Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rV0F3qbHfBTKf1xpQ4zGGCtHUXI.roa
File: rV0F3qbHfBTKf1xpQ4zGGCtHUXI.roa (raw, json)
Hash identifier: oc3KcRaOXYkwFuRzOGlGyQzc1YbY6dIk3trb4wMCZyQ=
Subject key identifier: AD:5D:05:DE:A6:C7:7C:14:CA:7F:5C:69:43:8C:C6:18:2B:47:51:72
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B5033D0358FABBEACC829B1D10D0C45B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rV0F3qbHfBTKf1xpQ4zGGCtHUXI.roa
Signing time: Mon 02 Sep 2024 23:12:53 +0000
ROA not before: Mon 02 Sep 2024 23:12:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b5:03:3d:03:58:fa:bb:ea:cc:82:9b:1d:10:d0:c4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 23:12:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5d05dea6c77c14ca7f5c69438cc6182b475172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:bf:8c:f1:17:98:56:32:32:0c:de:7b:e3:
b4:9a:59:b0:2d:af:bd:5a:28:99:53:9d:8b:f4:86:
c5:a1:c3:f1:da:bf:91:31:8b:2e:46:79:70:d1:1e:
3a:eb:49:6f:89:25:0b:f7:f3:67:b5:21:5d:14:e2:
e8:3a:ff:23:91:a1:37:60:6d:19:8c:16:a7:8b:e6:
34:fe:10:4c:94:97:8f:66:9f:68:bb:fc:52:fa:9d:
ac:5a:55:97:e2:9d:01:bf:fa:7d:1c:bb:1e:80:43:
55:69:cb:cc:20:b2:f6:b9:55:d8:c1:ce:b5:e0:34:
49:01:7c:d1:2c:26:77:e4:6f:86:f3:85:a5:7f:ae:
ea:26:d8:63:cf:9a:a8:b5:28:5c:fa:5c:82:f3:17:
f7:c4:f3:b2:c1:9f:c1:9f:06:19:f4:36:cb:c7:89:
47:07:7b:ba:c4:10:49:0b:a6:6e:9c:9f:1f:d4:a1:
d2:c4:b1:2f:b2:8c:c6:b6:b7:12:07:3e:c0:f3:d7:
60:89:82:c5:28:60:59:3a:d2:50:24:bd:b9:21:76:
de:e4:83:9b:4f:d8:61:32:a5:9b:2a:85:a7:dc:d5:
2a:8a:1d:53:62:6f:95:37:64:89:58:52:ed:89:a2:
2e:90:c1:f5:98:9e:a6:91:e8:96:2d:13:80:7b:79:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:05:DE:A6:C7:7C:14:CA:7F:5C:69:43:8C:C6:18:2B:47:51:72
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rV0F3qbHfBTKf1xpQ4zGGCtHUXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
80:f1:81:58:38:b1:58:2d:e4:2a:b0:19:2b:6f:40:d2:5c:03:
1d:b6:1d:3a:50:e7:cc:7b:30:44:be:25:a5:27:41:ec:1e:07:
c0:52:28:bd:e8:db:64:a5:9f:cc:25:19:13:29:11:6b:bc:4d:
2c:d1:a2:a8:22:05:dc:86:96:5e:a2:84:54:a6:0f:cb:a1:60:
de:f3:76:13:53:c7:b7:24:0e:fc:ca:16:19:b0:1a:35:27:fa:
22:d2:92:40:ad:a6:a9:a8:fe:41:55:c4:1c:31:5c:e4:7c:73:
b4:8e:f3:22:55:22:b5:2f:cf:e9:2c:a2:b8:5a:a1:43:e0:c8:
c9:3c:08:b3:1f:88:6d:20:54:81:73:c5:63:fa:50:15:56:fa:
be:31:9e:8c:b9:67:a4:20:ee:09:99:8e:8f:ca:1f:c1:30:b5:
1d:91:8d:0a:b5:1e:8c:24:ad:5e:49:5c:db:23:03:7b:ee:30:
ba:1d:8a:6c:8b:12:6b:aa:e0:dc:98:04:6a:cf:c0:bc:92:65:
dd:43:7a:5a:fe:49:34:4f:38:5a:66:25:9b:10:5f:91:c3:99:
98:0a:33:54:89:7a:d9:67:f4:88:fb:5c:d9:f0:38:e9:c6:e0:
06:8c:d6:81:fe:b9:e2:c6:4e:ba:20:30:5f:43:64:25:94:dc:
11:12:7a:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:20 2025 by rpki-client