Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n9ZpJnRWxJ0FMQ-csDbR40uZD5s.roa
File: n9ZpJnRWxJ0FMQ-csDbR40uZD5s.roa (raw, json)
Hash identifier: deSrMrSfKrW1ZWrN6Vjmi+iNffAbRpVEbnc/ZaPmjfs=
Subject key identifier: 9F:D6:69:26:74:56:C4:9D:05:31:0F:9C:B0:36:D1:E3:4B:99:0F:9B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019160705EACB99E7B81DC6B85BF97C8B8F2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n9ZpJnRWxJ0FMQ-csDbR40uZD5s.roa
Signing time: Sat 17 Aug 2024 13:04:22 +0000
ROA not before: Sat 17 Aug 2024 13:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:6070:2c74/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:60:70:5e:ac:b9:9e:7b:81:dc:6b:85:bf:97:c8:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 13:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fd669267456c49d05310f9cb036d1e34b990f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:df:35:6b:ee:de:47:aa:72:17:13:8a:f1:
3c:77:58:2b:3c:e6:93:36:7a:a5:f7:9b:2f:37:b2:
75:57:a1:06:1d:d5:0d:39:f1:8b:be:40:c8:0c:b1:
11:ef:99:6f:d4:e0:ab:8c:e0:ac:26:77:71:84:9b:
41:d0:e9:7a:9e:7f:92:86:d7:eb:69:0e:ab:48:80:
4f:22:00:26:42:b2:f0:99:2a:ba:c8:17:1e:7a:49:
24:2b:bc:f1:e1:39:25:43:fa:39:62:65:65:07:6a:
cc:64:b5:ca:38:44:47:6d:e7:22:64:df:42:3f:19:
52:54:e5:f7:38:e9:f9:0e:a0:a8:73:1b:86:86:82:
f7:ef:c1:13:60:3f:48:45:84:40:2d:a9:c5:ed:15:
8a:76:9f:32:f4:ec:2c:94:0d:4f:bc:a0:d0:91:de:
01:f5:ba:3f:b7:b6:a1:5c:e6:be:3a:85:af:90:f4:
7e:97:c1:ce:48:e4:9d:f5:a5:c1:1a:3d:e0:57:be:
63:43:f0:8f:1c:d1:73:f6:1f:7a:58:d1:90:59:63:
b1:1a:18:74:45:78:f1:a7:97:1d:38:e9:31:30:08:
3c:75:26:4f:09:35:3e:f8:93:71:68:f2:1a:05:f0:
53:33:34:6a:0b:00:0f:2d:38:a5:67:30:76:3e:ac:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D6:69:26:74:56:C4:9D:05:31:0F:9C:B0:36:D1:E3:4B:99:0F:9B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n9ZpJnRWxJ0FMQ-csDbR40uZD5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:6070:2c74/128
Signature Algorithm: sha256WithRSAEncryption
06:e2:f5:c4:fa:4f:1e:4e:65:a4:df:10:b1:40:31:8a:85:2b:
fa:38:a6:3a:b1:36:74:7e:31:7a:db:ee:8e:97:1e:6b:0d:b0:
99:b0:87:4e:97:34:4b:95:36:8d:ab:4b:ab:f7:e7:d5:b6:ca:
62:90:49:86:7a:d9:c8:96:78:85:78:15:56:39:27:28:5c:e3:
ef:32:d7:9a:6a:c3:7d:ed:b8:2b:c2:43:a4:1a:f7:d7:75:56:
0c:1e:8e:cc:4b:60:14:ee:4e:4d:b5:bc:e6:17:5b:da:f3:8d:
7b:99:3e:1f:55:33:1a:90:82:4b:fe:7b:0b:6f:75:6a:e0:a6:
6e:a7:53:26:f9:90:79:4a:53:c5:ca:58:97:b5:7a:18:43:cb:
a3:8c:59:d4:2a:ed:88:23:47:d8:22:96:4c:57:49:18:fe:6c:
5d:c1:b6:6c:d5:a6:2a:e5:fa:82:23:44:fa:52:9d:77:53:81:
5f:71:f7:b3:13:9e:39:11:38:17:e9:43:bb:c3:4d:2f:ea:51:
fd:7a:c9:56:1a:00:af:ea:c2:03:e7:be:08:4a:83:86:57:61:
0a:22:18:b3:80:1a:84:52:9e:09:18:14:d9:e1:c8:89:09:20:
a9:1b:e0:8d:df:33:66:ab:7a:82:28:c9:29:3a:e2:7f:0f:ce:
db:28:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:08 2025 by rpki-client