Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sUNNy1NaECNRl5MR7328rPNMLYg.roa
File: sUNNy1NaECNRl5MR7328rPNMLYg.roa (raw, json)
Hash identifier: 737l6CbH+0gzMsAbKXXj5WQvS7GV3dkHKUzIkfN0pFU=
Subject key identifier: B1:43:4D:CB:53:5A:10:23:51:97:93:11:EF:7D:BC:AC:F3:4C:2D:88
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916F450F52B5671F97EE1BE2B9B4AE6AAC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sUNNy1NaECNRl5MR7328rPNMLYg.roa
Signing time: Tue 20 Aug 2024 10:11:22 +0000
ROA not before: Tue 20 Aug 2024 10:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:45:0f:52:b5:67:1f:97:ee:1b:e2:b9:b4:ae:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 20 10:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1434dcb535a102351979311ef7dbcacf34c2d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:0a:b6:b6:0e:85:cb:f5:7c:0e:e0:dd:b6:
8d:e6:26:27:96:88:63:14:56:f3:9f:34:37:5b:76:
5c:f0:56:f0:27:94:a7:dc:e7:c6:47:69:e3:7b:aa:
62:c1:6b:7a:d2:e6:20:7f:e2:42:7e:8e:87:e3:aa:
f3:0b:fc:46:e7:00:08:20:40:18:da:8d:3e:eb:d3:
63:4b:1b:bf:7a:e4:1e:ad:b1:58:d2:82:fe:0a:f7:
af:06:f9:2a:df:46:f7:80:45:ac:02:77:9c:dd:3c:
41:24:fe:63:1e:4f:49:67:28:d0:b7:53:9a:cd:1d:
1e:e0:46:17:3b:0d:1f:11:9d:8e:34:7b:e4:54:98:
34:2b:83:5b:f1:65:16:99:41:ce:f4:05:c2:e1:a2:
16:87:69:8e:3c:16:66:75:ac:26:dd:6f:88:2d:07:
ea:08:ac:01:6d:b9:47:ee:5c:02:92:33:df:9e:78:
d0:67:22:27:52:4f:4b:12:69:a6:d8:bb:11:73:e9:
85:59:d1:8a:e5:57:03:12:0e:87:fc:be:96:0e:a4:
e7:7a:4b:e2:32:8d:18:69:f2:e7:b6:2d:ae:b0:06:
82:ac:0d:8a:14:d3:01:4b:02:08:84:ae:ef:f0:0f:
c4:b9:f1:6e:b6:eb:ac:2f:6c:90:8e:e2:25:14:98:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:43:4D:CB:53:5A:10:23:51:97:93:11:EF:7D:BC:AC:F3:4C:2D:88
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sUNNy1NaECNRl5MR7328rPNMLYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
7a:ab:0b:1b:cd:21:46:7e:a5:b2:90:67:7a:8f:d7:96:87:6c:
e0:cb:7c:47:80:c0:57:47:88:db:7e:79:93:95:2c:61:bc:82:
ec:dc:9d:cd:cc:19:7d:58:7a:bb:3b:e5:52:e0:9a:1b:d5:87:
45:ac:37:1a:19:83:23:cb:48:0e:ed:99:5e:ec:a1:2f:45:93:
30:31:7f:cc:05:28:bb:df:f5:a8:36:9e:1f:64:7a:a8:4f:ae:
b4:cb:d8:ca:85:71:b2:b9:53:9a:0e:cc:78:86:74:7d:da:ae:
b3:10:62:ce:a8:39:f7:77:34:9d:0e:c3:56:fe:57:a0:03:c5:
8b:6b:e5:51:ad:19:94:82:d3:bd:01:ce:a1:1b:24:ce:62:e4:
25:0b:08:88:c8:f7:56:fb:e5:f9:31:46:3d:ca:c0:f5:86:4a:
5d:1a:af:a6:a7:08:8d:04:2b:6a:65:29:e7:d0:26:0e:e1:3e:
07:44:77:ab:20:a8:76:ea:ac:2d:28:df:ae:7b:85:dd:cb:33:
9f:f6:3b:8c:dc:cf:ab:6e:0f:12:3d:93:6c:f4:13:bf:43:01:
46:c9:75:86:15:12:33:29:f9:b7:96:ea:94:15:12:de:f9:72:
d6:01:45:25:9f:42:b5:d6:17:ea:9c:b3:88:31:52:f3:5e:28:
e3:22:3a:af
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFvRQ9StWcfl+4b4rm0rmqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODIwMTAxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQzNGRjYjUzNWExMDIzNTE5NzkzMTFlZjdkYmNhY2YzNGMyZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+EKtrYOhcv1fA7g3baN5iYnlohj
FFbznzQ3W3Zc8FbwJ5Sn3OfGR2nje6piwWt60uYgf+JCfo6H46rzC/xG5wAIIEAY
2o0+69NjSxu/euQerbFY0oL+CvevBvkq30b3gEWsAnec3TxBJP5jHk9JZyjQt1Oa
zR0e4EYXOw0fEZ2ONHvkVJg0K4Nb8WUWmUHO9AXC4aIWh2mOPBZmdawm3W+ILQfq
CKwBbblH7lwCkjPfnnjQZyInUk9LEmmm2LsRc+mFWdGK5VcDEg6H/L6WDqTnekvi
Mo0YafLnti2usAaCrA2KFNMBSwIIhK7v8A/EufFutuusL2yQjuIlFJhmxQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLFDTctTWhAjUZeTEe99vKzzTC2IMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvc1VOTnkxTmFFQ05SbDVNUjczMjhyUE5NTFlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAeqsLG80hRn6lspBneo/Xlods
4Mt8R4DAV0eI2355k5UsYbyC7NydzcwZfVh6uzvlUuCaG9WHRaw3GhmDI8tIDu2Z
XuyhL0WTMDF/zAUou9/1qDaeH2R6qE+utMvYyoVxsrlTmg7MeIZ0fdqusxBizqg5
93c0nQ7DVv5XoAPFi2vlUa0ZlILTvQHOoRskzmLkJQsIiMj3Vvvl+TFGPcrA9YZK
XRqvpqcIjQQramUp59AmDuE+B0R3qyCoduqsLSjfrnuF3cszn/Y7jNzPq24PEj2T
bPQTv0MBRsl1hhUSMyn5t5bqlBUS3vly1gFFJZ9CtdYX6pyziDFS814o4yI6rw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:35 2025 by rpki-client