Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ifgfIYbo5IZx4oMTXyCD7zKFFxc.roa
File: ifgfIYbo5IZx4oMTXyCD7zKFFxc.roa (raw, json)
Hash identifier: e7xxvdqwKB+y82/6ZOajOzVfxDremguwv6W/LsmYL4w=
Subject key identifier: 89:F8:1F:21:86:E8:E4:86:71:E2:83:13:5F:20:83:EF:32:85:17:17
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019441C0C188AB49A6A33E855E66A25C66BC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ifgfIYbo5IZx4oMTXyCD7zKFFxc.roa
Signing time: Tue 07 Jan 2025 17:12:19 +0000
ROA not before: Tue 07 Jan 2025 17:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:c0:c1:88:ab:49:a6:a3:3e:85:5e:66:a2:5c:66:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 7 17:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89f81f2186e8e48671e283135f2083ef32851717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:ca:1b:d0:ca:a2:ce:b2:da:4f:c1:29:4d:
27:c8:f7:dd:8e:06:bc:8b:b6:1d:20:7b:b7:8c:aa:
12:83:13:e7:1b:19:90:bf:44:19:fc:d7:ec:98:c6:
41:72:64:57:6b:e7:8b:95:78:3c:89:3d:07:95:c8:
8a:98:55:b4:b8:9c:b6:7d:e5:62:7c:72:5f:fb:c8:
64:57:58:de:b6:b0:1d:95:b4:ac:c6:fc:4c:e2:31:
d6:23:01:57:03:7f:00:08:e2:2b:4a:de:9e:a1:22:
b5:52:6d:3b:e9:98:72:e6:ad:51:40:1e:16:9f:a3:
ed:45:8f:4b:04:49:29:7d:c1:a8:f3:a6:9c:dd:9e:
b1:22:82:d4:6a:94:be:99:bb:1f:a0:0a:e0:da:f4:
3d:89:db:da:99:59:5c:3f:86:5d:dc:44:6b:73:ce:
35:18:3e:7d:4e:da:44:f9:ba:16:d6:8c:0a:99:73:
7d:d8:06:0a:f8:f1:8a:95:2a:b0:4e:f5:e0:f3:0c:
d1:24:f3:39:77:c9:40:44:8c:fd:df:09:f9:96:e4:
c6:56:db:ab:88:63:dd:50:4f:f3:c2:2a:da:88:1e:
38:64:1d:1d:00:f9:d4:36:ae:06:59:3e:67:78:c6:
9e:7e:d2:cd:91:3f:90:1b:30:31:90:87:0e:cb:7f:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:1F:21:86:E8:E4:86:71:E2:83:13:5F:20:83:EF:32:85:17:17
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ifgfIYbo5IZx4oMTXyCD7zKFFxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
87:dc:48:07:a4:1b:4a:07:5d:de:ff:33:8b:4f:d2:f5:0c:62:
cc:97:5e:7b:24:05:dc:09:90:3a:9a:9d:a1:c2:9c:7c:c5:82:
dc:19:e3:d4:58:9d:ce:3d:c7:e5:86:6d:84:72:33:52:46:5c:
66:0e:f5:e4:86:d9:03:7d:5c:28:26:de:76:3e:eb:cb:83:f7:
64:5e:79:d3:df:d5:58:6e:f8:43:95:3b:17:d4:f4:cf:df:e0:
12:31:a0:43:58:6f:c9:8d:1a:c6:c1:8c:c2:78:b9:ac:93:78:
d8:32:d2:2e:53:af:cd:38:fb:e8:71:10:e6:9a:5a:b1:0b:c7:
ab:9f:a6:c9:77:1d:88:88:7a:16:85:2e:e4:12:d5:ed:91:27:
fe:db:f3:34:b0:9d:13:83:f4:e8:fc:33:f7:8f:06:e9:55:8d:
e3:9f:78:82:a9:65:47:0a:15:45:7a:e7:eb:fd:51:56:e3:e4:
53:c0:7a:98:b4:2b:e1:0d:72:17:a6:48:8d:c5:3d:91:7c:c2:
3f:3d:1a:c5:35:57:9f:69:d6:ce:12:25:f5:8c:37:0e:67:9d:
36:9d:3b:e8:eb:b8:c0:8f:ba:0e:79:31:80:91:46:68:6d:97:
77:e0:1b:4a:09:9d:97:91:e1:18:7c:5b:fd:57:b3:3d:9a:22:
5d:d8:10:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:45 2025 by rpki-client