Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/chV4ZBIwkwMW09IgEfQwAf_KjiY.roa
File: chV4ZBIwkwMW09IgEfQwAf_KjiY.roa (raw, json)
Hash identifier: wfwuZu8GAbXPP6TF7acWrcbqIKdmj7qjhwEfvDFAKtY=
Subject key identifier: 72:15:78:64:12:30:93:03:16:D3:D2:20:11:F4:30:01:FF:CA:8E:26
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194AB4C87ABF2C12055795DA58E9A89BF75
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/chV4ZBIwkwMW09IgEfQwAf_KjiY.roa
Signing time: Tue 28 Jan 2025 05:05:06 +0000
ROA not before: Tue 28 Jan 2025 05:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:ab4b:e3f8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:4c:87:ab:f2:c1:20:55:79:5d:a5:8e:9a:89:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 28 05:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=721578641230930316d3d22011f43001ffca8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:a6:81:a4:8f:1b:15:1d:64:ff:77:99:13:
4b:5a:e9:4f:53:ec:ee:7c:d9:c6:ff:cc:f0:c5:2c:
1e:d9:64:dc:7e:89:b8:8d:eb:55:48:7c:65:29:fe:
b4:c7:43:f0:1c:00:14:ee:06:1e:c8:90:7e:e2:7c:
b2:62:52:06:3c:6a:e4:38:11:4c:b9:0d:ef:13:de:
4e:11:c0:65:36:65:f3:97:3d:2d:af:fe:e1:e1:78:
ed:27:1a:f6:f0:5b:fb:8f:6b:09:08:75:68:54:b7:
2b:5e:09:0f:fc:c0:6d:81:bd:90:5f:f1:33:7b:09:
db:10:47:0d:1f:16:bb:2a:03:a8:53:f9:8b:75:16:
34:44:2d:d7:97:a5:fc:7d:ed:5f:40:41:90:95:1a:
64:e6:a6:6a:0d:e2:6a:f8:10:1a:3d:bc:de:2f:c9:
e3:1b:7b:d1:b7:55:36:63:6e:73:95:ac:0a:ea:5f:
59:a1:f6:ee:47:41:cf:43:23:1d:06:64:46:c2:94:
31:16:2b:3e:4a:0e:6f:26:25:e9:63:ce:3b:e3:12:
d2:8b:79:d4:92:bd:be:db:af:31:11:94:77:b4:16:
63:c6:fd:f6:79:e2:35:bd:58:88:b6:38:8e:c1:1e:
db:02:28:93:fe:61:0a:86:63:c0:39:6b:11:91:3f:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:78:64:12:30:93:03:16:D3:D2:20:11:F4:30:01:FF:CA:8E:26
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/chV4ZBIwkwMW09IgEfQwAf_KjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:ab4b:e3f8/128
Signature Algorithm: sha256WithRSAEncryption
77:cc:2c:8e:41:35:f9:34:ba:0d:50:64:50:49:01:ff:49:61:
cb:90:ec:84:a6:da:54:f2:98:96:57:bd:ab:c6:c4:28:8a:67:
75:b6:75:31:33:5d:f5:80:25:ea:46:04:76:3a:3e:3d:8e:7c:
19:e0:d7:c6:f4:7e:97:f3:a8:05:8d:ac:cc:0d:50:51:87:2f:
36:8f:98:75:50:12:5a:69:1d:38:d4:6d:6c:3a:50:83:f3:b7:
7e:9d:d5:12:a7:2f:ec:10:54:60:8b:cd:a8:4a:fd:96:8c:f9:
f8:74:79:20:d1:ba:cf:90:92:8b:99:6c:d9:68:95:01:d3:d4:
67:be:ff:ae:58:50:19:52:fc:57:25:18:cc:0c:21:59:1b:6e:
07:49:7c:55:07:50:04:3b:fd:96:7c:3b:af:10:3a:3f:ca:19:
3c:43:fb:0c:17:6f:23:0b:3c:35:fa:da:cb:a7:08:44:9e:5a:
e3:43:ba:b5:d3:3f:c1:ce:32:a0:59:d1:64:da:2c:0e:26:90:
ec:01:ee:ac:6c:c8:f7:f7:be:25:85:c8:07:7c:28:8f:64:1c:
d7:fa:d4:c7:cb:1f:05:50:62:7d:74:97:fc:df:91:3c:83:d6:
ba:4c:f1:37:b5:0f:43:f2:a0:96:1d:2b:40:cb:32:ae:93:3d:
bc:3a:c7:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:39:43 2025 by rpki-client