Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/p3v11TABS2PkZqQQbeEkjjr0vf8.roa
File: p3v11TABS2PkZqQQbeEkjjr0vf8.roa (raw, json)
Hash identifier: 37d/6nzHiA9dZHV21f/Y8GxwClihrUMfY2YMCpPRqkM=
Subject key identifier: A7:7B:F5:D5:30:01:4B:63:E4:66:A4:10:6D:E1:24:8E:3A:F4:BD:FF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191FE27BA276708507DA89188077F674FFC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/p3v11TABS2PkZqQQbeEkjjr0vf8.roa
Signing time: Tue 17 Sep 2024 04:05:02 +0000
ROA not before: Tue 17 Sep 2024 04:05:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:fe27:235a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:27:ba:27:67:08:50:7d:a8:91:88:07:7f:67:4f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 17 04:05:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a77bf5d530014b63e466a4106de1248e3af4bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:b7:e9:0d:b3:d6:7c:c4:9e:27:3d:67:09:
a8:15:e5:e1:3e:af:5a:a6:1c:c3:d5:f0:20:02:2b:
a7:3d:13:7d:bb:63:eb:df:bd:92:25:2d:10:94:95:
a8:01:e5:69:ac:82:e6:6c:fe:7b:23:9c:e4:66:d2:
e0:4c:8e:52:1b:e4:7f:a4:2d:a3:f9:64:59:9e:ae:
e3:ce:1e:bb:58:ca:86:de:23:1a:da:d2:25:23:56:
8a:87:92:69:47:2c:9d:2b:d3:d2:d3:ed:b1:49:e3:
67:f7:62:b7:66:c7:48:b6:9b:74:e0:7e:a1:b2:56:
f4:e4:88:d1:ac:04:77:f8:1f:e8:dd:23:fb:6c:9b:
c0:80:a1:01:e7:7e:4b:ec:ae:ae:bd:12:e2:79:d2:
7a:a5:6e:3f:8d:83:ca:f8:06:0d:dd:51:2e:cd:ec:
39:c9:d5:d7:4d:00:b3:cc:ad:18:a1:c6:d7:ee:d8:
ee:5c:8c:2c:77:12:65:93:0b:4b:55:df:5e:2c:28:
4a:2d:c5:56:ee:bc:b5:12:4a:21:00:f0:16:72:09:
b9:aa:c0:fa:68:01:65:ab:98:1c:9d:cb:7a:75:62:
2d:89:fc:57:b0:12:32:f9:3b:39:df:45:ae:d6:69:
ce:db:9a:e9:f0:e3:68:27:df:ab:ef:07:b5:0f:ff:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:F5:D5:30:01:4B:63:E4:66:A4:10:6D:E1:24:8E:3A:F4:BD:FF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/p3v11TABS2PkZqQQbeEkjjr0vf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:fe27:235a/128
Signature Algorithm: sha256WithRSAEncryption
65:83:44:81:3a:81:ee:3a:ee:2a:28:de:c7:ab:a1:0d:a5:e6:
e0:e5:bf:95:c0:7b:5c:1d:d4:88:c7:20:51:87:43:09:07:2c:
f4:fe:55:78:0b:6b:7b:7e:d8:a7:b4:38:25:7d:3c:fa:0c:48:
fe:c5:68:5e:9e:61:ca:93:d9:de:e4:b0:63:89:81:8c:f8:a2:
c8:02:f8:78:d9:13:06:ac:96:e5:46:1b:f2:e3:b6:d4:39:fe:
63:e8:bc:e2:0c:9b:f7:c1:5a:e1:31:5c:94:a5:b8:7f:53:be:
c2:6c:45:6c:d4:4f:13:c7:e5:b3:80:01:c3:0e:80:8d:5b:00:
b9:5d:a1:46:81:c1:be:32:78:1b:de:e0:50:24:54:8f:be:74:
b4:4b:e5:0b:ee:61:71:25:9e:30:e4:6d:d1:6f:79:84:a7:a8:
86:58:54:6f:af:2f:16:a0:3c:64:12:79:64:da:c6:b1:ad:0d:
27:61:5e:91:73:06:08:ba:40:07:cf:18:5b:cd:d7:07:96:7a:
4a:19:3a:66:4e:5c:36:45:3a:a6:3f:42:c1:45:00:42:7e:29:
b0:40:df:6a:73:ac:37:44:b0:66:5c:c0:81:85:68:84:e5:a3:
56:50:21:30:a7:00:32:8b:85:9d:1d:bd:42:8d:ca:19:4f:47:
13:fb:16:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:03:37 2025 by rpki-client