Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ulC3jtS-keYDUZatAX2DxO-dX8I.roa
File: ulC3jtS-keYDUZatAX2DxO-dX8I.roa (raw, json)
Hash identifier: QPd3PfRjBKVirEr34ezMg3TwSuys//jm60KB6zxVOFk=
Subject key identifier: BA:50:B7:8E:D4:BE:91:E6:03:51:96:AD:01:7D:83:C4:EF:9D:5F:C2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019366A501E61477287B1FB8BFF452977B65
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ulC3jtS-keYDUZatAX2DxO-dX8I.roa
Signing time: Tue 26 Nov 2024 04:05:10 +0000
ROA not before: Tue 26 Nov 2024 04:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:66a4:43bf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:a5:01:e6:14:77:28:7b:1f:b8:bf:f4:52:97:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 26 04:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba50b78ed4be91e6035196ad017d83c4ef9d5fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:91:cb:9a:25:73:6c:59:f0:91:7e:1f:64:
0a:63:46:50:09:75:6d:c2:0a:df:43:62:c1:f6:6d:
85:d0:a6:02:17:84:4c:88:fb:2d:09:63:2d:9a:c3:
39:42:d4:36:1b:1b:b5:b6:fb:c7:8a:a0:84:eb:f6:
23:9d:4f:f3:a1:5b:d2:eb:c0:46:35:44:28:27:96:
d0:a0:4b:42:f3:da:6a:0a:cf:bc:1e:99:82:ed:4b:
f8:2e:0e:ba:c4:2e:eb:9f:fe:10:ff:b9:03:28:13:
db:16:4d:c5:77:e2:5f:56:ea:e1:98:7c:fd:9c:90:
54:46:80:82:69:4f:3f:89:75:e2:58:4e:0a:e7:5e:
89:59:34:3f:58:dd:4f:1e:d8:c7:5f:d2:d4:eb:5c:
a5:82:40:e8:ec:81:b4:cd:63:bd:2d:ac:f8:84:c7:
8c:08:b4:b3:a8:1a:30:d6:ea:96:3c:7d:27:15:48:
0b:51:c1:c7:7e:8b:2f:9e:2d:90:06:fa:3c:30:a6:
0e:e2:4b:fe:bc:a9:a8:3a:c2:fc:b9:89:b3:4e:33:
37:fc:73:dc:fe:17:9c:a8:d9:e8:cc:9b:98:57:d9:
a2:fa:92:7e:d4:fb:b2:2b:c8:56:dd:1d:f3:ea:b9:
03:b5:2d:c8:44:d2:dd:e7:f0:78:65:d9:3f:88:1e:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:B7:8E:D4:BE:91:E6:03:51:96:AD:01:7D:83:C4:EF:9D:5F:C2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ulC3jtS-keYDUZatAX2DxO-dX8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:66a4:43bf/128
Signature Algorithm: sha256WithRSAEncryption
1f:82:bd:ab:4e:a6:a1:48:06:72:ea:18:1d:fa:9e:32:81:32:
ac:5f:a4:c5:98:cf:69:c0:7d:e3:45:46:fa:69:e9:e2:24:e9:
b8:0b:79:31:a5:0e:51:ac:1e:74:89:99:fc:e8:3f:ca:55:8a:
82:6f:fc:01:04:96:c2:42:0f:2f:75:bf:98:7c:f7:d6:a9:4a:
e3:11:9f:77:de:4f:9d:66:c1:1e:92:d1:2a:c6:9a:25:f1:03:
58:77:b2:5b:2e:65:cf:77:01:68:02:45:c1:c7:71:13:f5:b5:
a0:17:d3:a3:bc:81:30:58:9a:f8:00:e6:0f:2a:2e:6c:36:b2:
6c:50:83:73:a4:84:d2:d2:17:41:f7:ca:e4:44:0b:fc:24:9b:
c0:a7:dc:24:d7:df:16:92:09:36:57:04:8a:e4:75:3a:d4:6e:
18:69:41:06:86:02:1d:e0:2e:e9:ef:fd:f6:68:9b:a1:c8:c8:
fc:3f:b3:fc:92:cc:17:16:dd:ec:44:8e:04:43:b4:72:43:8e:
77:07:49:81:9e:97:d8:ab:16:cc:b8:67:b0:01:63:2c:76:c0:
78:60:a6:3f:b8:21:1e:fc:f9:5f:73:12:06:1b:a7:47:77:db:
07:f6:e8:fb:20:28:59:39:40:16:7c:66:22:7f:4c:b7:09:d9:
dc:b8:52:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:37:21 2025 by rpki-client