Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gFPB1dzj-xO2dmDaaxaqC7Sz6yA.roa
File: gFPB1dzj-xO2dmDaaxaqC7Sz6yA.roa (raw, json)
Hash identifier: FT3Tbzacdqco8V4JKOykj9i2cia836uThLOiaGtvwS0=
Subject key identifier: 80:53:C1:D5:DC:E3:FB:13:B6:76:60:DA:6B:16:AA:0B:B4:B3:EB:20
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019232F391ED5FDD9D0A9EA63EFECD745CDE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gFPB1dzj-xO2dmDaaxaqC7Sz6yA.roa
Signing time: Fri 27 Sep 2024 10:07:56 +0000
ROA not before: Fri 27 Sep 2024 10:07:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:32f0:4a7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:f3:91:ed:5f:dd:9d:0a:9e:a6:3e:fe:cd:74:5c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 27 10:07:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8053c1d5dce3fb13b67660da6b16aa0bb4b3eb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:f6:04:ba:12:03:7e:eb:9e:81:4e:62:93:
dc:b2:10:15:ba:7b:4d:16:75:55:e7:2f:6b:64:c8:
9e:9a:d6:ad:a4:4d:c7:2c:33:32:a5:e5:c5:2f:2f:
c8:86:d3:51:00:2e:d9:b4:6d:6d:bc:56:a5:c7:fe:
c7:c3:2b:fc:4d:78:8d:cf:09:89:31:43:9e:c9:bc:
42:cb:ec:1b:b2:9b:5b:3d:fb:65:73:61:98:66:af:
61:ae:60:8d:0f:56:ed:96:74:66:b4:a2:db:72:6f:
f1:06:32:c5:a0:a4:29:e1:36:b3:df:71:5c:36:16:
4e:8d:56:a1:55:06:32:ce:ad:eb:34:61:e8:12:32:
ca:66:21:bd:c7:2d:44:d2:c3:0b:24:49:4f:22:66:
09:85:b4:f2:b3:4f:24:7f:d7:4c:57:47:f5:d9:ad:
8b:13:da:e8:fb:40:59:7d:c2:4b:80:13:2f:96:6e:
d8:42:a6:03:7b:3c:aa:bf:d4:66:13:55:c2:f6:3d:
1c:85:05:03:73:73:80:97:de:94:fd:62:6a:ee:3b:
04:34:b8:d4:35:2b:43:ee:b0:f2:9e:47:a5:95:3c:
ef:34:d5:52:28:4a:da:76:50:67:a9:d1:04:d3:d1:
ec:89:ce:a5:2b:76:d9:cb:11:8f:78:74:b0:0c:d6:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:53:C1:D5:DC:E3:FB:13:B6:76:60:DA:6B:16:AA:0B:B4:B3:EB:20
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gFPB1dzj-xO2dmDaaxaqC7Sz6yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:32f0:4a7a/128
Signature Algorithm: sha256WithRSAEncryption
00:ee:01:75:60:1c:25:24:3b:30:a8:90:f6:c8:4d:06:e7:0c:
1f:ce:02:07:2c:c9:c8:95:0e:37:8b:4b:29:75:73:c4:9f:99:
0e:5b:22:c3:47:96:f0:7f:cb:ae:af:de:db:45:d9:63:ee:a8:
5e:b8:29:51:48:b5:bd:b1:7c:49:14:32:b0:ad:bb:1a:76:49:
1a:e8:5c:f1:e4:73:21:69:4a:28:8f:31:db:04:d2:5b:97:5b:
46:89:a9:f6:42:b6:0f:47:8e:60:f1:f8:a3:0a:8d:47:61:cc:
d0:59:b6:7c:d6:31:25:b1:50:59:cb:20:3c:3d:b7:ff:2c:97:
f1:14:c7:2c:4f:0b:65:25:f8:fb:85:00:e9:67:5e:3e:a5:b2:
df:33:62:a2:9a:71:d0:66:02:c5:16:f3:00:02:ac:18:8a:5c:
2c:78:4f:9f:52:82:18:ae:ac:cb:8b:74:bd:75:88:3f:fd:0a:
8b:a7:8e:bd:4b:13:75:72:c1:64:0a:4b:04:04:1e:bf:7b:be:
14:2b:72:da:09:52:7e:42:30:07:50:ef:ad:6f:92:67:c6:d7:
91:6e:22:50:a1:f3:56:0f:3e:68:aa:14:45:12:c9:d8:06:a2:
43:3c:42:09:76:09:43:86:e9:7d:e6:77:b8:9c:26:a1:43:2b:
a0:e9:ce:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:59:05 2025 by rpki-client