Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hAtm_V8cktDYqdoLSPdr32dIwjc.roa
File: hAtm_V8cktDYqdoLSPdr32dIwjc.roa (raw, json)
Hash identifier: FCYz1ycHRSxlYYX2q4D8rsEO3jb8VwjWThJHbcra6ZU=
Subject key identifier: 84:0B:66:FD:5F:1C:92:D0:D8:A9:DA:0B:48:F7:6B:DF:67:48:C2:37
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915C9399C2F4E8A016E2894E0E4227EA0A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hAtm_V8cktDYqdoLSPdr32dIwjc.roa
Signing time: Fri 16 Aug 2024 19:04:22 +0000
ROA not before: Fri 16 Aug 2024 19:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:5c93:5c82/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5c:93:99:c2:f4:e8:a0:16:e2:89:4e:0e:42:27:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 16 19:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=840b66fd5f1c92d0d8a9da0b48f76bdf6748c237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:fb:bb:83:e1:4b:8a:e3:63:73:be:ab:f5:
eb:42:79:35:d0:aa:22:58:a1:92:30:bc:ea:cc:44:
77:e1:90:57:7c:53:b7:fb:0f:b3:37:ac:69:76:9b:
c4:14:81:88:9c:e4:6a:67:7b:1b:e9:7c:d3:1d:b2:
7c:7f:1f:01:00:db:83:4a:d5:c4:3d:d4:39:e9:73:
6e:70:11:4a:d5:d6:fd:04:f5:5a:39:db:9a:64:06:
cf:f0:19:11:f2:40:46:c9:3a:8b:ec:01:fc:3e:50:
ef:c4:f8:eb:01:a4:a7:ee:a9:95:c0:34:32:96:2d:
0c:d8:70:39:24:52:e1:09:3e:a7:ec:f6:55:fb:fe:
f3:8c:f8:55:79:05:bb:01:88:14:db:06:b9:c5:b0:
fa:b2:02:d2:6e:fd:ef:1e:b2:69:9e:a3:5c:d7:3c:
a8:d4:ee:b9:ee:cf:65:dd:67:51:ba:d6:9c:f0:54:
db:62:59:16:97:89:5a:6f:d7:f4:27:e1:20:9d:55:
48:7b:bd:e4:1a:53:64:5e:af:c2:14:52:52:97:06:
f4:b6:69:56:b6:68:7f:d2:49:05:92:c5:da:2a:ab:
67:b2:53:d8:4e:b2:d7:d2:5b:f0:49:af:ef:18:d3:
d0:6c:df:4c:cd:39:2c:d8:16:ab:ed:c9:94:d5:f8:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:66:FD:5F:1C:92:D0:D8:A9:DA:0B:48:F7:6B:DF:67:48:C2:37
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hAtm_V8cktDYqdoLSPdr32dIwjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:5c93:5c82/128
Signature Algorithm: sha256WithRSAEncryption
77:0b:4d:db:fe:df:bd:23:ff:fe:f4:20:3c:af:7a:08:94:da:
b7:7e:e1:a7:92:93:77:23:19:24:9f:7a:b9:17:e4:70:79:79:
e4:ba:e6:b2:47:d8:69:52:e2:03:2b:13:0b:c8:f1:9b:cf:43:
53:1a:a2:d7:84:75:cd:57:83:c1:13:3b:c3:ec:82:da:78:af:
3c:e6:98:99:85:70:03:88:65:cb:5a:c5:95:5f:43:49:07:7a:
e1:c2:80:5c:7f:70:8e:83:8a:3f:52:e7:19:21:de:2a:2f:e6:
8d:38:9f:51:1a:db:b5:b4:86:b7:ee:60:15:e7:ce:ab:d0:ef:
3b:ca:16:a8:70:a0:fa:09:6c:fa:4a:02:90:cd:af:47:4b:b7:
45:95:21:28:78:c5:45:f4:6e:28:0e:99:84:97:c4:3d:5c:92:
e6:61:db:cf:76:b3:09:da:2a:0c:cc:e6:2f:ee:7a:90:93:b3:
1a:fb:a0:20:dd:8d:4a:bd:98:d9:d7:74:84:4f:ef:2c:95:86:
64:03:40:52:de:33:8e:1c:3f:bf:67:67:e4:c5:e8:1a:fc:7a:
54:b4:a2:a9:a0:ee:b6:fc:c8:91:54:be:fc:73:d7:0e:2a:3c:
fa:59:df:3b:53:33:25:50:1c:8b:9f:eb:0c:be:87:fd:de:f3:
bb:dc:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:17 2025 by rpki-client