Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u0y-v1fHJjsFuWZ-aOc_G2sxi_M.roa
File: u0y-v1fHJjsFuWZ-aOc_G2sxi_M.roa (raw, json)
Hash identifier: HAVwaCjd14EgaWgdziBSkLSN4X8qXlBdod3KOEybkg8=
Subject key identifier: BB:4C:BE:BF:57:C7:26:3B:05:B9:66:7E:68:E7:3F:1B:6B:31:8B:F3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C69B95176315C411247E28EA466DCCC3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u0y-v1fHJjsFuWZ-aOc_G2sxi_M.roa
Signing time: Fri 06 Sep 2024 09:12:50 +0000
ROA not before: Fri 06 Sep 2024 09:12:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:9b:95:17:63:15:c4:11:24:7e:28:ea:46:6d:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 09:12:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4cbebf57c7263b05b9667e68e73f1b6b318bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:cd:e6:da:ea:cf:05:4c:09:d0:da:d3:b2:
76:9a:47:69:a1:d1:0c:7e:11:96:da:02:5f:a7:85:
93:d4:a8:76:31:29:07:bb:91:cd:fb:f8:9b:63:e7:
58:4f:7b:8b:81:1b:46:b2:2a:b2:ed:05:e9:c2:05:
dc:fe:f2:de:9b:c3:6a:5a:a6:9d:5c:61:1a:43:31:
96:76:ea:3d:29:6e:7d:4c:9d:30:e8:dd:8f:a9:69:
c7:28:8f:27:e6:f2:10:7b:19:94:fd:e5:e7:30:65:
f1:53:00:f3:e5:84:85:2c:56:30:02:e6:fc:2e:f8:
45:33:37:ef:c9:c8:26:8d:10:4f:35:bd:25:6f:6b:
b0:64:da:37:1a:64:42:4d:0c:c3:f8:36:61:9f:7a:
d1:f0:84:0b:5d:95:8f:a3:c2:3f:3b:10:10:d0:69:
1e:8b:85:8b:fd:dd:44:7e:a9:cd:dd:d5:63:50:0a:
a5:94:0b:5e:f4:cb:ba:29:50:7b:e2:85:cd:5b:8a:
36:39:f0:7d:a7:7a:d7:00:37:32:8f:af:ee:23:d3:
29:5b:de:a8:2c:31:0a:54:fb:a3:39:93:27:bf:36:
8a:8c:11:d8:27:81:79:a3:49:5a:6f:f6:ec:4d:55:
4a:b9:38:d3:0c:11:f2:d1:25:83:f2:7d:f2:de:ba:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4C:BE:BF:57:C7:26:3B:05:B9:66:7E:68:E7:3F:1B:6B:31:8B:F3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u0y-v1fHJjsFuWZ-aOc_G2sxi_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
65:e6:3d:6b:b2:20:52:7f:9d:93:95:d7:61:52:33:65:d0:fd:
f7:57:29:74:3d:14:f7:0c:62:af:dc:fd:1e:0b:ac:e9:48:30:
30:a1:62:63:87:92:4d:51:2f:c0:c9:8d:c4:1c:93:45:21:24:
9f:67:8a:cb:17:0d:f1:d6:8c:22:89:9b:e6:91:5d:95:06:3e:
41:be:3a:8c:50:4b:e0:22:6f:05:85:4d:b4:2d:30:6e:c2:40:
de:d2:89:a2:9d:8e:5c:1a:31:e3:03:dc:ff:d0:e6:78:46:6b:
1b:44:8b:d7:d0:22:63:2d:03:e7:2c:fb:f7:3c:ba:2d:e5:d0:
e1:11:c5:09:68:4b:f8:b0:00:1e:9a:63:bf:8c:56:7f:ff:3a:
c1:a2:f0:bf:34:2e:1d:61:18:24:e7:1c:6b:21:9d:4d:23:29:
d8:dd:53:79:07:5d:3c:4f:6f:02:34:d8:81:0f:f4:3e:74:9e:
c5:f0:2b:27:18:de:a5:2c:bd:2f:b7:ec:e9:b0:6f:a9:4d:69:
59:9a:c6:90:57:2d:32:54:af:b5:30:fd:45:2b:09:57:33:b0:
0c:64:1d:90:8d:7e:ee:5c:7f:f1:e6:73:3c:ee:7c:68:b1:5e:
65:2c:90:c6:da:46:92:c6:b9:d5:d4:50:16:97:82:66:98:13:
dc:5b:f7:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:20:34 2025 by rpki-client