Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uQUH5qM9Q6YuG-kTcxKICcTflSo.roa
File: uQUH5qM9Q6YuG-kTcxKICcTflSo.roa (raw, json)
Hash identifier: ZCKwrTFck1zrZchYrj9zAkMD+rCRDjIcm1VnzMfO20E=
Subject key identifier: B9:05:07:E6:A3:3D:43:A6:2E:1B:E9:13:73:12:88:09:C4:DF:95:2A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01937E766A62342893E9B08824736B4A3119
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uQUH5qM9Q6YuG-kTcxKICcTflSo.roa
Signing time: Sat 30 Nov 2024 19:05:09 +0000
ROA not before: Sat 30 Nov 2024 19:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:7e75:8b63/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7e:76:6a:62:34:28:93:e9:b0:88:24:73:6b:4a:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 30 19:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b90507e6a33d43a62e1be91373128809c4df952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:01:bc:e1:bb:df:1e:fa:39:6f:ac:09:f9:
ff:e5:7a:cf:b2:68:e8:fd:90:42:f3:dc:ab:d9:80:
a7:70:37:e2:2f:a7:3b:d9:59:06:9e:c0:fb:b1:fd:
16:ca:de:9e:4b:21:fc:71:f4:ed:f2:6f:69:dc:08:
03:9c:0c:85:25:89:a9:52:97:39:17:62:11:ab:fd:
12:ab:f2:ee:7e:c6:d9:c8:cd:e7:9a:05:25:5b:77:
be:c6:cb:cc:87:43:f6:7b:fb:2d:fd:93:81:eb:47:
e4:52:ea:93:af:6e:0d:61:7d:e4:53:7e:0e:2c:dd:
82:7d:79:86:d1:13:14:bc:54:de:69:18:69:f4:f5:
41:4f:3a:d3:61:95:c4:a0:ae:5a:5c:86:57:28:e7:
29:96:1a:b8:d8:f3:64:d9:81:79:72:9e:2a:53:a8:
f4:c8:3f:cf:73:ee:1f:b2:66:54:63:e8:55:ba:4c:
02:e1:35:51:15:c7:f6:dc:06:c3:c4:d0:01:73:dd:
5f:d8:d6:2e:31:00:61:19:d6:75:45:41:f6:26:08:
a1:dd:d3:07:a0:05:aa:4e:ff:bb:53:b2:dc:46:33:
f8:11:91:6a:91:32:60:fc:65:6a:b4:ad:e5:3e:25:
83:6b:d8:83:b0:23:c3:22:dd:69:7c:6e:38:79:25:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:07:E6:A3:3D:43:A6:2E:1B:E9:13:73:12:88:09:C4:DF:95:2A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uQUH5qM9Q6YuG-kTcxKICcTflSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:7e75:8b63/128
Signature Algorithm: sha256WithRSAEncryption
61:23:ff:9a:9a:fe:27:5e:14:d1:05:78:b7:66:65:ee:a8:d2:
b3:63:1e:3d:11:53:96:2f:30:74:35:85:17:6c:53:c5:e6:3d:
1d:9e:3c:21:0c:44:b6:96:35:25:e0:b3:4f:de:df:cb:f3:6a:
95:57:b5:94:17:55:0c:5b:46:53:e4:67:4c:c8:ac:3c:70:99:
0d:03:dd:48:28:fd:ca:8e:7e:50:47:95:bf:3a:94:ef:1f:40:
c8:cd:06:72:88:30:4b:08:8e:21:a5:3f:29:cc:5e:79:1b:ec:
d7:dc:15:03:52:24:aa:f3:42:7d:7b:0d:41:86:36:3b:6d:e2:
b2:d4:a7:d0:63:f1:ed:5b:ff:92:19:4d:b8:3d:ea:fe:3c:31:
2a:3e:32:cc:4d:bb:69:b1:9e:38:72:ad:7f:87:91:fe:41:e2:
d6:2d:85:51:1d:cd:61:9f:15:2c:d5:f5:49:16:d9:ec:75:82:
6c:68:a2:86:75:90:7f:71:0c:7b:77:f8:e8:81:3b:32:83:ba:
31:67:45:0f:71:b0:91:79:2a:c9:4a:41:0e:f8:2d:75:72:44:
11:1f:65:3a:b4:5e:ed:28:52:38:b9:d6:0a:29:0a:14:d4:9f:
6a:c5:a1:34:bc:72:de:15:c0:16:5f:82:76:7d:14:02:a2:48:
1a:09:17:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:35 2025 by rpki-client