Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jeVeSzdcS3WINTnQ_nLMbBeGQII.roa
File: jeVeSzdcS3WINTnQ_nLMbBeGQII.roa (raw, json)
Hash identifier: pVNLcmnJZk5LUVjpRndch6OnVxI7nbP87h6ovPeaNT0=
Subject key identifier: 8D:E5:5E:4B:37:5C:4B:75:88:35:39:D0:FE:72:CC:6C:17:86:40:82
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191BF17A2754E34E508414CA026F027B4E4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jeVeSzdcS3WINTnQ_nLMbBeGQII.roa
Signing time: Wed 04 Sep 2024 22:11:22 +0000
ROA not before: Wed 04 Sep 2024 22:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bf:17:a2:75:4e:34:e5:08:41:4c:a0:26:f0:27:b4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 4 22:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8de55e4b375c4b75883539d0fe72cc6c17864082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:54:c6:2c:d0:5c:f7:20:b0:ac:97:3a:68:
82:e9:75:0c:54:76:e7:f0:f9:c3:fd:0f:4c:b3:ee:
a7:c2:45:a0:67:a4:69:cd:4e:0f:58:19:5d:b8:2e:
bd:cc:11:d8:bb:b5:09:ab:04:b6:53:a7:27:7c:86:
02:5e:90:e9:4f:8b:a2:41:c5:88:e1:ea:e9:e0:9f:
71:31:e2:46:53:ca:2f:62:2f:34:c1:55:ac:7d:9f:
c9:34:4f:44:1f:c3:69:cc:f7:a9:c5:ef:99:a8:14:
69:62:0e:fd:26:f8:eb:98:3a:4d:22:c7:0a:b0:68:
38:0d:ae:7d:a0:b4:2a:94:2b:83:35:ec:46:ee:4c:
8e:30:ef:45:a5:94:b4:8e:66:2f:ac:4e:c6:d5:46:
5b:31:96:a7:36:6b:7a:3c:0d:08:a7:6b:04:3c:cc:
38:3c:73:32:c3:0d:29:83:e0:5d:68:7e:32:37:2f:
3a:39:aa:95:2e:e7:7e:a3:01:36:fd:48:18:b5:bf:
bc:73:33:b7:63:3e:33:51:df:89:dc:cd:9c:d8:81:
67:06:9b:e2:1d:c1:84:c5:bb:22:60:10:d3:02:5a:
bf:9e:53:79:e6:83:84:9f:13:95:a8:fb:4c:4e:d6:
57:83:cd:fb:c7:1d:11:63:21:c3:7f:a0:71:45:93:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:5E:4B:37:5C:4B:75:88:35:39:D0:FE:72:CC:6C:17:86:40:82
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jeVeSzdcS3WINTnQ_nLMbBeGQII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
81:a9:06:2b:f4:97:24:32:fa:e0:46:1c:19:38:8c:bf:91:fa:
49:b6:a4:37:79:86:13:3f:c6:3b:5f:cc:6d:12:de:86:45:1d:
05:56:4d:49:e1:6f:d7:47:0a:be:a9:41:1b:b5:cf:42:b2:83:
df:e2:8f:5d:d0:94:b1:d4:11:7b:26:e6:a4:66:6f:9e:92:23:
1c:b6:5d:72:f5:06:4d:0b:cf:49:7c:1a:9a:89:d3:4b:70:b8:
ce:7a:85:5a:4a:b9:a7:21:e7:f1:04:47:3b:80:58:d8:67:78:
c2:a7:c9:de:56:95:a9:38:1e:f7:b7:3a:06:de:19:2f:9f:46:
5d:ba:63:72:a5:88:e0:e4:94:26:56:37:6b:5b:5c:d5:bc:1a:
61:49:40:9d:22:6f:74:19:c4:24:05:fd:e9:a7:9a:cd:f3:f7:
85:7f:be:67:40:53:cf:3f:28:3f:29:95:58:5c:b6:be:19:c7:
59:ca:cc:73:78:27:30:c0:7c:43:60:40:94:29:3a:09:f3:41:
07:e4:87:a3:be:82:91:17:f3:5d:72:97:1b:51:09:3f:e4:bf:
35:35:6d:b0:fa:02:4d:a7:b7:86:19:d6:a2:e3:e2:da:51:79:
00:42:65:e2:07:e3:00:66:98:54:ac:7e:4f:a5:c6:02:7f:a3:
33:aa:78:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:25 2025 by rpki-client