Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fWGogyDdQ2P1OMunZhoUTgyAIWE.roa
File: fWGogyDdQ2P1OMunZhoUTgyAIWE.roa (raw, json)
Hash identifier: vYgm+Y02HjH/LQF8Ej39/Bp9UCT9PbUSUy5WzLRoQOQ=
Subject key identifier: 7D:61:A8:83:20:DD:43:63:F5:38:CB:A7:66:1A:14:4E:0C:80:21:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019195AEECB4E3834D65FCE946E5EED6DD21
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fWGogyDdQ2P1OMunZhoUTgyAIWE.roa
Signing time: Tue 27 Aug 2024 21:12:34 +0000
ROA not before: Tue 27 Aug 2024 21:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:95:ae:ec:b4:e3:83:4d:65:fc:e9:46:e5:ee:d6:dd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 27 21:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d61a88320dd4363f538cba7661a144e0c802161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:a6:15:cd:80:fd:97:a2:b2:2c:2d:c4:32:
41:8b:27:7d:e2:3b:6d:0b:43:b7:ed:b8:e7:18:87:
e8:80:6d:b3:f1:80:d0:26:7a:c5:a6:19:ff:2b:ef:
5a:4d:b0:cb:23:64:e6:f8:92:03:ed:1d:3e:94:54:
cb:5f:5c:f2:d6:e4:11:e1:67:ec:28:5e:bc:9a:2d:
40:ff:4f:8c:68:e4:3b:03:e9:88:47:a3:d3:e3:1d:
72:c2:5a:74:1c:82:c4:be:cf:34:f4:dc:c1:74:66:
4f:60:19:0f:e0:ef:29:b7:b1:65:6e:7b:b0:0e:46:
c9:78:97:34:32:72:1b:a3:f3:cd:bf:82:eb:90:d9:
57:37:01:d5:7d:78:3c:a7:93:c5:c2:60:25:7d:29:
3a:e8:67:f8:f1:25:40:4e:9a:e3:a7:3d:30:db:05:
a2:e5:61:70:7f:77:47:23:93:cf:a0:9f:72:d0:fd:
e5:e7:d8:19:5e:7b:4d:3b:5e:33:f3:65:c6:b9:08:
31:c0:d1:91:d0:ff:f1:6e:08:41:18:9e:e5:a4:f1:
fb:68:97:50:e3:d5:ed:45:2d:65:c3:a0:cb:fd:e6:
dc:60:7a:69:dd:58:f8:22:d1:e6:67:c0:5d:ad:00:
43:79:31:ea:27:2a:29:5e:96:a8:49:07:3c:5e:e6:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:A8:83:20:DD:43:63:F5:38:CB:A7:66:1A:14:4E:0C:80:21:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fWGogyDdQ2P1OMunZhoUTgyAIWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
23:d6:2d:9a:1e:e6:91:3f:d1:3e:9b:4b:68:d9:11:44:e2:63:
ef:54:c8:9e:56:82:04:08:3e:af:09:9a:be:07:2b:8e:c2:bf:
55:96:00:a9:89:d0:49:f0:3f:25:dd:2f:01:c0:a9:0b:9b:61:
7b:12:1d:eb:ab:ce:02:70:f8:4c:3e:63:10:1b:f9:89:f3:99:
e5:6c:1f:88:0e:98:f4:5a:af:1d:be:10:15:a5:5b:b3:92:86:
2d:ca:db:95:57:9e:a6:09:72:07:7b:9a:fc:7a:a6:51:bd:24:
04:b4:4b:84:45:0b:69:19:cb:e2:62:69:de:36:e6:09:3e:b3:
b2:92:fb:0b:07:95:c9:d8:98:33:3e:6e:a4:0a:d0:a0:78:2e:
0f:35:ca:2c:ca:51:8c:47:9e:c0:50:9e:c2:71:9f:35:40:f2:
23:6c:05:aa:28:bd:4b:bd:1c:29:58:27:8f:3d:33:a9:de:20:
56:a3:68:04:cd:e1:0a:88:d9:19:a2:b3:2f:5e:0e:66:c4:c6:
95:5f:df:51:fe:f2:d0:59:e9:1b:b5:ff:1a:78:eb:6f:e1:6e:
e6:2b:a2:43:4b:e9:4c:d6:f2:60:8b:e8:94:c2:13:c4:c6:aa:
e9:9a:4e:ac:5a:01:b1:8b:07:e3:67:33:ff:ff:8f:f3:da:17:
06:b9:bd:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:59 2025 by rpki-client