Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kj9aWtwyvI9KvNFo0dpL3Cy4qM8.roa
File: kj9aWtwyvI9KvNFo0dpL3Cy4qM8.roa (raw, json)
Hash identifier: SvNa3cj6ezlZqEGywHPuf7sJnCvphO+pCNufpuOXuQQ=
Subject key identifier: 92:3F:5A:5A:DC:32:BC:8F:4A:BC:D1:68:D1:DA:4B:DC:2C:B8:A8:CF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192DA17F883FC98F69451EC4235AACD35E1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kj9aWtwyvI9KvNFo0dpL3Cy4qM8.roa
Signing time: Tue 29 Oct 2024 21:04:16 +0000
ROA not before: Tue 29 Oct 2024 21:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:da17:f51b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:da:17:f8:83:fc:98:f6:94:51:ec:42:35:aa:cd:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 29 21:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923f5a5adc32bc8f4abcd168d1da4bdc2cb8a8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:57:53:81:8b:25:a2:94:88:3c:39:d0:80:
d9:83:c3:2f:87:d3:c7:19:ae:97:08:ed:df:13:e2:
4f:49:40:0c:20:4c:7c:59:ea:3b:19:33:ea:1b:da:
a9:a2:39:28:6f:9a:33:3f:a5:ae:ee:b9:86:ec:66:
21:e7:c7:4d:44:f2:44:f9:f3:47:87:75:69:83:f5:
12:82:a1:38:a6:d4:3f:f0:82:ba:69:cb:29:10:bb:
be:d8:46:f6:0a:2e:46:28:5f:b9:8a:7c:df:10:db:
72:62:92:23:f3:c2:3a:5e:2f:c9:36:2f:4b:64:fa:
92:12:d4:e5:49:56:c6:a1:3b:a5:98:af:b8:ee:1d:
ba:7c:a4:d2:90:ca:36:15:f6:da:bc:96:f2:34:0e:
4b:e5:7f:9f:66:0b:81:3f:43:b1:e7:39:a2:06:37:
c1:ef:cc:a4:38:3d:b6:fd:d7:54:9c:eb:69:74:73:
97:d3:13:46:2d:ad:63:5d:66:51:46:47:e7:65:4d:
f0:3b:3f:fa:11:34:8f:98:83:ef:d4:3a:2a:bb:72:
7f:a0:44:eb:8a:35:8d:b6:aa:e0:a9:6d:02:40:30:
06:0a:c2:eb:f8:ad:20:f0:c3:cb:92:12:70:c2:ed:
0b:3a:55:b2:9f:60:ee:d1:cb:34:62:67:da:d4:ef:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3F:5A:5A:DC:32:BC:8F:4A:BC:D1:68:D1:DA:4B:DC:2C:B8:A8:CF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kj9aWtwyvI9KvNFo0dpL3Cy4qM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:da17:f51b/128
Signature Algorithm: sha256WithRSAEncryption
3e:30:83:7d:e7:d9:a8:d7:0a:10:94:63:81:de:c6:c4:ba:1d:
0a:0b:fe:fe:74:da:2a:d5:b5:64:ef:99:03:d8:4b:3a:53:83:
1b:cc:f7:51:7c:f1:e6:c2:65:ff:16:7c:78:24:4a:33:58:ce:
9d:3b:bc:74:e4:92:d2:ab:3a:e8:8f:77:6a:70:e6:e9:de:47:
c6:c5:48:a0:a0:82:6a:14:82:35:cb:49:dc:2f:e9:46:83:39:
0d:f0:49:7b:83:c1:0d:97:1c:31:ea:29:db:01:58:96:c0:e2:
52:1f:6e:ed:23:21:7f:c6:92:f8:7a:d2:0d:5f:14:76:eb:bd:
bc:0b:ef:b3:02:4b:4a:c7:9e:98:0f:76:6e:cc:78:e4:c9:48:
d5:f3:7a:55:b6:10:38:19:9b:23:53:49:3b:15:98:04:dd:ba:
29:16:dc:9f:e7:e3:c8:6b:55:77:89:d4:bc:9a:15:ca:ab:2d:
bd:86:ab:60:01:3c:c4:92:c3:04:93:15:c9:36:26:21:62:90:
14:3f:80:b8:68:5c:1d:f7:0f:46:81:b0:09:bf:4f:fc:40:9a:
f6:15:77:31:eb:70:89:50:c9:2c:58:b4:e3:8e:d3:a0:e5:db:
80:0b:d8:6f:e3:d1:84:f4:b2:d3:12:d6:ef:94:89:6a:78:38:
ff:87:f2:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:56 2025 by rpki-client