Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hQy7j52JCfdL9vBfNDF3JmQSNYo.roa
File: hQy7j52JCfdL9vBfNDF3JmQSNYo.roa (raw, json)
Hash identifier: YrVePfov5j5xFelf4ylrg/3JDmIX0qKiNgUJNQ/cfNo=
Subject key identifier: 85:0C:BB:8F:9D:89:09:F7:4B:F6:F0:5F:34:31:77:26:64:12:35:8A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CB19F8EF89FCE559D259C9564EAAADA5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hQy7j52JCfdL9vBfNDF3JmQSNYo.roa
Signing time: Sat 07 Sep 2024 06:09:22 +0000
ROA not before: Sat 07 Sep 2024 06:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cb:19:f8:ef:89:fc:e5:59:d2:59:c9:56:4e:aa:ad:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 06:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=850cbb8f9d8909f74bf6f05f343177266412358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:b7:f7:ea:26:66:51:b3:b3:b8:45:a8:11:
7c:b6:92:d0:9b:4e:60:21:10:bc:4c:34:d7:41:d6:
42:22:30:ac:e6:03:19:8b:67:58:0d:55:e0:72:c2:
86:d7:90:77:0e:e2:92:da:d3:1a:c0:28:44:88:c9:
d3:3c:a5:3c:2a:e2:29:da:f2:70:1d:00:79:52:70:
19:eb:b2:e3:59:bc:2a:00:5c:dc:c8:1a:90:75:b2:
36:2a:4b:fd:2c:c8:1f:b3:1e:5b:0b:05:d8:a5:de:
63:7c:b7:d7:0a:17:0c:7e:4f:5b:cb:75:bd:d3:fc:
0b:b7:9f:6c:76:31:24:da:2d:43:ad:37:a9:77:4c:
d8:1c:95:82:7e:5f:9a:4b:4b:9a:66:d2:ca:73:75:
52:e0:45:37:74:b0:59:3f:a6:91:7a:69:3d:ee:fc:
0d:12:b2:cf:32:67:87:7d:2f:67:9a:bd:e6:88:f5:
ec:f2:3c:c7:5a:b6:5d:b4:00:60:b4:89:f8:56:3c:
30:06:ad:d2:27:37:f4:07:88:79:41:89:d9:a2:8b:
47:d4:8c:07:ec:5f:ea:ae:c8:b9:7e:5f:2c:3b:84:
3a:15:1b:e0:a4:56:9b:46:48:39:8e:51:32:bd:ac:
4b:af:cc:c0:17:4f:e1:c0:af:a0:6b:8b:59:bb:1c:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:BB:8F:9D:89:09:F7:4B:F6:F0:5F:34:31:77:26:64:12:35:8A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hQy7j52JCfdL9vBfNDF3JmQSNYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
11:c0:3c:89:31:28:30:91:23:e5:7a:fd:4c:0b:3c:14:d3:41:
44:6f:e6:75:d5:50:8c:b6:92:29:21:fb:82:d3:c8:b7:53:4b:
02:92:72:c0:1c:b1:7f:ee:ed:46:56:f9:04:b1:99:e1:bb:e3:
56:3c:1f:f9:58:56:1b:61:ad:84:c8:58:89:d6:1c:ff:58:06:
4c:2b:ae:b0:a9:37:fa:d0:80:6a:8d:74:37:d3:a5:e8:26:bd:
91:6e:a9:b1:c5:34:7a:bb:52:54:a1:81:7a:3e:04:46:8e:d6:
09:85:fd:97:79:84:cd:8e:b7:13:58:49:b3:37:f4:71:b1:ad:
b9:e1:16:cc:92:91:b6:9b:32:35:c9:6f:25:6f:82:90:30:6d:
a8:3c:73:83:eb:09:71:03:27:93:09:39:97:a0:d1:b8:42:cd:
00:e5:ba:1c:57:4f:b2:e0:78:fe:f1:1b:41:e6:f2:d5:68:36:
d8:7f:57:37:aa:3c:cf:ce:f1:39:74:de:f4:ed:1c:94:62:04:
7b:64:fd:1b:03:4b:d5:3c:a1:55:17:25:b1:d9:fe:1f:19:43:
89:df:53:54:5f:75:95:3f:f4:14:ac:d6:ea:24:56:5a:f9:bb:
dd:d3:24:83:e9:71:a7:03:e5:83:60:7d:a1:6c:5c:15:ba:35:
91:86:50:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:49:41 2025 by rpki-client