Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i8C6M7vquILHTsP5wqGfsJ-ziko.roa
File: i8C6M7vquILHTsP5wqGfsJ-ziko.roa (raw, json)
Hash identifier: sn9HpywrfkV4S3A0+vq6/o9OOLJ383+3scwbWuODYso=
Subject key identifier: 8B:C0:BA:33:BB:EA:B8:82:C7:4E:C3:F9:C2:A1:9F:B0:9F:B3:8A:4A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919C559F69A773CAA268E9D28BBCEB1224
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i8C6M7vquILHTsP5wqGfsJ-ziko.roa
Signing time: Thu 29 Aug 2024 04:12:22 +0000
ROA not before: Thu 29 Aug 2024 04:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:55:9f:69:a7:73:ca:a2:68:e9:d2:8b:bc:eb:12:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 29 04:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bc0ba33bbeab882c74ec3f9c2a19fb09fb38a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:38:9d:ab:c4:da:57:b6:17:af:7f:2c:a0:
f7:f9:3c:fb:96:d3:e5:10:46:6d:7c:f1:d1:d4:32:
e9:a1:02:d8:4f:fc:db:05:dd:4a:f7:d7:bc:57:25:
9c:f3:3f:7a:a4:2f:83:56:32:67:ee:04:ee:08:c0:
ca:d7:39:8e:ae:03:3a:6f:4f:f6:42:c5:43:9e:ba:
ae:05:50:85:6b:5e:55:f4:15:ed:53:72:4d:38:61:
04:5b:ee:10:2f:b1:a6:48:a9:d1:23:6f:2e:fe:9a:
b9:a9:c0:71:0d:9d:d4:9e:b9:49:f4:4f:d4:19:48:
dd:2d:a7:2a:6a:34:22:c3:9b:b4:e0:f9:71:2c:07:
5d:d5:cd:aa:95:9b:5f:ad:73:3a:30:93:1a:75:d3:
29:3f:4f:39:1c:fb:95:76:86:32:9a:13:65:43:d4:
82:1b:62:b6:8d:12:6c:a2:fe:5b:ee:5e:a1:60:e6:
56:e9:8e:82:96:4f:c4:db:c0:bd:a4:2c:ac:e2:a9:
4a:03:05:d4:0d:47:5e:e5:28:44:0f:0b:bc:f1:4f:
d2:cb:16:66:84:e2:d1:ed:24:74:cf:68:9f:91:ae:
89:3d:58:dd:ee:a4:02:06:f9:3b:da:4d:1b:b5:d0:
de:2e:ce:8b:3c:f9:a4:d5:33:10:8f:73:6c:14:b3:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:BA:33:BB:EA:B8:82:C7:4E:C3:F9:C2:A1:9F:B0:9F:B3:8A:4A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/i8C6M7vquILHTsP5wqGfsJ-ziko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8b:a7:81:c8:bd:3e:97:2f:18:8b:bc:0f:29:0c:db:c4:4a:04:
6c:fd:86:32:65:5b:0f:d4:74:2d:e0:a8:01:68:ea:da:fd:e9:
96:48:c1:bf:38:6f:24:28:3c:0c:db:2b:f1:0d:01:11:27:b3:
f2:7d:ef:78:d0:a5:53:5f:e2:f3:bc:2e:dd:cd:59:94:38:29:
40:1e:4e:3d:f4:30:8a:9b:7f:44:ed:b0:b7:e3:31:fb:22:0f:
75:ca:45:30:e3:5f:93:ff:d4:09:3e:81:2c:79:f3:22:f7:13:
38:c3:d7:0e:4f:79:8f:7d:2c:c6:23:4d:17:2f:9a:a0:3a:28:
4b:2a:a4:2e:7a:9d:2f:fa:ad:d3:bf:ca:16:c7:9f:13:3e:cf:
d1:d4:b6:45:bc:43:01:0b:63:d2:bb:09:99:12:f0:12:cd:6c:
dd:bc:bf:7b:d6:e4:99:c0:d2:3a:0a:05:4d:d2:3e:2a:e9:e3:
7b:d1:1f:38:4f:39:b6:7a:22:3f:e4:02:0c:b6:8e:aa:d8:42:
b5:2e:98:86:71:1f:51:d3:c4:06:b3:ed:03:30:df:05:65:30:
6c:82:3c:32:7c:8a:68:4b:a4:2c:30:c1:61:cb:00:6a:1b:90:
54:56:0b:52:de:34:55:e1:fc:04:40:5e:be:4b:c9:13:c5:bd:
46:45:25:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:53:07 2025 by rpki-client