Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iD2LwwfZRSRqkSd7byRe0xiRUVI.roa
File: iD2LwwfZRSRqkSd7byRe0xiRUVI.roa (raw, json)
Hash identifier: DZgmhvdwb9ebwP82MErg4S56x7b5F3LPbBFvmsTu/xw=
Subject key identifier: 88:3D:8B:C3:07:D9:45:24:6A:91:27:7B:6F:24:5E:D3:18:91:51:52
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910A2E7DC597C1EAC31854CE76BB2E53F3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iD2LwwfZRSRqkSd7byRe0xiRUVI.roa
Signing time: Wed 31 Jul 2024 19:05:04 +0000
ROA not before: Wed 31 Jul 2024 19:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:a2e:9af/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0a:2e:7d:c5:97:c1:ea:c3:18:54:ce:76:bb:2e:53:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 31 19:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=883d8bc307d945246a91277b6f245ed318915152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:0a:c9:b7:3b:2d:9b:8f:7a:ff:20:0a:b5:
2e:7f:c4:b1:af:8a:67:46:6c:dd:cb:78:02:51:a6:
7a:1c:0d:94:83:c8:ff:fd:5e:76:1b:39:d4:a7:34:
5c:5e:84:70:3d:27:da:d5:3a:94:3a:da:e1:69:4e:
84:a4:ac:c0:aa:04:95:f4:86:ff:d0:d6:f2:a4:f5:
28:4d:17:58:19:21:7f:7d:94:7b:dd:c1:ac:da:ea:
f6:28:21:02:27:a4:57:ca:28:58:06:b8:d8:da:4a:
25:2f:82:3b:30:51:2a:46:67:9c:f5:73:51:88:a3:
53:66:21:20:3e:4f:62:f3:45:3f:32:24:b8:a9:4c:
5a:b0:12:b7:6e:48:2d:ae:2f:82:dc:94:3a:20:e8:
d8:df:ec:4b:f4:0f:39:b7:6b:c4:46:d4:a5:85:f9:
51:0b:89:5f:c2:08:68:4f:4d:7b:74:cf:64:7f:e2:
9e:34:08:e9:f8:84:32:f7:03:47:a5:6a:eb:d7:02:
f5:42:07:a3:ba:4b:47:bd:db:95:75:4c:d4:a0:3b:
8f:52:fa:e9:64:e2:ef:9d:ca:c7:36:b8:ec:df:3e:
15:b5:d3:2e:24:93:94:d4:09:7c:7d:9e:74:87:3d:
47:06:9b:ab:89:bd:c2:2f:3d:03:65:49:b2:07:32:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:8B:C3:07:D9:45:24:6A:91:27:7B:6F:24:5E:D3:18:91:51:52
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iD2LwwfZRSRqkSd7byRe0xiRUVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:a2e:9af/128
Signature Algorithm: sha256WithRSAEncryption
30:04:4e:18:dc:16:66:b6:44:03:b5:89:71:6a:94:b3:86:0b:
36:c1:82:98:ea:2a:01:97:21:28:4b:bc:6c:e2:12:f3:b2:ed:
ae:89:de:46:bf:ed:5a:31:6e:32:8e:0e:be:35:3e:ed:d6:9c:
3d:fc:25:f8:14:56:fe:6b:e1:7a:17:b2:7c:88:d8:2c:c6:dd:
a0:8c:02:4b:29:70:cd:9f:c0:b2:a1:bd:d2:2c:e2:85:fe:76:
d8:e2:52:14:6b:45:0a:df:a6:b6:bc:94:1f:1f:00:a3:4e:01:
35:1c:49:ed:a5:87:3f:54:3b:d9:de:7c:42:4e:09:4f:90:40:
10:5f:23:07:7a:5d:12:8c:da:ed:dc:97:3d:5a:01:20:4d:d4:
2c:a7:22:cb:b8:9e:b2:b1:31:d4:1d:c6:5c:9a:be:7d:69:ce:
0e:e1:78:b6:cc:27:17:e5:76:7f:b4:31:7c:83:bb:f1:2f:c1:
0e:76:72:3d:dc:45:81:c2:3c:ae:8a:ce:df:bb:f3:45:9d:b0:
2a:f9:d3:18:8f:02:6c:2b:9d:16:59:6d:a8:26:88:69:a2:8c:
99:6a:bd:e9:23:44:21:a1:b4:c8:1f:bd:8d:c7:59:18:da:f8:
30:78:e3:81:f5:38:5d:f2:fd:aa:82:b7:ec:4f:61:fc:aa:81:
3a:47:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:39 2025 by rpki-client