Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kl8OAph6aCvcQ5BH2T0cjLqZBZA.roa
File: kl8OAph6aCvcQ5BH2T0cjLqZBZA.roa (raw, json)
Hash identifier: EztHlYxn+Vsh82UOp7EL2hWgwSQh84GPXxC+QT1qHCk=
Subject key identifier: 92:5F:0E:02:98:7A:68:2B:DC:43:90:47:D9:3D:1C:8C:BA:99:05:90
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019172E567CE56F052846ACDA7068EF9ADA3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kl8OAph6aCvcQ5BH2T0cjLqZBZA.roa
Signing time: Wed 21 Aug 2024 03:05:22 +0000
ROA not before: Wed 21 Aug 2024 03:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:72e4:9245/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:e5:67:ce:56:f0:52:84:6a:cd:a7:06:8e:f9:ad:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 21 03:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925f0e02987a682bdc439047d93d1c8cba990590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:fc:da:aa:ed:57:c9:73:9a:2f:bd:c3:a2:
4e:a8:b8:fd:fb:e6:a4:9d:16:2d:1e:6a:f4:90:40:
30:9e:a0:df:44:14:77:21:50:a2:f8:1d:0e:9f:7a:
a9:f5:a2:e8:21:be:03:19:99:97:f7:80:62:e9:9f:
6b:51:21:1d:98:48:70:12:0e:a2:b2:a6:ea:85:e0:
fa:b2:70:99:be:32:a7:89:c5:d8:08:70:3d:d0:7a:
2a:d8:6b:36:4d:4d:dc:fc:d8:45:04:76:8c:67:2a:
45:aa:05:8d:ca:ad:5c:b1:41:6e:79:24:07:a4:de:
d6:77:1a:ab:a0:9c:56:05:0e:7c:8e:84:fe:e0:61:
e0:14:ae:c2:e1:8b:66:73:ad:86:45:65:d5:fd:e0:
e5:9c:2b:ed:b9:1d:95:67:f2:59:1e:e5:34:60:ee:
bf:a3:1d:49:7f:49:14:68:aa:52:e4:4c:df:bc:6f:
bf:48:f4:60:39:a2:5e:9d:8c:1e:85:b0:57:8e:d2:
d0:af:12:5f:13:33:35:89:70:c1:b7:d5:2f:85:1d:
a3:a1:19:34:dd:10:1d:3d:cb:7f:3b:45:b2:d1:0e:
56:12:35:bd:3e:0e:f8:47:56:1a:37:7d:fa:93:8f:
44:05:ff:77:c8:e4:c9:5b:8e:20:df:70:c6:97:bc:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:0E:02:98:7A:68:2B:DC:43:90:47:D9:3D:1C:8C:BA:99:05:90
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kl8OAph6aCvcQ5BH2T0cjLqZBZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:72e4:9245/128
Signature Algorithm: sha256WithRSAEncryption
96:4e:34:f6:a4:7b:e7:d6:0f:63:55:aa:97:71:34:7f:e3:e5:
05:54:61:2e:16:68:63:d1:44:f7:5c:86:d0:a1:5c:c5:73:38:
2c:92:b0:c2:d4:bd:f4:92:0b:41:d2:63:7f:16:88:7f:db:87:
a9:1a:b2:2d:56:92:a4:e0:ef:c5:76:12:bd:6c:49:63:48:bb:
f2:55:8a:e9:80:b0:31:2d:6e:b0:5f:0c:7c:f0:88:2a:a9:ef:
b2:fe:79:78:90:7d:fa:96:59:e3:3f:03:4d:d3:17:d0:00:bf:
0f:7f:d2:b9:c0:45:ff:53:99:8b:0a:96:6a:eb:42:11:d6:18:
8f:c7:96:5c:e4:ea:af:bf:dd:a6:49:62:49:74:ca:d0:3e:85:
ab:c9:33:13:e4:ca:df:5f:89:59:a4:77:76:f6:fb:94:06:45:
ce:d5:e2:95:16:7a:1e:a7:27:ae:2b:fc:17:8d:62:40:7b:5e:
4f:80:b0:8b:9a:27:9c:bd:04:56:b8:44:34:6a:bf:19:54:ed:
5e:c1:d5:ef:4f:39:0a:6d:91:ce:14:a8:50:44:38:f9:4a:40:
bb:e2:2b:8b:12:b5:b8:3b:f2:23:5b:12:d0:1a:41:eb:09:62:
cb:db:73:96:f0:ee:f8:08:2a:76:6d:97:83:a9:02:70:46:45:
49:a3:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:31 2025 by rpki-client