Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nC4YZl8v4U-SDodS68JVuhyReJc.roa
File: nC4YZl8v4U-SDodS68JVuhyReJc.roa (raw, json)
Hash identifier: nMJwzsrwWhvEMdpHVyelFUlevQY6NGUDijPFdg0OU2U=
Subject key identifier: 9C:2E:18:66:5F:2F:E1:4F:92:0E:87:52:EB:C2:55:BA:1C:91:78:97
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019228A464D19BC1301BBA92E61A87491E94
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nC4YZl8v4U-SDodS68JVuhyReJc.roa
Signing time: Wed 25 Sep 2024 10:05:15 +0000
ROA not before: Wed 25 Sep 2024 10:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:28a3:d8e5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:a4:64:d1:9b:c1:30:1b:ba:92:e6:1a:87:49:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 25 10:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c2e18665f2fe14f920e8752ebc255ba1c917897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:c3:c7:2f:c7:e2:8d:3a:f0:17:0d:8b:cd:
72:8b:bb:66:76:d4:92:e6:b1:fb:d3:4b:35:32:6a:
33:51:11:f9:2a:dd:12:93:90:88:41:26:e8:e5:e7:
4e:17:16:a6:bf:0e:1f:20:78:ee:70:2f:cf:6c:75:
6d:11:2c:75:3c:db:55:ce:b5:da:8d:cf:a1:e1:2b:
4d:fd:91:a1:bd:5f:1e:e8:7e:75:83:81:dd:02:95:
a2:e8:09:08:e8:51:e7:ca:7e:fc:3d:37:66:01:a3:
d0:db:5a:7c:cb:5a:e5:85:9c:c5:6c:1a:fe:99:d7:
71:24:52:ee:de:59:54:e6:91:85:4e:8b:23:27:5e:
37:c0:2e:a9:51:16:f5:c8:a3:e3:c9:30:d8:71:88:
24:e9:aa:79:4f:40:95:4c:30:72:34:e7:9e:58:e2:
ed:69:d6:ed:35:0f:ef:c7:d4:b1:4e:cc:93:cc:4d:
32:9e:c0:ba:60:91:c3:54:5d:26:4c:ad:fa:8a:bb:
f1:a9:ae:11:47:fc:0e:c1:5e:83:f6:0c:da:13:2c:
4f:bc:98:62:f5:c5:ac:0d:2c:81:b1:d3:98:eb:ee:
c0:51:bf:f6:07:c4:1c:40:ad:b3:fc:45:4e:a8:59:
9f:84:96:1c:dd:15:b8:76:8d:16:7c:56:91:45:79:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:18:66:5F:2F:E1:4F:92:0E:87:52:EB:C2:55:BA:1C:91:78:97
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nC4YZl8v4U-SDodS68JVuhyReJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:28a3:d8e5/128
Signature Algorithm: sha256WithRSAEncryption
63:8f:c6:ac:ba:a6:67:e8:d5:ef:6d:48:7c:01:2d:f6:e9:f1:
ac:6a:d0:c7:ae:9c:72:ca:a1:8d:52:1c:95:93:0a:c4:4d:78:
c2:5f:40:61:f1:6f:a7:e6:3c:e2:b4:07:4d:3f:18:ad:fb:91:
46:81:9e:05:43:9f:70:91:c0:f9:81:1f:98:d7:5f:b0:29:9b:
a9:21:4f:03:56:d7:1d:f8:9f:3b:a6:a0:4f:d2:dd:83:21:34:
3f:05:b3:62:5a:28:f1:8c:19:7a:18:9e:46:f6:41:54:af:cb:
5c:d7:e8:7b:df:35:f3:7c:72:5a:5b:3e:a4:2b:23:03:45:1f:
c4:75:db:00:be:9a:ea:0a:6a:c4:bb:16:42:8e:69:82:c4:4d:
40:a8:02:ab:c3:2f:5b:62:9b:d0:65:aa:a7:2d:94:0d:06:88:
e8:f3:0b:23:7e:e2:8a:7b:d7:a5:1c:a0:4d:09:43:e6:02:b4:
61:8f:ef:ad:c7:83:0c:b3:84:24:ef:f4:37:45:d7:c7:fd:50:
5a:38:0c:b3:27:e9:80:50:8d:39:f4:e1:07:e2:10:eb:4d:52:
88:6b:3d:92:1d:c6:b1:fb:d2:fd:b2:b0:33:90:38:ee:3c:2c:
7f:40:39:e6:fe:50:27:a6:b6:2c:5d:d8:c6:a0:67:e1:8a:61:
f9:a8:d9:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:46:40 2025 by rpki-client