Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jYwYy0HL0xOqErM3KCi8hq2HlC0.roa
File: jYwYy0HL0xOqErM3KCi8hq2HlC0.roa (raw, json)
Hash identifier: FgXFKRSwY+psASjhhC9WclYIp/tREAPk2GDX7BuZyDM=
Subject key identifier: 8D:8C:18:CB:41:CB:D3:13:AA:12:B3:37:28:28:BC:86:AD:87:94:2D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193AFCFF859F2B0F84A4D144744E06CD63B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jYwYy0HL0xOqErM3KCi8hq2HlC0.roa
Signing time: Tue 10 Dec 2024 09:04:22 +0000
ROA not before: Tue 10 Dec 2024 09:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:afcf:e4d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:cf:f8:59:f2:b0:f8:4a:4d:14:47:44:e0:6c:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 10 09:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d8c18cb41cbd313aa12b3372828bc86ad87942d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:e9:1c:9b:e6:76:8d:99:37:44:d3:d0:55:
c3:ea:21:90:ff:b7:58:1d:c4:46:b3:2c:84:1c:0c:
a3:21:c7:d1:cb:cd:0b:d4:a3:10:7b:8a:a9:af:80:
e6:de:64:86:cd:59:95:8b:26:85:e1:60:a9:cb:e9:
7d:24:4b:f9:65:64:ec:b0:21:dd:e2:e8:ff:37:a6:
37:d0:11:61:13:c7:c9:ce:90:b4:3d:f0:63:d4:05:
f3:3b:77:bd:86:4a:20:63:02:e7:26:bf:51:b5:66:
12:75:ce:08:84:b0:6a:5f:cc:bf:60:c6:1b:89:b1:
b7:e0:88:1d:ce:37:c4:02:2f:41:9a:ce:eb:16:61:
2f:31:25:ba:91:3e:12:00:44:54:35:73:43:d9:f0:
28:34:11:63:d4:2b:4c:57:92:18:83:71:49:66:c5:
85:29:44:ec:97:34:28:b7:c9:47:2d:35:f6:a8:e0:
8b:f1:c2:6e:6e:59:98:e9:00:08:10:b3:0c:50:cd:
ed:75:82:a7:61:ae:05:62:0a:55:0f:0b:93:21:9c:
af:42:f5:b6:03:44:72:86:80:48:d2:21:b8:26:bd:
a7:fb:7b:83:60:7c:5b:8f:43:f2:71:9d:20:fe:66:
5f:cf:78:d2:d7:4e:0a:7e:22:03:15:a1:b8:d3:4b:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:18:CB:41:CB:D3:13:AA:12:B3:37:28:28:BC:86:AD:87:94:2D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jYwYy0HL0xOqErM3KCi8hq2HlC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:afcf:e4d9/128
Signature Algorithm: sha256WithRSAEncryption
58:51:88:74:3b:1b:f2:39:10:a1:70:71:df:f9:db:c9:f9:da:
65:d6:8b:a4:d0:60:90:27:1d:c7:81:bb:ec:e3:2e:82:10:bc:
f3:d3:c6:7c:af:96:7d:66:16:70:57:0b:5b:38:d6:83:96:87:
f4:e5:d2:58:99:be:7b:04:94:c3:db:ee:84:9c:93:39:a7:7e:
6a:d6:3f:f3:73:48:90:6f:db:4c:65:80:5d:cd:c4:04:bf:24:
14:96:7e:d0:8f:8a:f0:8b:5a:90:7c:8f:86:c6:d4:7c:d3:9a:
e2:0a:19:f3:36:98:1d:ec:cd:78:b6:d8:82:f7:53:6a:ed:00:
44:0a:e1:2b:c1:b3:53:c2:5a:4e:c6:fb:75:e7:9c:57:0c:c7:
cf:2f:c4:a0:ea:6e:f3:cc:f1:55:67:1b:bd:8a:e5:25:ad:43:
de:98:bc:8b:95:d6:b5:e4:21:e3:fd:54:3f:12:4d:09:b5:68:
50:4d:7d:c5:b0:9a:22:2d:fa:08:19:9b:ac:14:42:2d:02:ab:
84:ea:31:90:71:47:a2:ec:3c:b3:ce:71:95:0e:fe:80:cd:ab:
a7:92:f4:8f:55:2a:e2:d0:4c:63:c1:d2:32:85:aa:2d:4e:45:
61:1f:c4:0a:82:16:7b:f4:9c:61:43:7e:87:36:36:9f:31:45:
e0:2f:72:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:29 2025 by rpki-client