Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kvcD4vks9YCSGIKFzJwWKtiZFlc.roa
File: kvcD4vks9YCSGIKFzJwWKtiZFlc.roa (raw, json)
Hash identifier: 7gRZKhjEcrum+g7DYgN/7PTZkiZAtlmap4NYG7p8x4M=
Subject key identifier: 92:F7:03:E2:F9:2C:F5:80:92:18:82:85:CC:9C:16:2A:D8:99:16:57
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191E87C583725ACAC950EF8BBE2B3DBA97D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kvcD4vks9YCSGIKFzJwWKtiZFlc.roa
Signing time: Thu 12 Sep 2024 23:05:48 +0000
ROA not before: Thu 12 Sep 2024 23:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:e87b:a835/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e8:7c:58:37:25:ac:ac:95:0e:f8:bb:e2:b3:db:a9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 12 23:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f703e2f92cf58092188285cc9c162ad8991657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:c4:b2:bb:d4:9f:d1:e7:35:0f:1c:9c:f5:
02:10:e8:40:d4:51:1d:af:8d:55:35:16:9a:ff:9e:
ce:b0:12:e9:d5:2f:45:a1:32:13:89:0a:f0:20:98:
db:86:f5:3d:a4:3f:19:f2:1a:32:d8:d0:68:48:5f:
17:ef:da:c7:0b:16:1d:63:31:7c:14:e5:e0:3a:67:
e6:5b:fe:36:47:0a:c9:9c:ce:5a:8a:98:60:cb:63:
4f:6a:39:17:1c:69:db:fd:5b:6f:c2:44:38:12:f2:
73:fa:01:2d:73:a8:20:53:59:f5:0f:32:f3:26:97:
bc:98:bd:74:83:ff:54:5e:31:46:65:42:62:ae:59:
df:54:44:72:3c:20:08:ec:c0:c2:cf:4d:8e:ca:9b:
e9:0a:18:a1:22:94:2d:e3:11:19:ba:5f:9f:e3:75:
8a:7e:a2:54:4e:3e:9c:6e:5e:f9:fb:ff:2e:f1:d1:
28:32:af:40:6b:1d:6d:ef:13:62:ab:7b:75:64:39:
0c:31:37:ac:d9:11:3f:c7:02:f2:2a:5d:4d:60:42:
6f:db:29:11:7d:7e:70:87:ac:be:86:5c:37:38:e4:
48:b9:12:34:32:05:3d:83:49:24:27:f4:f2:80:cd:
a3:0c:3e:79:8b:41:a6:1d:45:8e:02:65:83:17:7d:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:03:E2:F9:2C:F5:80:92:18:82:85:CC:9C:16:2A:D8:99:16:57
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/kvcD4vks9YCSGIKFzJwWKtiZFlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:e87b:a835/128
Signature Algorithm: sha256WithRSAEncryption
3e:db:5f:b3:cf:b8:53:36:5f:c0:59:df:4c:71:8e:98:03:44:
a2:13:96:d5:9e:92:3a:bd:7e:f2:3d:50:30:f6:d7:19:48:05:
a8:fc:bd:33:8e:3d:be:06:9d:41:81:7f:f3:41:3d:5a:53:3f:
8a:5b:39:50:e8:da:19:53:a6:96:be:a1:a0:4a:35:c7:f0:d0:
a9:25:b3:1b:10:e4:61:33:41:bd:53:4b:c7:db:00:8a:71:ca:
b0:80:88:d3:4f:a3:10:f8:49:fb:01:66:11:6f:8c:d8:98:9e:
f1:01:5f:bf:0c:06:af:73:4d:85:d9:c0:fb:bb:82:44:3a:a3:
f7:9b:76:b2:22:8f:17:63:c6:99:da:03:36:d4:bd:bf:ad:74:
02:dd:c1:10:55:34:9d:ad:1e:e7:fd:ec:58:70:a2:0c:01:be:
e3:0e:6c:cb:e1:0b:49:d9:e9:09:c4:0d:27:79:6b:5a:c2:0c:
37:86:62:ac:88:fd:bc:47:b8:ce:18:79:2f:7c:3e:17:b9:ac:
7c:0c:d1:f0:86:83:7b:7d:02:75:03:f5:19:ab:c6:d9:d3:70:
04:f5:ae:54:fd:38:1c:4d:39:20:c2:62:90:0b:d5:7e:29:4d:
d4:4f:a1:48:99:35:67:b7:30:e5:c7:b8:74:2a:e0:00:e3:02:
a3:38:fc:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:16:29 2025 by rpki-client