:21:e3:1d:7f:14:0d:
ac:10:5a:94:60:1f:b5:93:48:d3:fe:49:4f:66:26:
b8:53:97:48:5f:ea:b1:1d:70:03:05:75:61:4a:0a:
2b:e6:f3:03:a3:9a:40:38:f6:c2:41:ee:cb:7b:5d:
f3:8a:d4:bf:4a:97:44:d3:fc:e8:0f:76:82:3f:1a:
09:72:f1:ca:65:99:90:42:bf:6a:d2:25:04:c3:f9:
c5:d0:64:5b:b8:c1:1a:8e:a6:76:75:e3:2d:f9:5e:
2e:80:f2:9e:90:4e:53:e3:f8:ea:58:77:04:2a:05:
29:2e:fa:b3:89:0f:93:64:c6:75:7d:43:50:b4:9f:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:AF:0A:F7:C5:17:0B:2D:5F:89:98:47:41:AE:41:84:25:7F:A5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_yvCvfFFwstX4mYR0GuQYQlf6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
2c:f9:d7:fa:50:be:a2:09:0e:3a:4f:9c:a0:f8:59:3b:6b:32:
0b:e6:f6:bf:88:3c:30:b1:19:06:ec:54:d5:c3:43:3d:17:06:
11:77:4f:b8:0b:20:be:83:42:9d:05:7a:74:db:28:8c:ce:3a:
69:2d:30:18:95:e9:05:1f:ab:4f:b2:a5:1f:52:d2:a8:6b:00:
65:09:98:eb:cc:be:57:00:e8:9a:b8:ca:e3:4e:ba:e3:d7:1b:
b9:db:62:06:bd:75:2e:48:1b:55:be:69:d4:94:8e:95:e7:67:
f6:0b:25:c6:35:67:80:57:16:c6:b9:a2:c8:1b:ee:b3:67:19:
13:20:02:70:98:f0:65:33:7d:6f:97:ee:9b:d3:59:27:09:87:
63:b0:81:a7:9b:1b:12:89:76:4b:92:b0:59:ae:ff:b5:c9:20:
8a:40:6a:e8:a9:1b:97:20:24:03:e7:61:d3:1f:91:61:7e:a5:
a8:37:b3:33:78:9c:14:95:13:a1:94:f5:da:fc:cc:73:e3:82:
0f:22:b4:8c:a7:ea:d5:93:7b:84:79:4b:ca:41:33:69:58:17:
1e:c1:f0:1b:d8:ff:fb:59:4c:2c:a4:5b:68:1b:45:6d:95:3e:
f8:6a:e0:e9:0b:cd:1a:f0:20:db:77:95:20:e7:db:e6:d5:73:
8a:a7:82:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:23 2025 by rpki-client