Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pV6SlQpbfdPNx1iw2atN97iD7LI.roa
File: pV6SlQpbfdPNx1iw2atN97iD7LI.roa (raw, json)
Hash identifier: Ak9lrPhr9n8Q4O58IAsbS+xzIPpW7/VuCPHqTFG3qCw=
Subject key identifier: A5:5E:92:95:0A:5B:7D:D3:CD:C7:58:B0:D9:AB:4D:F7:B8:83:EC:B2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B64CA89B165BD16FEBEDBD1811D7B105
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pV6SlQpbfdPNx1iw2atN97iD7LI.roa
Signing time: Tue 03 Sep 2024 05:12:42 +0000
ROA not before: Tue 03 Sep 2024 05:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:4c:a8:9b:16:5b:d1:6f:eb:ed:bd:18:11:d7:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 05:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a55e92950a5b7dd3cdc758b0d9ab4df7b883ecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:70:7c:90:ac:94:aa:7b:4f:43:7f:a6:48:
c7:ce:b5:58:cb:10:a2:5c:fa:21:53:ea:ef:e0:3b:
de:63:e7:44:73:89:e6:1c:b6:35:ad:96:1a:2b:08:
5a:b8:53:63:a6:34:80:c4:fe:2d:10:29:ce:68:9b:
59:34:de:92:83:29:b2:6e:e9:67:c0:75:1e:2d:a1:
e6:b8:4e:43:b3:a4:55:cf:ed:61:14:95:f2:d9:8d:
bb:e2:59:f6:68:4d:13:4b:ef:c5:12:be:48:85:34:
6e:cf:77:46:6b:4b:76:10:a1:a8:8b:e7:09:c4:e1:
b6:76:c6:04:d8:2b:1a:5a:29:cc:99:ce:e1:30:5a:
5b:de:e9:0a:0b:c5:9d:d8:15:93:c5:ac:90:6a:b6:
bd:cd:a0:ef:bd:06:80:9d:9b:1b:5a:75:51:34:88:
2d:f0:34:6b:fa:44:85:f7:b0:f6:1f:a7:ff:6e:14:
41:57:a5:64:21:31:02:2e:28:c9:d0:dc:9f:45:7b:
20:17:f8:c9:01:f2:5b:22:a7:09:33:cc:27:ea:c7:
e9:fd:6c:60:da:32:1c:0f:04:81:9e:f4:8c:a6:e2:
a8:c2:a4:70:31:d8:54:e7:a0:e5:22:d9:74:86:a4:
e3:a8:26:41:e0:60:f7:bd:c6:39:03:f3:71:24:af:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:92:95:0A:5B:7D:D3:CD:C7:58:B0:D9:AB:4D:F7:B8:83:EC:B2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pV6SlQpbfdPNx1iw2atN97iD7LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5a:ec:81:10:c8:0b:d6:06:2d:44:d3:45:f9:bd:a9:91:5a:e5:
c5:a1:7e:54:c2:c4:4f:e1:2d:a8:5e:20:62:a9:94:0f:c7:bb:
d2:bf:b5:a2:96:8f:4b:96:37:7c:ed:55:65:58:ab:46:df:ed:
c1:35:7e:d3:84:ee:2e:6d:f0:8d:56:76:9a:58:5a:47:b2:0a:
2e:5a:48:bc:a5:53:af:c9:5d:41:94:fb:c8:76:ef:0a:8b:43:
29:c2:c4:1d:11:2b:a5:29:04:be:78:1e:6c:66:c1:5d:9a:30:
44:f4:dc:95:ef:dd:ec:5a:2e:b6:81:e4:cc:20:eb:47:34:43:
78:50:94:e9:29:6a:4d:ac:32:c2:4f:48:ef:e9:d9:f3:b0:49:
89:b5:a5:02:e2:23:ec:01:54:88:59:80:af:16:1a:73:7d:3e:
5a:da:a6:f9:4a:c0:ee:ab:52:55:df:2a:ac:86:c8:44:02:da:
4c:7a:af:09:b0:5a:21:87:8f:f8:51:3d:ac:f8:db:88:94:f2:
2d:a0:e3:0b:bc:8b:2a:59:cd:47:ac:67:37:b2:d0:a8:27:81:
f2:ec:fd:bd:a5:42:af:ea:5a:c0:04:5a:f6:5b:64:21:4b:8a:
4d:89:d3:aa:6e:82:b1:68:2e:bc:5e:ac:37:b5:9e:74:2c:a3:
1e:b3:f7:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:52:39 2025 by rpki-client