Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ssMD19rsrGNafNdJK40ZUYw8xzU.roa
File: ssMD19rsrGNafNdJK40ZUYw8xzU.roa (raw, json)
Hash identifier: XCLSa0G91Rt4afHLikt+Rxcq8KiZRopAmHPRgwRokCk=
Subject key identifier: B2:C3:03:D7:DA:EC:AC:63:5A:7C:D7:49:2B:8D:19:51:8C:3C:C7:35
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A857F679EB78129EF1B506534394F60D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ssMD19rsrGNafNdJK40ZUYw8xzU.roa
Signing time: Sat 31 Aug 2024 12:10:22 +0000
ROA not before: Sat 31 Aug 2024 12:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:57:f6:79:eb:78:12:9e:f1:b5:06:53:43:94:f6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 12:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c303d7daecac635a7cd7492b8d19518c3cc735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:fa:76:39:d5:5c:76:d0:03:12:0c:cb:de:
0c:86:e5:45:70:60:77:cb:87:02:d7:28:ac:3b:6e:
c7:3e:de:41:32:f2:b2:91:10:6f:99:92:37:ef:b8:
d7:f4:c2:d3:15:17:9d:e3:3c:5d:4e:42:e7:d0:33:
d0:42:18:92:79:d2:a5:b9:ae:d6:83:3a:3e:b3:ea:
ca:b8:f5:2a:c6:b2:03:42:62:a2:9c:3e:48:6b:46:
1f:f8:93:b1:d1:56:72:5c:e7:71:52:15:dc:a9:ed:
43:05:5a:06:a4:e8:9b:9e:00:1c:98:39:0d:e4:6d:
e9:7f:4a:68:62:77:76:4c:b1:7c:47:52:77:82:94:
41:96:fb:b0:6b:ad:2c:b8:8d:a0:55:3a:34:4d:2b:
5d:9d:35:67:aa:1b:e1:a3:5f:f0:b3:e6:84:ba:dc:
48:0d:c8:ba:bc:9d:72:32:26:d4:e4:05:d1:81:34:
cf:1d:5e:18:19:6c:17:1e:33:3b:77:9c:a2:e4:13:
7b:ff:84:53:e5:40:86:6f:eb:0e:39:02:b8:98:aa:
25:a2:e6:8b:13:95:84:16:3f:d9:75:1d:7d:6c:66:
7c:a7:95:8b:4d:4e:7f:8f:b2:03:7c:1f:b3:2c:9e:
b7:27:3f:28:ac:aa:32:5b:aa:52:c1:6c:4d:a6:f9:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:03:D7:DA:EC:AC:63:5A:7C:D7:49:2B:8D:19:51:8C:3C:C7:35
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ssMD19rsrGNafNdJK40ZUYw8xzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1f:c2:26:a6:73:02:85:61:85:1a:5f:24:ed:b2:0a:53:63:8c:
af:6c:fd:bd:45:de:6d:10:ea:fc:78:24:ce:55:69:c4:b0:8d:
cd:04:f0:b4:df:a9:d7:72:06:2a:e6:12:4a:0d:94:43:e9:c7:
de:51:12:ea:df:90:75:58:49:c0:b2:cf:fa:8a:7d:1c:84:b9:
1e:b3:3d:ca:63:11:96:a7:3c:6f:7a:d1:e9:19:fb:dd:76:9d:
36:99:00:66:4b:f3:dd:95:15:fa:ac:52:10:22:34:d5:24:a3:
58:a6:da:89:37:be:e9:fc:a5:9a:42:88:07:dd:d4:84:14:4a:
bb:81:30:51:17:cb:ba:02:a6:7e:b6:de:2a:07:9b:07:27:3d:
06:a2:e8:a0:fe:40:48:33:37:3d:83:c4:47:c9:43:85:9c:bd:
80:78:33:9f:8a:dc:bd:b0:44:6e:59:27:b5:9d:dd:ea:f6:b6:
3e:78:dd:73:d3:01:59:c9:8b:1e:2c:aa:ec:f7:83:9b:15:d6:
d2:1a:83:33:ef:63:28:1c:10:02:1e:93:a1:92:e2:9b:62:02:
e5:d9:85:35:17:0d:2f:25:c5:9b:0d:8a:90:e6:30:70:06:3e:
d8:b8:00:cf:dd:18:5b:7f:1f:16:cc:f2:01:77:9d:f2:ef:eb:
15:de:25:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:11 2025 by rpki-client