Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w6hTiFWl_-qTVLT1ETUAwE04ve8.roa
File: w6hTiFWl_-qTVLT1ETUAwE04ve8.roa (raw, json)
Hash identifier: hL03XoJ/rSJMBwoK7v3+M22g6e7B32rIalGlo4ZTgD4=
Subject key identifier: C3:A8:53:88:55:A5:FF:EA:93:54:B4:F5:11:35:00:C0:4D:38:BD:EF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915704849DC638377CC33D127131E9C83D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w6hTiFWl_-qTVLT1ETUAwE04ve8.roa
Signing time: Thu 15 Aug 2024 17:09:59 +0000
ROA not before: Thu 15 Aug 2024 17:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:57:04:84:9d:c6:38:37:7c:c3:3d:12:71:31:e9:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 15 17:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3a8538855a5ffea9354b4f5113500c04d38bdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:28:2e:8f:0c:c2:9a:2d:4f:62:e0:1c:26:
57:93:6a:c4:7f:c7:dd:a6:97:aa:68:94:95:e3:39:
b8:b0:fc:ee:db:33:ad:e6:7a:4e:da:7b:46:cd:69:
90:66:ed:34:4b:9e:f9:4f:49:2f:6d:42:2f:60:49:
62:b3:55:2c:57:20:7a:54:e9:d2:3f:04:a6:43:55:
e1:cb:07:d6:09:cc:99:d3:d1:dc:03:e9:4e:d1:40:
de:48:4f:87:a7:5a:a8:89:93:a4:25:e0:6c:1b:be:
36:14:e2:8e:69:7a:79:d5:2f:23:37:bc:2a:5a:e7:
c9:f5:37:a4:b5:0f:e9:5d:a3:13:86:2a:a4:65:f0:
52:64:e7:7d:a7:0e:0f:c7:65:85:76:a4:80:09:7e:
c4:30:10:14:fc:89:29:ac:55:4a:5c:56:89:b4:8b:
a1:2e:23:a4:a5:19:a5:b8:20:d5:27:68:6c:27:c4:
4d:92:31:8a:b7:1d:8c:39:73:85:ed:b7:a4:d8:88:
36:d6:73:eb:6e:bb:a2:c8:bc:c2:6f:20:b7:81:c7:
97:17:cb:f7:a0:66:c1:f8:55:bc:6f:18:fa:c0:e8:
8c:e6:54:d9:06:52:0c:36:91:41:83:df:71:94:18:
22:a9:1c:99:94:9e:cf:22:99:a8:ed:c2:98:48:c8:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:53:88:55:A5:FF:EA:93:54:B4:F5:11:35:00:C0:4D:38:BD:EF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w6hTiFWl_-qTVLT1ETUAwE04ve8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
28:2b:0c:5c:a9:90:c7:4f:ca:bd:03:48:48:dd:82:ab:10:f5:
22:03:a2:08:04:7a:23:a4:26:81:b6:1a:5c:82:23:56:8f:02:
21:db:9e:82:ee:8e:22:79:3b:9c:ed:e1:5c:54:20:d4:a8:b8:
3b:cd:23:a1:b9:f0:4f:c5:b9:67:fa:08:83:30:39:5b:d3:c6:
1f:c1:63:37:0a:c0:39:6f:3a:90:6c:57:77:06:7f:22:59:90:
0d:bb:45:b0:37:69:d4:50:eb:cf:40:b8:3c:cb:e1:df:4d:63:
fa:8a:16:79:08:ec:d3:0f:d5:9a:23:16:fd:db:7f:42:72:4f:
8f:26:9e:4e:47:38:41:ac:54:3e:96:17:aa:1d:64:b3:f5:a7:
83:de:a1:20:19:e1:96:b9:b0:de:50:6f:6b:eb:87:64:13:f1:
c4:02:ca:d0:60:cf:f2:d9:bc:55:fd:52:bf:a9:d8:61:ac:f4:
fb:8f:d3:21:d5:c8:85:8b:70:9f:05:b1:11:a9:60:b9:2b:6d:
70:0f:2f:20:fb:15:ce:69:d5:0e:30:12:4c:43:c5:7c:d6:90:
35:3a:1b:7a:89:d9:a1:e8:5d:95:71:55:9b:00:79:f7:a0:e2:
3b:4b:30:fa:f5:a7:af:ab:e7:36:f5:01:43:29:55:60:37:d1:
7a:32:63:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:48 2025 by rpki-client