Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ti4cjVVHLYvsmNTtuyZSpbcmI_w.roa
File: ti4cjVVHLYvsmNTtuyZSpbcmI_w.roa (raw, json)
Hash identifier: Ln1s7Owg5HdJXncROCdV1fwZPxXy6ubEUZk0lqQ2wlA=
Subject key identifier: B6:2E:1C:8D:55:47:2D:8B:EC:98:D4:ED:BB:26:52:A5:B7:26:23:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192CC5D43EC3DD326F4156FBAA40458FCA7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ti4cjVVHLYvsmNTtuyZSpbcmI_w.roa
Signing time: Sun 27 Oct 2024 05:05:17 +0000
ROA not before: Sun 27 Oct 2024 05:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:cc5c:a11f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:5d:43:ec:3d:d3:26:f4:15:6f:ba:a4:04:58:fc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 27 05:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b62e1c8d55472d8bec98d4edbb2652a5b72623fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:27:27:1f:51:47:fe:16:1b:64:1d:dd:ed:
46:a4:5b:20:c4:92:9e:05:7c:20:fc:2e:3c:38:ab:
c0:bb:f2:bb:ad:7c:0d:a9:66:b1:42:fe:64:98:d0:
14:23:b5:f1:90:0a:28:b4:39:4f:77:7a:a7:05:50:
37:44:01:16:2c:17:55:a5:dc:8c:f5:cf:eb:95:15:
91:87:1a:3a:6b:76:86:fa:53:f7:15:0b:51:b5:7c:
63:c2:28:a5:62:3b:88:50:04:cd:f6:c7:27:01:f1:
5e:72:0c:a3:96:18:87:73:79:66:42:e9:47:45:cf:
44:12:b7:ac:3f:9e:c8:d2:96:95:91:50:69:c4:aa:
b6:6b:65:96:c8:d4:4c:1c:15:39:59:bf:d5:41:cd:
c3:3f:d8:85:89:52:45:1d:1e:da:8b:82:3c:48:c3:
53:ff:57:30:e3:a1:f2:14:79:2d:31:de:e5:e1:7c:
f3:13:9b:27:49:68:88:3e:bf:cb:2d:e0:a7:02:f6:
14:48:25:6d:31:27:15:8d:bc:33:12:4d:ab:b6:0d:
50:81:a2:56:f2:5c:a1:7f:1e:3c:a8:96:1e:31:9a:
34:17:e8:e6:35:ef:3d:14:46:4a:c0:45:1e:1f:70:
b8:61:55:4f:1c:93:f4:61:2c:1d:6a:b2:21:0a:f9:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:1C:8D:55:47:2D:8B:EC:98:D4:ED:BB:26:52:A5:B7:26:23:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ti4cjVVHLYvsmNTtuyZSpbcmI_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:cc5c:a11f/128
Signature Algorithm: sha256WithRSAEncryption
82:03:8f:b1:f9:29:b3:4c:8f:2b:fc:74:6e:43:60:d4:3e:61:
f6:e7:31:08:48:59:d5:7e:0c:09:eb:42:0f:3d:16:9a:e8:c0:
c2:18:1c:67:de:79:25:a6:bf:8b:05:b2:a0:6d:2a:bb:c7:78:
5a:21:39:23:e8:6d:d2:11:5e:eb:74:55:5e:fd:23:98:38:03:
e7:da:e5:02:90:a7:12:3f:d0:42:25:d6:90:76:7c:5f:26:f7:
7b:76:6b:a2:ae:b7:5c:47:1e:ee:27:fb:da:cb:d8:e4:d3:4b:
f2:7c:4d:35:16:8c:4e:a0:08:de:82:57:2e:17:08:46:42:32:
78:e3:3e:20:cf:a6:90:1a:17:41:da:32:b5:98:39:5e:81:6a:
f2:6e:6b:6c:4f:73:18:f9:5e:83:7f:fb:9b:43:77:b2:96:76:
ac:8e:2f:9d:3d:81:08:d0:5a:07:ab:67:d5:04:4f:d7:8a:1e:
ba:a5:68:1b:d0:4f:aa:28:33:5f:65:3b:8a:31:7e:c3:1a:aa:
83:55:67:0f:a3:b4:e2:8c:f8:39:13:ff:3a:d6:12:ec:29:86:
fc:f8:26:de:41:65:9f:68:ee:2d:3f:b0:2b:86:07:e0:e7:82:
0e:03:10:c8:6a:3e:ca:3f:52:84:f3:91:41:c6:e0:41:1e:8e:
ba:c2:4d:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:45 2025 by rpki-client