Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/foHQwlNt6oN25hkHXYxldVWSlA0.roa
File: foHQwlNt6oN25hkHXYxldVWSlA0.roa (raw, json)
Hash identifier: 7sW8PKH5RGQOYVmXIMA2pISBTsUdBGt5PYTAn9w0idQ=
Subject key identifier: 7E:81:D0:C2:53:6D:EA:83:76:E6:19:07:5D:8C:65:75:55:92:94:0D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191310B86E5361F7F2D39F19E61947AA06A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/foHQwlNt6oN25hkHXYxldVWSlA0.roa
Signing time: Thu 08 Aug 2024 08:12:04 +0000
ROA not before: Thu 08 Aug 2024 08:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:0b:86:e5:36:1f:7f:2d:39:f1:9e:61:94:7a:a0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 08:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e81d0c2536dea8376e619075d8c65755592940d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:17:a8:c7:78:35:e2:73:a8:e5:85:31:04:
d2:cb:e4:55:63:50:31:61:49:d5:a9:7d:de:33:60:
58:05:c6:85:83:e9:e3:44:f8:4c:c6:1a:1f:84:0c:
c0:69:bf:ae:40:4b:fc:29:e4:1b:3a:47:51:f0:18:
0a:d0:e1:b6:20:33:7f:ec:cc:4f:fb:ae:42:c2:b1:
f1:13:82:87:39:a1:14:2e:7a:a2:f1:81:45:02:45:
44:91:27:3c:3e:6e:a6:21:ae:28:d3:a3:39:11:8d:
8b:48:48:9d:f2:40:4f:d8:a5:25:5f:75:22:58:ca:
18:25:75:b1:f3:a0:01:49:89:53:60:41:4c:27:70:
62:d6:1d:21:c8:30:40:b1:b3:2f:06:1d:ee:4d:de:
2c:ec:25:2b:cc:be:c0:d1:d9:f4:cf:0e:c0:05:76:
a2:84:21:d4:ec:83:5e:65:d1:6c:98:e1:a5:48:53:
11:cd:eb:c3:3b:71:60:4b:bf:fd:db:59:f2:02:b2:
49:3d:9f:32:68:ab:0d:e8:5b:e2:71:c8:93:b8:92:
4b:7d:65:2b:4e:a6:5a:87:44:e8:bd:d9:a4:c3:69:
b3:db:6e:5b:60:71:27:d2:e0:8c:c7:fa:a8:4d:79:
56:bc:e3:66:09:21:6a:d0:2f:ea:37:52:7b:0f:4f:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:81:D0:C2:53:6D:EA:83:76:E6:19:07:5D:8C:65:75:55:92:94:0D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/foHQwlNt6oN25hkHXYxldVWSlA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1b:99:df:40:13:ab:d5:32:38:31:9f:5a:65:70:22:ca:75:50:
95:4d:f1:12:0a:53:9d:b6:3a:ea:36:82:b7:2b:79:5c:de:bc:
dc:39:5c:f9:59:02:0f:29:2c:12:48:e6:ed:a2:7b:99:f6:6e:
81:5d:d3:cf:5c:d4:09:ab:fb:1e:d1:b0:33:84:20:5c:cd:d4:
5e:0e:73:a5:95:0a:84:e3:23:79:75:ea:78:58:f9:8b:7c:bf:
06:09:c5:9d:c8:05:19:1e:a5:44:85:04:06:05:34:b6:04:68:
e8:b6:56:b7:64:7e:6d:03:9f:7c:95:21:7a:bc:c8:44:11:cb:
e3:5b:8f:02:fd:b1:3e:09:1d:24:50:b3:22:67:11:ce:fc:a9:
d3:e6:f7:c1:ec:8e:40:e3:cc:d3:26:79:f2:7a:05:0f:04:91:
07:4a:b4:a0:10:50:d3:69:45:3a:dc:7c:bd:41:86:fb:d0:76:
f3:99:65:2f:99:2a:4e:72:f2:ee:ed:1e:22:15:7d:22:91:55:
ac:59:67:5d:b7:17:85:e7:95:2b:c7:c2:b7:60:24:4b:89:4f:
72:f1:c8:0f:f4:50:23:03:33:c3:9b:a1:31:00:23:e5:48:cf:
71:ad:1a:0b:96:c4:64:0e:be:bc:24:a4:c2:ec:a0:1e:05:f8:
ef:c4:86:21
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZExC4blNh9/LTnxnmGUeqBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODA4MDgxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTgxZDBjMjUzNmRlYTgzNzZlNjE5MDc1ZDhjNjU3NTU1OTI5NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMMXqMd4NeJzqOWFMQTSy+RVY1Ax
YUnVqX3eM2BYBcaFg+njRPhMxhofhAzAab+uQEv8KeQbOkdR8BgK0OG2IDN/7MxP
+65CwrHxE4KHOaEULnqi8YFFAkVEkSc8Pm6mIa4o06M5EY2LSEid8kBP2KUlX3Ui
WMoYJXWx86ABSYlTYEFMJ3Bi1h0hyDBAsbMvBh3uTd4s7CUrzL7A0dn0zw7ABXai
hCHU7INeZdFsmOGlSFMRzevDO3FgS7/921nyArJJPZ8yaKsN6FvicciTuJJLfWUr
TqZah0Tovdmkw2mz225bYHEn0uCMx/qoTXlWvONmCSFq0C/qN1J7D08pWQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFH6B0MJTbeqDduYZB12MZXVVkpQNMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZm9IUXdsTnQ2b04yNWhrSFhZeGxkVldTbEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAG5nfQBOr1TI4MZ9aZXAiynVQ
lU3xEgpTnbY66jaCtyt5XN683Dlc+VkCDyksEkjm7aJ7mfZugV3Tz1zUCav7HtGw
M4QgXM3UXg5zpZUKhOMjeXXqeFj5i3y/BgnFncgFGR6lRIUEBgU0tgRo6LZWt2R+
bQOffJUherzIRBHL41uPAv2xPgkdJFCzImcRzvyp0+b3weyOQOPM0yZ58noFDwSR
B0q0oBBQ02lFOtx8vUGG+9B285llL5kqTnLy7u0eIhV9IpFVrFlnXbcXheeVK8fC
t2AkS4lPcvHID/RQIwMzw5uhMQAj5UjPca0aC5bEZA6+vCSkwuygHgX478SGIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:46 2025 by rpki-client