Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jsD3f9WpTeGkom0zD3m00Jlf6qk.roa
File: jsD3f9WpTeGkom0zD3m00Jlf6qk.roa (raw, json)
Hash identifier: Onk5o8T7B7CEk7LDatLPgq0h1m4i3VVeC0qf7iJARKE=
Subject key identifier: 8E:C0:F7:7F:D5:A9:4D:E1:A4:A2:6D:33:0F:79:B4:D0:99:5F:EA:A9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C5F571BEA196BFA0FB7C9E2899685820
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jsD3f9WpTeGkom0zD3m00Jlf6qk.roa
Signing time: Fri 06 Sep 2024 06:11:22 +0000
ROA not before: Fri 06 Sep 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:f5:71:be:a1:96:bf:a0:fb:7c:9e:28:99:68:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ec0f77fd5a94de1a4a26d330f79b4d0995feaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:81:be:40:8d:14:6a:32:1e:a6:7c:75:c7:
40:c3:b8:e1:9f:69:e1:b7:5c:9d:50:39:49:dd:5a:
10:0e:9b:c5:38:e4:e4:e8:7c:42:24:a6:67:1a:e8:
de:34:94:f1:81:4f:39:3e:a5:ef:d8:90:41:b9:25:
fb:6f:55:e5:49:4f:7e:f4:d3:af:f9:5b:c1:38:87:
fe:bf:44:3f:75:5b:da:2e:62:67:ba:96:34:cb:4a:
e8:cd:d1:a7:c0:fa:e9:0b:3d:e3:29:28:f4:02:b5:
51:c7:bd:37:72:a6:49:75:e5:96:82:d7:da:d9:ae:
5d:75:63:d3:2d:8c:4e:36:60:97:23:fa:78:9b:a9:
7a:64:46:3f:ad:3f:bb:33:e0:7d:a3:74:d1:41:24:
58:7f:54:19:f9:61:89:d5:1e:61:93:06:a5:0d:3d:
5f:1f:e7:ae:09:a7:f7:7e:a0:e7:a9:6e:4e:40:25:
7c:48:d0:56:8d:1b:e3:10:3e:98:bb:32:72:28:b8:
37:45:4b:5f:d3:00:71:1a:20:62:0d:6e:26:05:09:
6f:c5:2c:48:08:05:c4:42:23:f1:9d:9d:2c:0e:0a:
fd:67:78:96:27:2e:ae:04:be:a3:d1:6e:5d:02:ba:
f3:80:f9:d5:98:d0:b7:d5:53:25:dc:f7:c9:66:84:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:F7:7F:D5:A9:4D:E1:A4:A2:6D:33:0F:79:B4:D0:99:5F:EA:A9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jsD3f9WpTeGkom0zD3m00Jlf6qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
23:e2:79:cd:48:20:1a:89:94:ed:63:fb:89:4f:a7:a7:69:8a:
aa:23:b1:20:71:fc:60:9a:f6:a8:5b:17:8d:65:86:92:93:21:
9b:56:18:ba:0d:84:67:c2:85:bf:c8:e5:81:7e:31:1a:77:3c:
7d:d1:64:2c:8e:a8:6d:06:ab:a9:cf:42:b2:f4:f6:95:a6:a8:
a9:f1:8d:2f:b4:8c:99:7f:ac:a6:bf:2a:7b:40:45:e8:28:62:
9d:38:2d:a4:77:8a:05:ac:e0:7d:99:78:7f:1e:29:95:05:fd:
7b:27:ad:7d:5b:ef:85:c4:10:fd:83:56:f3:1c:c0:e9:58:9b:
17:f8:41:4d:3a:f8:67:df:e0:e4:e7:1e:87:cf:92:64:13:2c:
e7:a5:9d:ab:88:7e:4b:0e:17:a5:48:cc:7a:52:1c:ef:10:df:
8d:20:c2:72:44:9f:c6:c3:8a:cd:13:d5:11:72:4a:01:1e:a9:
53:cf:75:31:00:fd:a6:b6:b9:cd:95:ba:b0:93:5f:dd:85:be:
62:c0:8b:0d:bf:07:a6:3f:ee:f6:11:c6:cf:03:b2:c0:ec:b3:
f8:e4:7c:6f:ce:c8:7f:6e:1d:a8:d0:b0:a8:2e:ed:5f:2a:60:
6a:b8:02:38:42:a2:ec:94:06:49:45:6a:ac:3b:97:07:ca:fc:
62:93:20:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:59 2025 by rpki-client