Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mfC__w_fHjBtLPqtYQR9XEdb42o.roa
File: mfC__w_fHjBtLPqtYQR9XEdb42o.roa (raw, json)
Hash identifier: /lfhkLrpA1yP8QLAPOpUhrhWNV1bkkFG70XEdBlp91A=
Subject key identifier: 99:F0:BF:FF:0F:DF:1E:30:6D:2C:FA:AD:61:04:7D:5C:47:5B:E3:6A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019227FF3198331D7AD5E6FD2B2A9908B169
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mfC__w_fHjBtLPqtYQR9XEdb42o.roa
Signing time: Wed 25 Sep 2024 07:04:48 +0000
ROA not before: Wed 25 Sep 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:27fe:a26f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:ff:31:98:33:1d:7a:d5:e6:fd:2b:2a:99:08:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 25 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f0bfff0fdf1e306d2cfaad61047d5c475be36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:6a:95:02:a8:b0:fd:b5:53:3b:7b:79:ec:
17:82:8f:6a:13:32:60:01:91:93:19:d5:5b:3e:c8:
99:b1:76:1d:1a:c4:41:30:4c:77:1a:e8:78:dd:93:
74:8a:8f:55:3d:c5:bf:b4:d2:0a:c4:66:c3:c5:6d:
df:ff:d6:42:ff:cc:ab:54:d1:1e:76:3b:42:97:18:
55:44:98:3b:ef:59:cd:ce:8d:3a:33:3c:8f:82:f6:
6f:f3:c3:2c:af:fa:75:a0:43:29:c8:b1:b0:16:36:
7d:13:a6:09:3a:cc:41:db:54:de:8b:b9:e1:0f:3c:
86:2d:52:96:6c:b9:5e:42:d1:84:dd:3c:e8:1f:64:
b3:7d:aa:4c:e5:29:c5:44:76:ca:cb:c2:53:d6:63:
16:25:df:c9:02:90:e0:9a:e7:75:1a:97:57:fe:b6:
22:2f:53:6a:9b:df:6d:2a:9e:3e:97:d6:0e:09:52:
79:b1:9e:44:9b:e8:3e:b8:ef:66:20:31:20:bb:f3:
27:2b:a1:c4:57:be:ca:ff:93:a1:4b:cf:85:f7:ec:
0d:54:7c:f5:a9:e0:9f:29:22:c2:07:b0:c3:76:06:
f3:24:1a:90:c1:1e:f1:19:2e:45:4a:62:bc:8c:9a:
39:ca:f1:ab:bc:0d:e7:ae:95:de:cd:90:8d:8e:4c:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:BF:FF:0F:DF:1E:30:6D:2C:FA:AD:61:04:7D:5C:47:5B:E3:6A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mfC__w_fHjBtLPqtYQR9XEdb42o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:27fe:a26f/128
Signature Algorithm: sha256WithRSAEncryption
35:ac:dc:56:fe:d6:0d:22:25:92:f4:ce:94:1e:d9:2e:98:9f:
57:22:8f:27:1d:f2:ae:84:a0:12:6d:8f:04:86:8e:62:1d:1f:
2f:85:3a:9f:eb:54:f8:d2:aa:1a:84:5f:cd:7c:93:cc:ed:c7:
2d:de:6a:60:34:7c:4c:91:70:4f:d4:b3:d6:fb:06:9c:a7:5d:
7c:76:24:af:08:27:da:84:e4:0d:6d:f4:6d:a5:38:20:53:77:
26:2f:07:98:df:0c:0b:e8:1d:dd:70:f6:6e:2a:8c:4d:fc:89:
d9:9c:dc:7c:13:06:18:08:74:dd:9e:aa:b6:59:a1:f0:e0:1a:
2a:1c:ea:73:3d:22:b5:e4:f8:f9:7c:1a:f7:14:53:64:79:36:
30:c2:81:c1:d4:d8:dd:2e:59:a0:2e:cf:15:f2:4d:0b:56:86:
e0:b0:86:c9:b3:5b:f5:89:1e:a5:47:70:58:98:9b:d3:e5:77:
75:81:57:0b:62:57:01:38:e1:bf:47:6b:69:97:eb:15:8c:2a:
ae:e6:18:e7:6b:ef:bb:a6:35:6a:fe:76:e0:7d:7e:1e:37:7a:
76:c1:12:08:97:93:fc:80:b1:fd:fd:2f:6c:6d:28:51:a7:2b:
5b:2f:37:72:8b:6c:e6:70:eb:20:5e:bd:51:cb:b1:84:69:8c:
51:fd:7c:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:21 2025 by rpki-client