Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pGGFzgeiQFJVzEosTaxmKovryAA.roa
File: pGGFzgeiQFJVzEosTaxmKovryAA.roa (raw, json)
Hash identifier: b0g5NoP5SFzSPJoEHNl6NvdJE5q4RA9HFAayJbhECP4=
Subject key identifier: A4:61:85:CE:07:A2:40:52:55:CC:4A:2C:4D:AC:66:2A:8B:EB:C8:00
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193A094204489A97956C2EF3D08FD9A0C9F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pGGFzgeiQFJVzEosTaxmKovryAA.roa
Signing time: Sat 07 Dec 2024 10:04:42 +0000
ROA not before: Sat 07 Dec 2024 10:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:a093:b52f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:94:20:44:89:a9:79:56:c2:ef:3d:08:fd:9a:0c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 7 10:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a46185ce07a2405255cc4a2c4dac662a8bebc800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:cf:9a:ed:c2:66:68:6e:10:dc:cb:e0:d6:
8c:c5:83:9e:1a:3b:66:dd:03:2f:fa:62:0a:0a:f0:
d2:59:f0:67:47:c1:20:e5:da:a2:12:0e:8e:d5:17:
48:2c:d4:52:9c:29:1d:ab:2a:bc:33:9b:0e:f0:55:
fe:23:b2:36:f1:7b:1e:1c:21:69:87:13:58:ce:40:
63:ef:b6:60:20:6f:0c:49:58:9a:3b:9d:f9:76:5d:
33:c4:a7:7f:b2:03:44:1d:62:51:58:c0:01:39:41:
32:52:c8:ca:a8:49:0f:b1:84:19:0d:82:d9:70:00:
cb:cb:1a:0b:24:45:4d:63:d2:f0:a5:c7:8a:a4:30:
b1:68:d8:40:e9:7e:9c:17:d3:fa:6c:78:4b:1a:a8:
f3:46:a0:34:61:c8:c1:c6:f6:3b:12:49:12:0f:a9:
0f:cc:f8:70:ad:d4:8a:ac:a5:56:2f:44:c2:5c:d0:
5a:01:43:a3:6f:2d:b5:9c:78:84:84:ec:14:6f:5d:
7f:f9:57:60:31:14:1a:99:ab:f3:9b:3e:e4:d7:0c:
e0:85:00:fb:2c:dd:b6:2f:ad:6b:35:f3:ee:49:22:
32:fa:68:51:fc:01:f7:8b:e8:74:6b:6b:ba:82:81:
23:4a:66:ba:f9:51:f7:f6:c8:04:69:b4:af:27:b7:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:85:CE:07:A2:40:52:55:CC:4A:2C:4D:AC:66:2A:8B:EB:C8:00
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pGGFzgeiQFJVzEosTaxmKovryAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:a093:b52f/128
Signature Algorithm: sha256WithRSAEncryption
88:8d:c7:ef:10:79:fc:09:d7:30:46:ab:4e:88:f4:60:f2:f7:
9a:78:e9:51:f6:c7:c1:ad:22:00:0d:17:c9:a3:05:a7:85:16:
c4:1d:8e:38:0d:7d:e9:4d:e9:6b:99:37:09:44:af:62:97:b5:
e2:ae:8b:ca:f9:28:00:5a:1b:50:19:e2:2a:9b:68:0a:c6:0c:
2d:7e:e8:9a:19:46:3c:d9:69:ba:95:0d:af:6e:a6:05:46:55:
57:b8:60:10:5e:8c:f5:c3:74:4b:94:b2:e6:06:40:b2:8e:06:
29:52:c3:aa:ef:31:63:c4:87:f3:a0:fd:21:aa:01:31:7a:50:
07:ee:78:0f:c6:71:26:81:9c:af:59:07:56:9c:d2:00:a3:a4:
e9:2c:27:3e:a1:7e:61:bf:da:64:67:c7:e0:df:af:ea:51:45:
cd:55:8a:61:d2:b5:38:2e:a8:d4:29:60:c9:27:ff:1b:dc:b5:
03:3e:0d:49:49:92:f6:34:57:82:d8:2b:82:57:86:f8:e5:8a:
3a:a3:f8:0d:3e:7e:01:6f:e2:d5:ee:ef:1b:45:b1:0d:87:41:
18:bd:5d:44:9f:4d:e8:df:1d:16:7d:23:80:07:6d:ff:c8:5c:
36:05:67:ea:27:13:ba:07:13:c6:c1:b7:2b:1a:69:47:02:e1:
15:51:43:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:03 2025 by rpki-client