Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jR7Q3Q3lnXcuS2ToPCHs4UAQYxU.roa
File: jR7Q3Q3lnXcuS2ToPCHs4UAQYxU.roa (raw, json)
Hash identifier: +dqILdvAMt+izsjk0Askco/6CI4kOXOYmCu2TFZ4Eg0=
Subject key identifier: 8D:1E:D0:DD:0D:E5:9D:77:2E:4B:64:E8:3C:21:EC:E1:40:10:63:15
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913D44308B7759EBF1EEF3ACDDBC2D7B4A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jR7Q3Q3lnXcuS2ToPCHs4UAQYxU.roa
Signing time: Sat 10 Aug 2024 17:09:24 +0000
ROA not before: Sat 10 Aug 2024 17:09:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3d:44:30:8b:77:59:eb:f1:ee:f3:ac:dd:bc:2d:7b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 17:09:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d1ed0dd0de59d772e4b64e83c21ece140106315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:95:3b:44:65:a3:54:c4:ea:c7:f2:14:9e:
5a:bf:28:ef:0f:bd:3a:d3:2c:99:d7:f1:fe:46:fd:
58:be:7c:da:77:e1:64:43:47:9e:58:da:64:44:bd:
a4:22:29:e7:5f:4f:4b:6f:11:9b:0e:05:67:c0:3c:
b5:a1:0d:38:19:c2:20:8f:e4:cf:a4:86:40:3a:13:
c3:bc:32:29:a9:d4:db:d3:ab:e3:00:07:51:5c:34:
07:18:6c:61:b2:30:2b:2a:28:2a:aa:64:6c:b9:ac:
4a:c0:5a:81:ed:b4:a3:71:ce:72:29:b7:45:5f:65:
42:35:5d:00:92:4c:b0:6a:93:bd:4c:de:c6:63:e4:
b2:1b:06:e4:6b:ad:27:9e:95:37:8c:bc:37:c4:d6:
b4:66:59:df:35:2b:b1:52:34:5e:a1:17:b0:2e:b5:
56:d2:7d:d7:eb:12:d1:cc:44:29:dd:b3:cf:5b:84:
a5:b2:16:40:0b:9d:37:07:d3:01:ef:99:1a:46:2c:
ce:3b:f0:37:e5:ae:96:4e:50:41:5d:e3:15:88:f3:
d7:44:3a:57:5a:d8:e5:1b:55:c8:e9:67:79:13:a1:
df:73:4c:cc:25:11:bb:bd:90:37:09:4c:2d:d3:1e:
08:c7:23:3f:1b:d0:87:a7:e0:84:f8:40:f6:8a:0d:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1E:D0:DD:0D:E5:9D:77:2E:4B:64:E8:3C:21:EC:E1:40:10:63:15
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jR7Q3Q3lnXcuS2ToPCHs4UAQYxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4d:ab:f0:d3:e3:e1:91:09:d4:ad:ed:a9:fb:a3:28:7b:dd:df:
00:ab:47:ce:a6:a0:b6:c2:9b:16:2d:1e:0b:9b:0d:c6:4a:75:
2a:9b:bd:b2:00:54:58:72:2f:9c:cc:28:95:7a:84:1c:24:6e:
78:89:40:4e:34:d4:ea:7b:c3:ac:f0:dd:02:89:36:6d:12:e1:
a9:b4:f2:e0:23:3b:1a:c7:22:a3:d7:ca:ab:6c:33:8c:87:f8:
30:43:c1:81:56:40:93:8f:9b:7b:70:82:cb:86:49:3e:cb:1b:
fd:7a:1c:e4:70:1f:8f:d2:07:35:b9:69:3d:e7:aa:4d:88:0b:
28:4e:1c:5f:36:50:22:ff:13:e0:95:ad:c2:1e:02:09:9f:f6:
49:6a:12:ff:07:c7:03:31:53:3d:7c:84:20:54:7a:a5:fe:19:
a6:19:e3:78:4e:cc:be:a0:a8:30:10:d0:cb:47:cb:7c:50:a3:
47:29:e3:9a:7c:03:71:07:29:a1:08:c9:35:b0:4c:4e:34:c7:
57:e1:54:a5:52:e2:9a:bc:fe:bd:01:1c:c7:75:d5:98:5d:af:
b2:89:c4:73:a1:3f:b1:60:7d:55:f7:b3:c3:bf:f2:bf:37:d8:
7b:a3:f0:1c:1f:2c:71:8d:f5:f6:2a:5b:40:30:b6:dd:56:55:
16:9f:57:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:10 2025 by rpki-client