Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fOxUVwoulYWszJChTmo-dq5DitU.roa
File: fOxUVwoulYWszJChTmo-dq5DitU.roa (raw, json)
Hash identifier: NWNgQSYsKIR1Mm6RbJ3dxHbeKJrNrf9s9jW465TNhnI=
Subject key identifier: 7C:EC:54:57:0A:2E:95:85:AC:CC:90:A1:4E:6A:3E:76:AE:43:8A:D5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913A3F7BD40208FBD7315470FCDB1202FC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fOxUVwoulYWszJChTmo-dq5DitU.roa
Signing time: Sat 10 Aug 2024 03:05:24 +0000
ROA not before: Sat 10 Aug 2024 03:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:3a3f:57e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3a:3f:7b:d4:02:08:fb:d7:31:54:70:fc:db:12:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 03:05:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cec54570a2e9585accc90a14e6a3e76ae438ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:43:44:61:fd:0c:98:b3:16:d5:a9:75:47:
02:32:7f:84:bc:47:b9:cd:44:a6:59:9d:b3:c1:96:
a5:10:d6:4d:80:9b:c2:12:f8:a8:ae:5c:4f:61:80:
aa:a4:4b:f2:55:70:50:3f:0b:37:24:9a:76:12:ba:
64:17:ce:4c:11:25:d9:98:7b:bc:a5:64:6e:73:69:
df:56:39:62:5e:ab:f4:25:68:4c:8c:2e:a4:6c:e8:
32:78:40:5a:9b:30:58:ec:89:16:43:89:7f:30:55:
31:b3:e3:98:a8:ad:13:3e:a6:74:76:3b:1d:fe:1f:
fc:db:4e:ea:4a:09:7b:e7:7c:58:bd:84:86:8f:6e:
62:9c:8e:92:a9:c3:bf:36:16:19:fa:2c:89:f1:2e:
2d:4a:48:47:27:10:ec:f2:ab:2d:a0:5d:93:c1:62:
15:1f:bc:c4:ef:a8:9e:0b:fd:e5:14:0b:fc:cc:94:
cc:f7:ef:54:95:f5:fc:31:9c:12:dd:3a:37:0e:a0:
e5:cd:42:b5:71:67:f5:80:b4:58:2b:bf:b4:70:c4:
c4:18:da:95:c4:d9:14:7d:06:14:6a:52:56:ea:af:
19:24:45:57:8b:68:fc:e8:c5:88:6c:8a:f8:71:9b:
97:4d:32:02:0e:47:77:83:8b:16:76:32:d1:f8:44:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:54:57:0A:2E:95:85:AC:CC:90:A1:4E:6A:3E:76:AE:43:8A:D5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fOxUVwoulYWszJChTmo-dq5DitU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:3a3f:57e/128
Signature Algorithm: sha256WithRSAEncryption
51:48:41:43:ea:75:3a:22:34:b1:ca:3b:a2:1b:3a:9e:91:07:
69:b4:bb:db:0f:4a:bd:35:9e:c2:fc:71:d7:51:7f:9d:f1:f9:
1e:36:e9:92:05:ca:0c:e8:9a:e6:71:a6:c7:e0:1b:15:1c:51:
05:85:20:a1:70:6c:7b:9a:e8:0a:39:56:f8:c6:10:42:74:de:
3b:e2:43:82:fa:9e:48:54:3a:ac:ab:34:97:7c:a6:6f:51:ae:
cc:f6:13:ad:e2:b5:b7:68:f9:41:ac:c2:a6:3f:c5:22:b2:48:
72:c6:29:36:29:bd:7b:7f:88:84:e7:51:c3:01:25:b2:a6:bd:
f7:6a:75:b2:36:9e:d7:03:25:99:f3:10:41:b3:d4:1f:56:af:
7c:83:f2:e3:34:82:12:7f:c3:76:92:ea:bb:05:4b:74:27:98:
8d:e9:9c:5d:7b:cc:74:94:b7:21:14:15:52:69:ce:9d:02:75:
0b:a0:c0:c9:e5:f1:54:41:06:06:09:a3:38:07:8c:16:6b:fd:
19:4d:66:63:08:52:ed:65:08:47:07:02:a2:c3:c4:2a:45:ef:
f8:a9:62:c2:2b:f1:06:ec:3f:47:c4:0f:18:a1:0a:0b:4d:78:
10:28:51:62:38:bf:94:be:0d:8e:20:b2:45:c0:09:15:5e:ff:
d1:cd:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:47 2025 by rpki-client