Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kAigAKiNRCnDtf6_VUvvshqZV3E.roa
File: kAigAKiNRCnDtf6_VUvvshqZV3E.roa (raw, json)
Hash identifier: vkxtcdRtfymUGTbwDHJw80VUpEjuV7vmOHqut9t2B8Q=
Subject key identifier: 90:08:A0:00:A8:8D:44:29:C3:B5:FE:BF:55:4B:EF:B2:1A:99:57:71
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191DBA1F03F814F04385F07334A1C913B26
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kAigAKiNRCnDtf6_VUvvshqZV3E.roa
Signing time: Tue 10 Sep 2024 11:11:48 +0000
ROA not before: Tue 10 Sep 2024 11:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:a1:f0:3f:81:4f:04:38:5f:07:33:4a:1c:91:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 10 11:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9008a000a88d4429c3b5febf554befb21a995771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:0e:0b:ac:ab:19:f8:c1:f3:8e:4c:da:b5:
f7:6a:47:26:aa:c6:4f:2e:e9:2c:7f:39:e3:06:27:
b4:1d:2a:f7:d9:1d:ab:01:ac:c7:8b:08:c3:98:44:
14:03:a9:b1:53:45:98:f5:04:0c:bb:47:d4:7b:76:
3b:e1:e8:a6:0d:3d:ce:a8:d1:b7:28:07:a3:5f:87:
f1:33:06:c1:c1:2c:6c:0c:fc:65:49:5e:01:3c:e5:
15:df:29:0c:7e:70:96:e6:44:d0:53:74:b9:0b:5c:
f1:d8:fa:80:45:9e:31:a3:bc:78:26:ee:31:29:c5:
89:1d:4b:c5:c3:64:08:3a:4e:53:92:55:f8:69:5b:
87:cb:b5:61:5d:b3:e3:9d:34:5e:c2:bf:75:37:e5:
ff:49:66:04:1c:f4:4f:e2:66:86:31:41:3f:fa:c2:
cf:57:5f:5f:f7:f9:a5:9a:24:32:23:67:b9:9f:cd:
66:02:91:ff:cb:bd:2c:ea:27:78:08:73:9f:79:d9:
c7:4a:f6:6a:91:d4:8e:e8:60:8f:b8:d5:95:c1:a2:
18:20:e0:b7:32:15:8e:5d:82:ea:a3:87:d6:17:fb:
7c:38:08:6f:68:98:f5:43:1e:12:1b:8b:e7:de:a9:
90:09:66:8c:4a:31:89:d7:32:8a:87:5f:10:cb:0b:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:08:A0:00:A8:8D:44:29:C3:B5:FE:BF:55:4B:EF:B2:1A:99:57:71
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kAigAKiNRCnDtf6_VUvvshqZV3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
25:a6:28:a1:2a:bd:e5:63:53:83:c3:bb:7f:be:f0:c9:0b:2e:
ed:cb:07:72:9e:30:34:78:1b:15:e5:25:32:ee:b8:40:89:00:
c5:48:35:f5:6f:25:ba:c8:59:ae:45:8e:4c:34:84:e6:18:af:
08:b5:9a:c1:a0:bc:eb:d1:59:bc:1c:e2:f7:eb:e1:2e:d9:32:
01:cc:4b:d0:53:18:f5:94:8e:10:b2:5e:d4:82:66:2e:64:09:
14:39:61:ab:91:db:cd:39:3c:14:48:9f:fc:57:b4:2d:5c:02:
2c:6a:ef:1e:27:a8:45:c2:13:6f:68:ff:52:2d:43:00:b8:1c:
dd:c7:e7:68:52:c4:81:1b:86:b9:57:de:f5:79:ce:34:f2:fa:
14:89:2a:98:40:42:90:7c:51:de:af:f1:99:1f:e5:73:8c:8d:
ce:46:55:69:47:6d:d5:2b:71:99:55:56:22:9d:5a:bf:fc:f6:
88:ff:c5:df:7e:67:5b:e6:8b:f5:6a:af:af:92:5d:d7:8a:c3:
43:9a:fd:eb:03:f2:1b:07:07:58:04:cf:65:7c:8a:9e:96:04:
f9:0b:c6:06:66:2f:26:41:16:c0:74:9a:15:f0:8a:72:93:a9:
37:cb:e6:4d:92:f5:61:63:bb:7c:a0:ff:a9:ee:89:70:2a:00:
61:74:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:03 2025 by rpki-client