Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eihZ4HWGqk6tXF_ihgR5zHTUwfg.roa
File: eihZ4HWGqk6tXF_ihgR5zHTUwfg.roa (raw, json)
Hash identifier: sCQ2RVHPjbbRWTuzZTMzJn0a1UhhASLmOWdvtuV9h30=
Subject key identifier: 7A:28:59:E0:75:86:AA:4E:AD:5C:5F:E2:86:04:79:CC:74:D4:C1:F8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A5C4CA2BE1A1008AD3E1600F751D79D1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eihZ4HWGqk6tXF_ihgR5zHTUwfg.roa
Signing time: Sat 31 Aug 2024 00:10:22 +0000
ROA not before: Sat 31 Aug 2024 00:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a5:c4:ca:2b:e1:a1:00:8a:d3:e1:60:0f:75:1d:79:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 00:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2859e07586aa4ead5c5fe2860479cc74d4c1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:63:c4:27:c8:ab:8c:c5:24:25:20:83:a1:
cc:87:1d:60:de:9f:e9:7d:82:28:d1:48:db:c7:bb:
55:c3:8f:65:b4:12:a3:d5:1a:29:95:99:7f:16:57:
49:13:1f:aa:54:6d:a8:bf:fe:72:8f:73:54:55:c4:
b3:02:1c:6f:a9:44:ee:27:07:d8:7e:73:cd:b6:46:
53:ed:bd:03:8f:7f:e4:5b:ba:a2:58:0e:6d:4e:e3:
f3:11:d2:fe:0a:2c:f6:1e:5a:e9:5e:f6:11:e8:76:
9b:08:24:d7:30:94:03:eb:bb:d4:87:d8:0f:c6:ff:
e5:13:65:24:59:9a:11:98:ac:91:b1:f4:94:35:c7:
e3:64:69:3d:78:4d:ea:b7:0e:d6:e6:3b:19:50:cb:
3e:b4:9b:e5:af:65:b5:7d:b5:63:16:da:c0:36:08:
e5:0f:33:fe:fc:46:90:37:83:35:76:c5:2f:df:a8:
23:cb:db:41:79:f8:63:e8:64:9e:6a:f1:b7:bf:a9:
7e:80:f7:5c:4e:94:df:bd:4a:2f:e1:f6:3c:ea:07:
1b:07:e1:8c:86:ae:ac:54:29:f4:09:82:a9:fa:87:
ec:39:21:8f:99:2f:95:86:2c:50:06:39:39:01:a4:
53:88:38:f5:9b:db:3d:12:e8:0f:85:2f:fc:44:86:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:59:E0:75:86:AA:4E:AD:5C:5F:E2:86:04:79:CC:74:D4:C1:F8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eihZ4HWGqk6tXF_ihgR5zHTUwfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
46:b6:f3:e1:c2:2b:69:6d:b2:a7:38:05:36:6c:3b:e7:a6:7e:
5f:cd:43:a7:fc:36:b7:df:a8:24:ca:b3:00:ea:87:ee:de:cb:
a1:27:4e:ad:26:56:4e:33:69:5d:13:d7:0c:7d:ed:67:ba:02:
cd:49:81:4f:88:5f:5a:f3:c6:7b:c0:a0:1d:c8:13:6e:58:a2:
8c:2e:a9:6d:13:72:69:0a:a1:fa:65:01:a2:bb:56:2d:51:c9:
c4:9e:aa:76:e4:82:b3:17:4f:df:2b:f5:9f:2a:85:6e:7a:54:
cd:af:93:45:12:b7:55:71:d9:25:31:cd:1b:4d:43:05:61:48:
26:4b:a5:a3:4f:ba:42:a7:16:0e:c9:a4:5c:51:c8:d5:52:b5:
ce:ad:b2:3e:72:ba:4a:e7:09:96:c4:c0:27:02:55:f1:24:fe:
17:c1:4d:cb:cb:8d:b7:a3:e1:85:90:32:a4:0e:b5:8e:92:62:
d8:30:c5:9e:fc:22:6b:b8:67:9a:f4:a6:6d:27:51:44:1a:26:
05:31:ac:c3:49:d3:89:10:93:20:6d:b2:f9:6f:5d:1d:b2:25:
e3:15:1e:ec:90:25:78:94:3b:0c:c5:da:1a:51:e1:1a:56:d5:
b8:98:d7:01:f7:8e:c0:f1:b1:50:fa:f2:c9:49:0a:75:13:01:
71:c8:84:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:29 2025 by rpki-client