Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mNdoQiXO2KaGB4F9-geSSeBzRVU.roa
File: mNdoQiXO2KaGB4F9-geSSeBzRVU.roa (raw, json)
Hash identifier: BvSRm+ZZPugSAeb93WlNWO8w1j5onkBLuY+fCql/ne8=
Subject key identifier: 98:D7:68:42:25:CE:D8:A6:86:07:81:7D:FA:07:92:49:E0:73:45:55
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01947953DC4F5667ADA8F0B801CBE7E58CB8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mNdoQiXO2KaGB4F9-geSSeBzRVU.roa
Signing time: Sat 18 Jan 2025 12:12:06 +0000
ROA not before: Sat 18 Jan 2025 12:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:53:dc:4f:56:67:ad:a8:f0:b8:01:cb:e7:e5:8c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 18 12:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d7684225ced8a68607817dfa079249e0734555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:8d:57:5b:a3:68:8d:a0:cf:47:4f:c0:92:
7b:87:f1:40:ba:a3:d0:03:83:c1:e4:fc:1f:9d:5c:
10:eb:e0:38:2d:5c:49:67:b1:ac:60:a6:c3:c4:c5:
b6:b3:44:3e:dd:1c:95:61:2b:04:b5:b2:5e:e4:53:
71:6d:83:d5:44:8c:5a:a4:f8:44:0d:e0:71:39:16:
0a:5f:06:4d:40:88:b2:38:87:ad:3b:ef:75:35:80:
ba:cf:ac:d3:34:e1:17:a0:99:29:31:9d:7f:73:bc:
20:5c:7e:70:90:2e:5d:31:e3:2e:87:4c:e4:9f:19:
97:ae:02:b9:1f:1c:9f:b6:00:26:f6:a4:93:e0:94:
d3:d2:a3:e5:8d:17:b5:01:9b:74:ee:fe:09:db:70:
12:82:1e:41:a2:ba:57:fe:11:de:e0:b5:f3:3d:04:
5f:0c:0a:5a:0c:eb:6d:f6:84:0b:e8:b7:d3:4e:c0:
9e:4b:96:96:c4:cb:cd:fa:51:b9:20:0d:5d:56:8f:
82:5a:90:92:b2:80:42:b0:4d:d7:55:86:65:26:56:
ee:54:fa:54:65:9a:db:aa:8e:53:6c:d3:4c:ee:1d:
11:56:fa:e7:ae:9e:b6:48:0d:b2:20:b3:20:80:7e:
cc:b8:9b:71:02:39:ad:87:45:5b:81:c9:14:e8:ad:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:68:42:25:CE:D8:A6:86:07:81:7D:FA:07:92:49:E0:73:45:55
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mNdoQiXO2KaGB4F9-geSSeBzRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
0f:0a:fc:0e:f2:ad:06:cf:0e:6d:c5:ff:11:39:69:89:3b:df:
1e:ca:6c:e1:98:ca:97:b4:5c:dc:07:28:8b:5a:cf:e0:8e:2a:
36:3d:c2:26:45:e3:da:34:57:5c:7c:f5:ce:3b:aa:77:bb:6f:
c1:d1:86:df:ab:37:7e:a3:a9:32:3f:90:34:37:e4:12:48:46:
a2:67:02:b6:d0:d1:f1:77:05:6c:25:ce:3d:3b:2a:14:b8:b1:
99:d5:dc:1b:08:c6:27:97:25:51:5f:32:67:86:3e:98:8a:61:
e9:ae:91:64:92:c1:ff:00:e5:ce:17:eb:64:9a:9a:7f:3f:78:
a0:81:84:fb:be:cd:26:76:08:e1:7f:bd:86:48:a0:84:04:ec:
f4:74:ed:6f:11:ac:1f:f6:9c:4f:ce:da:e3:ef:49:b3:ab:03:
8f:ca:97:3e:39:a7:b9:84:70:26:34:81:16:a6:8c:22:7c:25:
60:30:99:f5:96:12:30:06:cc:c7:b3:38:36:cc:0c:be:d5:e9:
d4:f6:31:ff:d4:b1:2b:32:f2:cc:b3:fb:53:11:23:aa:b0:de:
39:f7:ae:45:77:af:5b:1b:88:e1:f2:49:aa:9a:93:26:df:4d:
88:d6:d4:d1:a1:fd:9c:82:e2:09:58:6f:f2:3d:3e:be:29:0e:
36:be:21:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:45 2025 by rpki-client