Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pT4Cp_GAnIRU71l13atmvPxPkio.roa
File: pT4Cp_GAnIRU71l13atmvPxPkio.roa (raw, json)
Hash identifier: qoAdPCU9U3z1jp/r+qxi0Hae3cEdgam/FhizwdXjrBk=
Subject key identifier: A5:3E:02:A7:F1:80:9C:84:54:EF:59:75:DD:AB:66:BC:FC:4F:92:2A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191629D302E612FCE07E49167831894BD4F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pT4Cp_GAnIRU71l13atmvPxPkio.roa
Signing time: Sat 17 Aug 2024 23:12:34 +0000
ROA not before: Sat 17 Aug 2024 23:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:62:9d:30:2e:61:2f:ce:07:e4:91:67:83:18:94:bd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 23:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a53e02a7f1809c8454ef5975ddab66bcfc4f922a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:a7:36:36:55:f6:85:75:ec:d8:bd:a4:fe:
10:3e:8e:7d:d1:16:af:ce:72:18:4e:e5:2d:5c:68:
35:a4:81:ff:e8:62:1d:30:bf:84:6f:33:b0:da:3f:
62:15:83:30:ab:ea:30:63:01:d4:8a:cc:3d:e8:ad:
0f:79:30:e3:bf:49:75:9e:4b:b2:77:79:98:6c:d4:
d4:4d:5a:c5:cd:63:6f:18:f0:57:31:02:21:9f:35:
e5:5d:54:9c:a6:ce:b5:70:17:b5:3a:3a:62:d3:c0:
c5:6c:60:f9:2f:79:e0:c7:4e:9c:fb:d7:8b:0a:42:
21:b0:67:a2:f7:a3:73:6e:7a:e3:81:e1:3f:da:7d:
a2:2e:6b:09:2f:97:ae:d7:09:8f:ec:b6:9c:8a:47:
1f:1a:88:ac:67:87:59:5f:27:a8:e2:10:62:49:2d:
1e:b0:a7:b4:bb:91:c1:00:6e:60:77:d2:9b:5e:47:
de:a0:f6:d6:6f:50:bc:bf:d2:69:fc:97:08:e8:df:
ec:60:d6:8a:51:e9:2c:d6:8b:4b:f1:29:ad:49:41:
4d:3e:98:50:25:60:21:4b:89:87:62:a3:5c:f0:84:
1c:e3:04:fb:2a:a5:2d:df:8f:f6:7a:17:6d:1e:c6:
e2:49:11:ce:1b:0f:d8:8e:c9:73:b4:0f:63:ac:db:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:02:A7:F1:80:9C:84:54:EF:59:75:DD:AB:66:BC:FC:4F:92:2A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pT4Cp_GAnIRU71l13atmvPxPkio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1b:93:e2:d9:7e:c5:bb:22:1b:f4:9c:0d:09:32:0b:a8:d9:36:
3a:77:10:9a:cc:31:b1:af:0d:57:6c:a5:40:33:d6:93:8e:f3:
e2:5b:e8:d2:ba:63:7d:ba:ff:c1:f0:3b:4b:a4:0e:c4:1a:5e:
b9:5e:52:da:9e:22:c4:ec:4d:0e:3d:ac:ff:1a:92:e0:37:92:
32:16:6d:3f:4d:19:10:4d:25:f4:3c:2e:1d:34:39:17:3a:c4:
81:b7:50:e8:af:eb:2e:63:e6:14:a8:3f:84:f6:e8:ce:a4:f9:
8a:e3:ab:7e:48:85:ae:ba:78:fb:1b:ce:4b:3f:9f:2a:22:1d:
d7:ed:05:87:c2:29:e4:37:4e:3b:d1:49:f4:a7:97:43:68:85:
15:2b:28:a0:f4:2f:58:86:14:94:39:4f:d7:86:59:56:4c:72:
f6:71:73:5b:c5:1a:be:8c:4f:0d:e3:2c:cd:34:c3:94:18:60:
ac:8f:3e:91:06:dd:15:c5:94:f5:5e:fc:b5:42:47:b2:7c:ad:
7a:b6:af:43:78:31:03:8d:e7:b2:33:5f:ea:b4:23:ce:3a:b1:
9d:3e:0c:5d:3c:41:c8:a6:9b:bc:ed:4e:ee:11:9d:ae:2c:7f:
ed:44:2b:58:0d:77:c7:15:41:59:db:0a:ba:c9:0e:fc:ee:36:
a7:c2:0b:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:31:18 2025 by rpki-client