Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gfVn8RVD4_p_3eyTIwJVNmt7iHU.roa
File: gfVn8RVD4_p_3eyTIwJVNmt7iHU.roa (raw, json)
Hash identifier: sBjz1UHkBk6yeplrODS2BNWJi1o8TkbOJ996nl1vfKQ=
Subject key identifier: 81:F5:67:F1:15:43:E3:FA:7F:DD:EC:93:23:02:55:36:6B:7B:88:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019432F0A3FA5CED8A1D3A2C2287B352D81C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gfVn8RVD4_p_3eyTIwJVNmt7iHU.roa
Signing time: Sat 04 Jan 2025 20:10:18 +0000
ROA not before: Sat 04 Jan 2025 20:10:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:f0:a3:fa:5c:ed:8a:1d:3a:2c:22:87:b3:52:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 4 20:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81f567f11543e3fa7fddec93230255366b7b8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:d2:70:93:b2:ea:8c:5b:d2:86:62:d5:67:
03:db:f7:d8:3d:ed:ca:24:6c:37:84:7e:3f:dc:60:
5d:c6:e4:0e:b2:7a:c5:31:27:6b:85:60:a3:e2:81:
c4:4d:21:f3:a7:c6:86:28:7a:26:a8:6a:bc:16:14:
0b:a5:e1:dd:94:a4:cf:96:41:e6:e9:43:c3:a9:ee:
fb:e0:33:1a:f6:9d:d8:5f:1d:ce:be:b4:bd:21:06:
19:b3:12:fe:46:0c:ca:86:b3:37:f1:c7:dc:60:4d:
a5:61:73:fc:31:c6:1e:3f:f7:7b:24:1d:82:ca:97:
80:27:59:a0:9b:ac:cb:13:38:e3:9b:30:42:1c:21:
33:02:c7:09:01:15:f4:82:ab:42:3c:a4:ff:5d:de:
af:38:c6:5b:57:5b:b8:9c:06:13:a5:59:53:11:0c:
69:1e:81:fa:34:08:de:d3:79:cf:d8:09:90:6b:2c:
1a:4e:4c:10:3c:d7:ae:ca:f4:33:92:fd:6e:d8:92:
d7:53:5e:6e:3f:05:98:fa:53:41:2c:52:2d:97:7c:
25:1d:a4:2a:45:d4:74:ff:80:91:ea:5d:c8:bd:ed:
e5:ee:df:88:7d:49:94:e2:9d:ea:29:df:28:66:e4:
b7:90:2b:5b:32:63:8d:1e:04:21:07:76:a2:35:70:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:67:F1:15:43:E3:FA:7F:DD:EC:93:23:02:55:36:6B:7B:88:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gfVn8RVD4_p_3eyTIwJVNmt7iHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
75:a6:6a:b8:b2:db:3c:63:a7:61:80:aa:25:1f:8b:5e:9a:fd:
59:e3:2c:df:0e:13:89:cb:d2:f6:81:82:d5:40:7a:9e:e9:b9:
05:5a:11:d6:f2:e2:09:93:67:9e:ae:32:5b:a3:38:56:f7:1c:
e1:3c:ba:f8:17:ca:45:ce:95:50:64:b6:c7:bc:14:8b:1c:47:
3a:52:d8:f7:8f:d2:e4:cd:f8:c9:4e:e2:c6:c5:a9:ec:aa:41:
b1:e0:f4:75:8c:3f:98:86:40:34:77:c4:d2:50:8e:f8:a2:0a:
5c:3e:bc:f2:e5:2e:f7:5a:12:f6:cb:31:96:96:7c:55:62:b7:
01:d5:17:26:7e:70:1f:7d:b6:8c:67:fa:cb:69:60:b9:26:5c:
fe:a3:5c:8e:20:58:db:fb:ef:68:9f:ec:d3:ba:10:ed:d5:ff:
dc:64:23:6b:ae:4f:9e:b8:62:1c:78:5b:da:18:7d:15:48:13:
e4:c2:25:99:c1:9e:0b:ae:90:e0:d6:01:32:2c:4b:c7:76:61:
06:ac:ef:6f:b1:0f:7f:b3:87:2e:7a:43:3b:8d:5a:8f:15:ef:
ae:9f:5f:8e:7f:91:5b:ac:70:d1:e7:b5:8f:6a:5c:f9:27:76:
47:90:31:b1:7d:68:22:d7:c0:ca:47:43:a3:38:2b:18:7f:22:
5a:4b:bf:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:07 2025 by rpki-client