Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u8kh_SLnT_p95EX-CbVj2NexyFo.roa
File: u8kh_SLnT_p95EX-CbVj2NexyFo.roa (raw, json)
Hash identifier: qtOJYi4D/ATiMaNZGomwnxnsGOyST84SjVNS5Di191E=
Subject key identifier: BB:C9:21:FD:22:E7:4F:FA:7D:E4:45:FE:09:B5:63:D8:D7:B1:C8:5A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019115C960BF2A242D3156E9766C8CD1EAA5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u8kh_SLnT_p95EX-CbVj2NexyFo.roa
Signing time: Sat 03 Aug 2024 01:10:04 +0000
ROA not before: Sat 03 Aug 2024 01:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:15:c9:60:bf:2a:24:2d:31:56:e9:76:6c:8c:d1:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 01:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbc921fd22e74ffa7de445fe09b563d8d7b1c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:ae:23:5b:54:cc:56:ed:8f:ee:2c:43:ff:
a2:be:f1:7e:b8:03:b0:24:bb:90:20:b0:21:56:18:
73:dd:81:02:88:36:5e:e9:7e:37:37:78:79:77:de:
c9:a6:bf:b7:04:17:27:59:e9:05:fd:2b:c2:45:ea:
0a:29:4e:36:50:17:28:5d:ea:a0:90:3f:8a:7b:e4:
b8:0f:cc:87:35:9f:61:d8:92:30:85:c1:f8:1b:ee:
b6:c6:bd:75:e8:84:23:0f:4f:cd:ce:a4:a8:ee:da:
e1:80:7b:7a:89:11:fc:22:1b:39:5f:00:a0:98:39:
94:2d:2a:e3:10:8e:f4:08:ad:e6:a4:ae:71:8d:bd:
f6:92:45:df:3a:54:b5:33:97:97:1a:85:c3:9b:36:
f6:b4:41:2e:22:a7:bc:c6:c7:11:13:ee:d3:eb:a1:
11:f1:10:4f:69:e4:c0:30:24:3b:8d:52:15:72:12:
c8:d9:e1:0f:4c:f1:c7:a5:9b:ec:d8:79:47:35:cc:
58:e8:17:29:e7:8a:65:75:aa:4d:20:67:1a:c2:c6:
a6:04:15:77:8a:96:9f:2b:03:52:26:66:9a:13:62:
8a:b0:f0:c6:0e:2c:77:11:84:4c:cd:4c:a8:a6:77:
b1:2f:a3:fb:ff:15:e7:ff:f5:53:36:88:94:62:17:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:21:FD:22:E7:4F:FA:7D:E4:45:FE:09:B5:63:D8:D7:B1:C8:5A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u8kh_SLnT_p95EX-CbVj2NexyFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
76:b9:9c:fa:bb:4c:d8:cd:af:55:e0:0e:7e:6f:5f:96:7a:d3:
70:06:fa:3a:10:4b:9d:5b:94:25:0f:ac:b2:e9:3e:30:4a:0e:
a0:35:f3:fd:31:f2:6f:c9:b4:3f:5c:86:45:71:27:3e:c4:8e:
b4:62:e7:ab:6d:d3:8a:03:79:e8:f8:fd:25:00:d4:81:e5:15:
29:e7:c7:93:1d:81:1c:91:57:cb:89:39:19:c8:c5:e1:44:e0:
47:64:ce:84:d9:03:14:b7:3c:b2:e2:22:e3:ec:a7:44:2d:be:
12:69:6e:ca:c9:df:de:80:bd:91:33:99:0a:c7:44:54:29:4a:
8e:72:79:3a:0e:03:8e:87:ec:bf:cc:63:5f:0c:7e:89:5f:ae:
58:91:ae:ea:1d:05:3b:a8:e0:e3:9f:f7:94:7d:b9:50:a7:10:
fc:50:67:75:6d:dc:ba:b2:b3:f2:2b:10:69:08:6d:24:92:fa:
2c:16:49:2f:21:c9:93:08:5d:1c:22:a4:e2:48:51:cc:c9:f0:
85:7e:c3:8f:3c:49:58:30:34:ad:8d:fb:ec:c3:f8:86:1b:ac:
d5:28:54:07:75:2c:9c:7a:34:1c:12:96:4e:86:b3:89:06:a7:
dd:27:f9:5d:04:ef:ed:72:91:8c:18:a3:58:8e:36:aa:d4:f7:
74:bf:9d:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:22:37 2025 by rpki-client