Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ssRvdPKuQXyywx1oWNHpUv9L9pY.roa
File: ssRvdPKuQXyywx1oWNHpUv9L9pY.roa (raw, json)
Hash identifier: beG/854JdrJ2XbeSSygwaLFaesvIMRF98UOzsCuE7OM=
Subject key identifier: B2:C4:6F:74:F2:AE:41:7C:B2:C3:1D:68:58:D1:E9:52:FF:4B:F6:96
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019148363BF1C6BBBE96CF8237FF5715ACF1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ssRvdPKuQXyywx1oWNHpUv9L9pY.roa
Signing time: Mon 12 Aug 2024 20:09:59 +0000
ROA not before: Mon 12 Aug 2024 20:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:36:3b:f1:c6:bb:be:96:cf:82:37:ff:57:15:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 20:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c46f74f2ae417cb2c31d6858d1e952ff4bf696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:2d:9a:fd:4e:31:91:64:18:c1:75:a1:62:
0c:e6:10:03:9e:c4:89:74:d2:7c:cf:65:1b:e8:41:
ec:5a:b4:6e:9d:12:7e:ae:a5:13:62:0b:6b:b9:e3:
c2:77:62:eb:a5:d3:4f:70:fc:55:ff:15:df:c0:ab:
1f:80:e6:7e:b6:25:53:49:ef:3e:7e:9c:ee:2c:49:
de:fb:3d:0c:40:0c:c0:2d:e8:7a:bb:f0:2f:65:2f:
cd:3f:1c:e0:39:8d:f8:98:41:80:63:63:d5:ff:5a:
98:10:7f:a3:01:f5:70:10:16:42:c2:c0:58:4c:ef:
b5:38:c7:6a:c3:95:25:71:e0:93:6a:7c:07:24:c1:
07:33:a2:41:a2:2b:d3:b6:69:dc:f1:da:b5:46:e3:
76:2d:5b:a4:93:d1:e0:f4:25:a4:80:3d:2d:57:d3:
07:e3:d6:8c:28:c8:88:dc:59:c1:42:81:95:d7:7c:
68:55:85:8c:aa:da:2b:11:3c:2e:8e:69:a9:86:56:
85:41:6a:11:40:5c:0b:e8:ba:30:52:fb:25:1f:a3:
eb:a6:73:bf:8c:59:f9:7e:4c:e1:14:96:c7:f3:9d:
3a:69:6b:bf:ea:4c:cd:2b:46:b9:3d:be:39:78:9a:
95:99:69:c1:1c:f0:6d:46:c4:bb:dc:0c:c2:b8:84:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:6F:74:F2:AE:41:7C:B2:C3:1D:68:58:D1:E9:52:FF:4B:F6:96
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ssRvdPKuQXyywx1oWNHpUv9L9pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
21:c1:ef:0f:d5:1f:63:f4:f0:9b:65:fa:6e:19:bc:cd:20:3b:
f8:4b:88:5d:17:fa:4f:e2:65:d2:9e:1d:f5:b9:99:f8:1d:8d:
21:a3:15:8c:cd:e3:84:ae:45:0e:82:8c:67:b2:4c:8b:90:fc:
3a:16:5d:87:7a:f9:4a:24:1b:d9:50:9b:48:c9:cb:12:93:03:
7f:31:4e:0a:f0:07:c7:da:e1:c4:32:4c:38:80:36:3c:8b:8a:
26:61:b0:9e:02:f8:14:e3:39:73:85:ac:c6:d3:2f:46:5d:bc:
c0:e8:eb:2c:16:da:d9:23:99:8c:2b:1e:89:c8:ae:e2:f0:1e:
1f:72:a2:52:12:4b:7a:93:3c:9c:6d:79:ab:cb:20:f6:cb:28:
3f:b6:29:21:34:fb:9e:b2:d6:e1:76:0e:8c:11:5f:23:a0:45:
05:13:9a:b1:da:41:29:6c:b6:3f:28:49:93:c1:8f:ca:58:56:
2d:38:08:e7:3b:2a:f7:5e:3e:93:4e:ff:65:1d:4e:a0:35:3f:
af:5f:18:ad:9f:e0:a6:13:81:a1:22:6a:26:17:e7:c2:06:f3:
65:17:ab:a6:6e:e9:06:2a:a1:4e:ae:71:f9:31:0a:06:b3:c3:
4b:22:82:a0:f8:69:7f:fe:b6:0a:b1:e4:2c:c3:8f:11:76:fc:
45:af:e1:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:08 2025 by rpki-client