Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mmdd_oFUlVsQGDWOR5ushfNmDq4.roa
File: mmdd_oFUlVsQGDWOR5ushfNmDq4.roa (raw, json)
Hash identifier: r55imTKeGzS70CtzfWZzmfE8ok+KElzu6J1gDckMqxc=
Subject key identifier: 9A:67:5D:FE:81:54:95:5B:10:18:35:8E:47:9B:AC:85:F3:66:0E:AE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194806984B5CC5DFAB03133382B1C7425CD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mmdd_oFUlVsQGDWOR5ushfNmDq4.roa
Signing time: Sun 19 Jan 2025 21:13:06 +0000
ROA not before: Sun 19 Jan 2025 21:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:80:69:84:b5:cc:5d:fa:b0:31:33:38:2b:1c:74:25:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 19 21:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a675dfe8154955b1018358e479bac85f3660eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:5b:1d:36:9b:3a:99:59:fe:27:cb:92:d0:
fd:7f:0a:7e:86:c4:d3:29:e7:e4:02:94:96:2c:6d:
d7:2a:9a:a7:56:55:d1:ae:b5:fa:f1:94:79:29:12:
62:08:fb:dd:46:01:9a:cf:75:46:e9:1b:01:90:c8:
2c:a9:fe:b9:6a:67:a9:89:98:b0:d7:91:62:a2:b8:
bc:3e:b2:1a:07:2d:ef:14:77:cc:1c:77:0f:02:7f:
64:c5:c3:f9:a3:6d:b3:6d:ed:80:ff:2e:b2:be:7a:
7f:ae:f3:79:b8:2a:b4:17:37:75:1a:a9:62:1b:41:
8e:a3:5e:34:df:6d:5c:e9:fd:68:82:98:02:62:ab:
c9:56:94:58:df:15:da:22:ab:fe:24:26:7f:e1:94:
ce:a5:f8:40:f0:ec:99:7e:35:1b:34:ed:c4:ca:99:
0a:69:28:e2:48:cc:be:1b:1d:00:92:92:7d:34:34:
a2:a8:43:c1:0e:21:7a:63:68:d4:5b:ee:b8:28:e8:
92:69:8c:78:38:b7:32:cb:03:e2:dc:ce:99:04:d3:
4c:c8:81:e6:94:05:2a:77:e9:29:75:81:14:0d:ed:
27:a2:18:7d:93:04:36:a1:9b:5b:4d:a5:f4:73:42:
07:4f:42:74:4e:d2:ee:71:7f:26:32:01:ca:c9:cf:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:5D:FE:81:54:95:5B:10:18:35:8E:47:9B:AC:85:F3:66:0E:AE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mmdd_oFUlVsQGDWOR5ushfNmDq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
10:c5:bd:c1:34:11:9d:43:8d:be:e4:3a:a5:36:94:94:24:44:
9f:0b:c0:1d:39:b3:85:7a:01:03:9e:f3:50:ce:e4:83:a2:2f:
cb:b2:b6:97:e7:5e:84:ac:e1:10:39:51:85:ea:98:89:7b:ce:
76:a3:cc:33:ab:0e:21:75:01:67:4c:f6:10:00:3a:e8:6f:b3:
7e:52:32:00:be:4d:0b:92:07:4d:e3:e5:4f:be:4f:0b:65:c5:
13:15:30:fb:09:96:47:6d:37:a6:07:32:4d:8a:f3:65:e0:44:
fe:c5:81:74:a5:f6:b6:88:f7:12:ee:e8:bb:90:d5:9d:45:66:
7e:a0:bc:33:24:4d:fa:21:2d:ae:42:02:46:cc:69:fa:5c:0f:
62:ac:e6:ce:0e:6e:a2:6c:e9:13:82:b0:5a:79:ba:d6:df:28:
91:c5:2e:bf:c3:8a:98:46:80:5b:be:a3:50:19:77:bc:0a:89:
fb:65:c3:af:ee:ff:7f:37:bd:73:25:0c:da:26:df:69:96:09:
5d:25:5f:0d:25:9f:73:2e:bb:e4:09:8e:f6:e9:35:f3:f4:13:
5a:b2:88:8f:66:4a:f6:f9:2e:37:a7:49:ed:b9:1c:a7:e6:4b:
ba:ea:fd:25:30:7a:94:d3:a1:13:04:8c:6f:6e:84:cd:93:64:
e7:2b:0b:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:10:21 2025 by rpki-client