Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f1nwzAWGPRgv7laEP9oNd-r870A.roa
File: f1nwzAWGPRgv7laEP9oNd-r870A.roa (raw, json)
Hash identifier: NmBBX0py1mNbXUjfHg0HosiC4mDxUK6+eGVaX8bpc5k=
Subject key identifier: 7F:59:F0:CC:05:86:3D:18:2F:EE:56:84:3F:DA:0D:77:EA:FC:EF:40
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D1F8B38313E0DED41936E7E42BEC82D2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f1nwzAWGPRgv7laEP9oNd-r870A.roa
Signing time: Sun 08 Sep 2024 14:10:22 +0000
ROA not before: Sun 08 Sep 2024 14:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:f8:b3:83:13:e0:de:d4:19:36:e7:e4:2b:ec:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 14:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f59f0cc05863d182fee56843fda0d77eafcef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a2:95:2a:71:c3:42:ee:bb:95:d0:95:2d:06:
6b:16:8e:59:b7:28:a9:36:69:fe:28:18:58:49:6f:
45:86:1e:d0:59:8b:ae:c6:3b:58:7f:57:d9:43:2f:
cc:23:f7:64:bc:84:9d:47:e5:b6:78:77:1e:a4:78:
4d:67:63:d5:1a:de:fd:5d:67:b9:ff:70:0f:33:74:
a1:fe:a0:7c:3b:59:e5:8e:7d:ac:fb:39:4d:50:46:
c5:2a:ca:ac:0a:cf:49:8b:c0:3d:f3:fc:47:2c:56:
0f:82:d6:f1:1c:ec:b5:12:b4:64:aa:ad:31:32:ef:
88:b2:cc:7e:41:20:43:e8:f5:91:a4:4c:47:ae:15:
9d:cb:6e:46:bd:98:0a:93:31:dd:e0:52:7e:28:32:
a7:75:86:47:82:91:17:43:5b:9e:a3:a9:41:f5:57:
c8:ca:14:83:04:10:a4:d8:1a:9e:b9:c4:f3:1f:43:
38:e2:f1:da:4b:a5:dd:c3:35:3b:2b:2c:51:ec:8c:
bb:28:65:3f:74:46:62:cf:17:1a:3a:7c:3c:7c:a5:
dd:0e:15:f0:ee:ae:b7:4c:75:c3:a9:b1:68:2b:49:
e2:49:2b:2e:5e:3e:d9:f6:32:cd:13:69:d3:a2:f6:
c3:fd:8d:11:39:f2:52:a1:ed:19:45:d5:b1:a0:c3:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:F0:CC:05:86:3D:18:2F:EE:56:84:3F:DA:0D:77:EA:FC:EF:40
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f1nwzAWGPRgv7laEP9oNd-r870A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
03:be:46:67:4a:ae:ff:2d:f0:0f:46:77:05:c9:6f:a9:ac:86:
96:cc:45:ca:89:78:f2:5d:08:b2:61:6c:75:31:92:2d:4e:3d:
b9:6d:6d:c3:8f:98:f6:a6:7b:de:fc:ea:70:67:9a:a5:db:57:
59:8d:f2:1a:4a:6a:ea:a7:af:e2:99:fe:c1:3c:9f:19:70:3c:
8c:58:d2:3d:1b:0b:ee:f7:be:cb:7e:1d:1b:f6:84:c8:f2:b0:
59:f4:a0:23:5c:8e:5a:5b:3c:45:9d:35:fd:72:82:f9:31:68:
59:d9:7c:11:36:5c:c3:0a:a4:93:43:50:09:ec:80:10:81:1d:
8c:76:8e:92:88:16:72:c2:cb:4e:30:34:2e:72:f1:08:ab:fe:
da:9e:cd:09:73:1c:ab:c9:ee:77:a6:0c:9f:ff:ee:7b:07:a2:
c3:1f:62:30:dd:8e:fa:0a:45:ed:32:39:48:16:dd:bc:08:79:
66:48:94:47:ce:24:91:1a:59:34:5a:fd:65:81:34:40:8a:c2:
93:27:2d:6c:7f:e2:95:de:4f:55:64:42:ab:ed:ee:2a:28:75:
b8:40:86:ac:2e:e4:41:06:c2:9e:cc:5e:ec:3b:ea:68:22:52:
b9:69:40:6f:ea:7a:a1:18:e3:61:c2:f8:f1:c4:72:ff:70:7a:
f1:1a:81:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:39 2025 by rpki-client