Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tURIWiFmLndIXVD2nOMuHlo-Cug.roa
File: tURIWiFmLndIXVD2nOMuHlo-Cug.roa (raw, json)
Hash identifier: wMDrN+kUc9zd1ZIeaqR4LCb8dVNuOn+KPRpJi4sVHhs=
Subject key identifier: B5:44:48:5A:21:66:2E:77:48:5D:50:F6:9C:E3:2E:1E:5A:3E:0A:E8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01951A730E32F767EE11BA33995A0EC01100
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tURIWiFmLndIXVD2nOMuHlo-Cug.roa
Signing time: Tue 18 Feb 2025 19:05:02 +0000
ROA not before: Tue 18 Feb 2025 19:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:1a72:609c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:73:0e:32:f7:67:ee:11:ba:33:99:5a:0e:c0:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 18 19:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b544485a21662e77485d50f69ce32e1e5a3e0ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:84:80:ea:0f:03:3c:29:f3:02:c8:53:1d:
56:49:c4:f2:58:40:e2:18:7f:5f:f5:8a:05:c2:f1:
1d:48:bb:7f:e3:2f:95:c7:7a:82:55:af:10:c6:ce:
b4:37:46:8e:fa:ab:70:39:f0:03:5e:22:94:ca:d9:
87:f5:21:b1:a6:dd:b8:70:00:c5:3f:4b:67:f8:f9:
03:f4:76:b3:e6:0a:32:17:41:a4:bb:2f:f1:98:7e:
99:40:4f:6e:79:0f:db:86:58:30:1f:9e:c2:80:34:
4a:b8:7a:27:c3:d6:57:fd:8c:2c:db:8d:e1:83:00:
92:ae:81:67:df:ae:8a:15:60:bb:08:8d:72:ea:e3:
81:0c:eb:77:60:bb:23:65:4d:5e:f7:df:08:c1:d2:
ba:61:91:35:d6:c7:18:59:ac:be:eb:f1:0c:b8:9e:
54:60:33:ae:73:a6:52:1e:47:78:d7:90:49:fa:70:
c4:ee:53:ed:28:9c:40:7a:3d:c8:4d:fa:f3:e5:22:
f6:97:d9:64:5f:04:46:9e:e9:ae:34:65:85:fe:48:
5f:95:67:b0:32:9c:4c:db:31:9b:22:15:da:de:c3:
df:09:c3:2a:02:3a:c1:f2:ea:68:a5:fa:c7:cc:9d:
d2:61:b3:39:bf:16:e2:45:57:6e:25:b2:fa:bd:0d:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:48:5A:21:66:2E:77:48:5D:50:F6:9C:E3:2E:1E:5A:3E:0A:E8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tURIWiFmLndIXVD2nOMuHlo-Cug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:1a72:609c/128
Signature Algorithm: sha256WithRSAEncryption
5b:4d:9d:37:8d:6b:6b:e5:52:76:8f:e1:f4:bb:79:d1:b9:23:
82:a4:22:af:b9:91:56:be:f8:79:32:1e:42:f6:0d:0f:90:75:
de:b2:95:e2:c0:3d:7a:e0:09:23:9d:9a:79:cc:ef:d3:62:fa:
0a:a0:f1:77:80:55:19:b8:c5:fd:42:db:f3:2a:e3:ee:44:b9:
4a:29:09:05:92:e2:70:a5:45:92:68:c2:6b:b4:08:f6:1b:b3:
60:54:15:82:4b:80:73:d8:04:1c:b7:81:07:e0:0f:32:3c:66:
bd:f9:b8:8c:cd:ad:3c:cb:b4:90:ae:f2:6c:4b:9c:f5:3d:ee:
f2:27:70:e6:92:b0:a4:dc:f1:10:e6:8b:66:22:b6:b3:e2:f2:
b0:c5:c0:b6:38:9e:4c:15:7a:4d:f5:57:5b:22:d5:45:17:72:
dd:9c:0c:25:0a:8a:50:85:18:1e:d9:2f:1c:6e:0d:fa:0d:27:
8b:d8:4c:3c:cf:98:d8:98:48:7f:bd:92:44:e5:83:d6:92:ec:
46:b7:b2:3e:39:a8:f5:28:d8:e8:f2:0c:65:aa:83:7c:c6:6a:
10:16:14:6e:5f:8c:3f:19:c2:95:16:fd:e0:0c:e9:32:dc:a4:
b4:b7:24:6b:60:f8:af:84:e0:23:16:5e:fb:d6:80:e8:fa:6e:
6b:ce:ea:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:46 2025 by rpki-client