Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i3kVRWzJGTEsTkxPI8AUcrlx054.roa
File: i3kVRWzJGTEsTkxPI8AUcrlx054.roa (raw, json)
Hash identifier: DXuzZkFl2qvi2Ma45NjUiKsSUppWiGsJVt7v8xxtKhI=
Subject key identifier: 8B:79:15:45:6C:C9:19:31:2C:4E:4C:4F:23:C0:14:72:B9:71:D3:9E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194565AFE64E94154CF7EAD731EC114AF9D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i3kVRWzJGTEsTkxPI8AUcrlx054.roa
Signing time: Sat 11 Jan 2025 17:13:11 +0000
ROA not before: Sat 11 Jan 2025 17:13:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:56:5a:fe:64:e9:41:54:cf:7e:ad:73:1e:c1:14:af:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 11 17:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7915456cc919312c4e4c4f23c01472b971d39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fa:d9:2a:fd:f0:46:3b:e9:e7:41:2c:9c:56:
7d:45:53:0f:a6:23:2a:c7:e6:aa:7f:42:e5:29:cd:
4e:2d:97:78:9c:a5:b1:01:35:6d:67:83:2a:0d:18:
c5:b2:bb:33:03:39:2d:ad:7c:41:03:3f:86:68:45:
85:ad:e0:d8:56:da:3f:25:99:66:a7:59:1f:8f:56:
7f:d7:fb:6f:da:2a:49:0a:e2:4c:2f:df:70:73:2a:
5b:ad:64:07:6c:02:33:4d:65:23:fc:94:6f:7e:95:
2d:f9:c2:57:a3:1e:60:28:b9:dc:3e:d4:d1:f9:e4:
ba:d3:b9:22:49:da:ed:8b:5d:43:63:fb:68:3f:59:
7e:b1:6f:69:2f:56:16:5a:fb:6b:c4:b5:a3:52:e9:
b6:64:e8:15:69:1b:38:ac:33:49:be:80:ff:ff:cb:
ee:bc:3a:0b:85:83:9e:d4:7b:c6:07:7d:c3:b1:03:
65:ca:b0:38:71:92:f3:8e:db:0d:83:e7:80:67:8d:
04:7a:4e:32:df:f5:35:07:76:97:96:8a:8a:0b:16:
58:da:15:15:0b:01:55:fc:6e:07:d4:88:15:49:91:
fc:ce:08:ee:db:b0:76:90:b1:b2:95:9f:1e:35:3f:
29:c1:1b:de:d9:69:8b:59:92:50:30:69:8f:7c:a3:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:79:15:45:6C:C9:19:31:2C:4E:4C:4F:23:C0:14:72:B9:71:D3:9E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i3kVRWzJGTEsTkxPI8AUcrlx054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
08:b4:13:6c:9a:96:f8:c3:54:4c:e5:18:09:cf:83:4f:6c:e8:
17:10:f0:4f:9d:13:d7:bf:3c:6e:01:08:52:1e:b1:21:a4:05:
3f:86:b1:be:c5:72:71:a7:8b:3f:dd:d5:81:0d:e9:16:9f:14:
bb:e7:31:14:87:82:7b:13:9c:00:20:29:93:27:68:74:f3:e5:
67:86:cc:91:39:64:4a:7e:9c:79:41:c1:3d:64:43:f6:91:61:
0b:56:dc:f8:6c:51:27:8b:e9:8d:25:b7:c4:b3:c9:fb:46:17:
6b:e0:65:e2:b3:e8:b4:68:1f:8c:ec:a2:87:83:20:4b:5b:ca:
d8:78:39:37:55:32:a6:28:0d:f4:33:da:6e:be:dd:00:c2:1f:
86:73:4d:14:10:ae:88:a1:14:da:20:06:52:50:f7:76:11:9e:
9e:ec:a3:47:4c:44:54:21:79:05:92:dd:39:3e:97:a9:91:80:
df:fd:bd:0d:da:f1:1a:e8:9a:34:a1:c9:a6:a3:c4:34:23:55:
5d:06:a1:35:08:73:62:d3:a7:9b:12:67:0e:0c:bc:1b:a0:2e:
3f:97:22:8d:9c:e0:8f:c5:d8:b2:3c:96:19:11:5b:47:27:7c:
91:8c:ea:df:e1:e6:c7:dd:2a:47:3e:e9:70:48:f1:c5:7f:27:
91:a8:52:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:04 2025 by rpki-client