Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sgHENsedBGjoB2lKdxMIYqxbtFM.roa
File: sgHENsedBGjoB2lKdxMIYqxbtFM.roa (raw, json)
Hash identifier: QFRtwIDTXF1ZJAbelWxDaJnmdt35plmfXZxTUO5SFms=
Subject key identifier: B2:01:C4:36:C7:9D:04:68:E8:07:69:4A:77:13:08:62:AC:5B:B4:53
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01946A18A12AD65202567AFB4FB044837E84
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sgHENsedBGjoB2lKdxMIYqxbtFM.roa
Signing time: Wed 15 Jan 2025 13:13:06 +0000
ROA not before: Wed 15 Jan 2025 13:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:18:a1:2a:d6:52:02:56:7a:fb:4f:b0:44:83:7e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 15 13:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b201c436c79d0468e807694a77130862ac5bb453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:9e:d6:19:cc:c8:4e:44:23:0f:f0:02:d1:
9e:1f:c6:2c:eb:e9:5d:cf:6b:c8:ae:a6:ba:d1:05:
93:49:69:0f:ce:86:b1:85:ba:00:d2:24:39:54:be:
b5:0f:f8:5d:75:c0:0b:ac:a1:e1:a4:54:c1:70:31:
76:d0:8a:65:c0:2d:c9:90:cc:5d:f6:43:22:97:34:
98:a1:b2:83:03:a6:74:b0:c8:e3:68:a6:38:ed:7f:
87:b3:ec:43:4c:9f:72:01:0b:3f:a5:f0:30:3f:ed:
4c:48:0e:89:eb:46:54:16:39:b1:a6:4c:08:c3:21:
8e:67:bf:30:3e:f5:04:66:37:80:06:31:c0:c2:1b:
ac:2a:ea:7d:76:da:6d:99:8e:bd:52:f7:f0:13:09:
e5:95:f3:d2:e5:c0:a6:32:bf:be:4a:04:43:1a:f6:
4c:c4:72:f0:ff:39:11:a1:59:42:7d:0c:55:47:db:
50:f5:51:d6:2c:75:e5:2e:e5:f8:e6:f5:56:3b:9d:
2b:3a:95:90:c9:90:f7:79:27:d4:12:90:26:e4:73:
ac:94:88:b6:26:94:71:93:49:34:d0:bd:30:1b:cd:
51:fc:14:39:c1:02:57:51:45:20:ec:1a:b1:3a:a0:
38:d7:6b:78:ea:c0:18:53:26:a9:61:6f:cc:50:50:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:C4:36:C7:9D:04:68:E8:07:69:4A:77:13:08:62:AC:5B:B4:53
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sgHENsedBGjoB2lKdxMIYqxbtFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
5c:68:ca:26:2c:ee:76:4c:25:35:36:78:43:f8:85:c6:bc:da:
08:5d:cc:a1:96:c1:7a:9e:c1:6a:2d:85:49:e3:23:66:91:3a:
83:9d:62:f7:79:c4:6f:e8:bb:55:0a:23:63:ba:f2:29:0b:e8:
cc:f2:1a:d9:79:77:b0:19:3d:0b:c2:28:02:85:49:72:f3:e9:
36:b0:de:f4:50:a7:3b:b9:9b:61:c8:f5:ec:fc:76:90:c7:d1:
a3:17:57:b0:8a:1c:5d:ae:b6:43:28:b1:4c:14:34:24:78:6d:
30:78:0c:1f:83:1e:63:0f:b1:5a:dd:13:21:7f:68:a2:65:3d:
f5:83:ec:83:b8:73:ac:d7:02:cf:7c:be:79:c7:e4:20:17:00:
71:fc:7d:12:ea:ab:a3:da:0f:fa:ef:8f:7b:4c:ca:72:3d:af:
1b:c2:ae:43:22:62:c9:48:90:2d:f7:6d:29:ca:3d:7a:f5:d6:
7a:6f:02:34:85:de:46:ba:cd:6f:4d:90:6f:97:ce:af:35:86:
c7:47:ca:22:24:b3:07:6a:25:a8:9c:ef:11:75:b4:65:2b:4e:
26:7f:d4:d9:4a:05:6d:e7:e2:9e:97:92:44:8d:a9:62:44:80:
0b:c1:1f:fe:0e:04:f4:08:1d:7e:8f:e0:2b:e8:3d:e9:d6:52:
34:9a:f1:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:27 2025 by rpki-client