Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qsReNyeKgJONA7kH12u0GmnZMOQ.roa
File: qsReNyeKgJONA7kH12u0GmnZMOQ.roa (raw, json)
Hash identifier: rbix7/wZaaQB40h0ADNce1xP9yvKYOv6wbFORwgOhJM=
Subject key identifier: AA:C4:5E:37:27:8A:80:93:8D:03:B9:07:D7:6B:B4:1A:69:D9:30:E4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190C35E9783A42E242D366390988D98FCF8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qsReNyeKgJONA7kH12u0GmnZMOQ.roa
Signing time: Thu 18 Jul 2024 01:04:34 +0000
ROA not before: Thu 18 Jul 2024 01:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:c35e:6782/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c3:5e:97:83:a4:2e:24:2d:36:63:90:98:8d:98:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 18 01:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aac45e37278a80938d03b907d76bb41a69d930e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:2f:4a:0e:d0:14:56:90:e7:92:01:50:a5:
e4:2c:2d:77:f1:e9:55:e9:7c:77:ef:f6:01:a7:fb:
e2:e1:30:1c:f6:73:73:b2:4b:34:2d:9a:34:cd:05:
bb:8b:17:91:1c:b9:68:92:0a:36:1d:12:06:31:36:
35:78:f8:4f:04:3c:95:e3:b2:38:59:e9:37:3c:bb:
4e:9b:9b:98:c3:34:a8:bb:c6:e4:28:32:1f:da:12:
ee:88:4c:bf:b8:61:df:9a:e7:44:db:6b:be:cc:02:
69:ee:2f:db:9e:ab:02:5f:f4:e0:1f:d7:bc:24:d9:
ef:cb:cc:d8:d8:59:2b:2f:b4:58:24:8f:70:5a:c3:
6b:8f:37:c0:e4:79:a0:e4:dc:04:b0:78:5d:4d:7d:
63:28:3e:9f:01:89:64:d1:6a:1a:56:9a:bc:9e:d6:
43:8b:81:b6:4d:00:d1:61:ec:06:ae:df:50:38:aa:
18:75:8e:1d:7f:58:ae:e2:b9:65:7c:9a:57:92:f1:
24:76:9d:8f:cc:af:76:9d:80:7a:c6:7a:8a:7f:f2:
89:66:fc:54:03:9b:2e:0a:11:07:b0:20:a5:09:4d:
54:9f:d7:a1:66:3d:35:a4:bc:e5:44:aa:8f:66:6e:
68:06:13:49:00:08:36:9a:22:97:06:67:4a:1f:cb:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:5E:37:27:8A:80:93:8D:03:B9:07:D7:6B:B4:1A:69:D9:30:E4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qsReNyeKgJONA7kH12u0GmnZMOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:c35e:6782/128
Signature Algorithm: sha256WithRSAEncryption
38:97:92:f2:0e:a7:0b:14:1f:55:a9:78:e9:32:44:c0:b1:a3:
ea:50:73:90:43:14:20:69:8a:15:ce:78:13:27:98:3c:e9:e2:
27:84:84:a9:6c:56:fe:c0:67:3e:b7:fb:f3:8f:4c:8c:15:04:
0c:66:15:0d:eb:54:cb:bf:21:52:bb:43:d2:e2:de:63:42:fa:
ae:36:95:ca:1b:ae:3d:b8:bc:77:63:a9:3a:94:3f:4b:7d:7b:
14:59:9d:fe:bc:08:eb:a2:dd:d6:23:27:b1:3d:83:54:22:49:
3d:5c:a0:e9:f4:9e:40:bd:b6:c1:ac:42:82:57:3f:6b:bf:a6:
75:69:2c:86:7a:05:60:e9:41:9a:e0:b7:58:88:29:6d:1d:33:
92:f4:95:f6:77:9d:75:51:a5:1c:f2:93:30:cb:73:6d:1a:9a:
7e:ae:da:80:5a:7c:85:73:d0:63:1b:a8:d4:55:ba:a4:b5:0c:
91:2e:61:cd:21:33:3b:08:85:82:08:41:12:46:64:c5:aa:ff:
fb:1b:1f:d2:c8:6a:74:3b:31:dd:70:c9:81:72:d7:33:45:27:
2f:33:41:63:9b:cd:1d:1b:88:fa:c2:03:9b:dc:6b:47:c7:5a:
e0:52:b3:f8:a3:19:7b:80:97:3e:a3:56:fb:ee:1a:00:35:83:
5f:f0:ff:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:23 2025 by rpki-client