Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w8RcKp7re1Sx1n2P2JOhRywMJ1M.roa
File: w8RcKp7re1Sx1n2P2JOhRywMJ1M.roa (raw, json)
Hash identifier: V3QJS7Q42M3UMjzmha3zmfb7etaoERhjee2a4s27ewY=
Subject key identifier: C3:C4:5C:2A:9E:EB:7B:54:B1:D6:7D:8F:D8:93:A1:47:2C:0C:27:53
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019449E569D9FAD84307EA5203F1B6384489
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w8RcKp7re1Sx1n2P2JOhRywMJ1M.roa
Signing time: Thu 09 Jan 2025 07:09:19 +0000
ROA not before: Thu 09 Jan 2025 07:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:e5:69:d9:fa:d8:43:07:ea:52:03:f1:b6:38:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 9 07:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c45c2a9eeb7b54b1d67d8fd893a1472c0c2753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:65:34:61:4b:05:2c:a2:cb:e3:ad:21:b3:
e3:5d:fd:07:10:8e:a1:25:53:f6:a0:0f:47:f6:fc:
ce:79:d8:d7:d9:28:83:13:b5:f7:42:37:fd:a4:b3:
ea:0f:57:ae:66:5c:ec:2a:47:98:a3:5b:be:0f:9b:
1c:4c:76:62:ad:b1:52:38:9a:d2:49:63:a1:fe:d3:
35:19:12:7d:e4:a5:1d:8f:db:8d:43:d7:1b:c8:cf:
cb:b6:1f:54:b6:9f:86:5c:78:a9:f5:db:71:e2:42:
1e:9d:e3:64:7b:c0:5b:8e:3e:e0:9d:99:c9:7d:bb:
d8:0e:87:7d:10:98:ef:8b:45:50:89:7f:fe:05:7f:
82:a1:27:69:61:78:66:e3:01:ec:04:59:3b:53:c8:
d0:ad:d4:37:eb:1f:15:64:5b:52:4f:af:5d:2c:c1:
fe:4d:c8:6a:9e:d7:9f:cf:9d:a1:7f:38:8e:26:18:
57:cd:a1:01:5d:3b:77:a7:f3:0d:1e:37:19:d3:74:
fd:81:16:e5:c4:8c:b9:4f:97:c4:a4:d7:aa:99:00:
c7:d4:2d:cf:a2:40:19:4e:60:9a:b7:31:ac:1e:ee:
00:4a:5b:63:7c:11:ab:9c:38:63:12:44:cd:c4:f7:
8c:7f:94:4c:7b:84:65:00:af:3e:74:4b:01:79:ef:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:5C:2A:9E:EB:7B:54:B1:D6:7D:8F:D8:93:A1:47:2C:0C:27:53
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w8RcKp7re1Sx1n2P2JOhRywMJ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
3b:17:eb:25:75:1f:80:1d:a6:a8:f8:35:31:63:dc:57:97:a6:
68:bc:1b:7b:38:71:22:a5:f1:b0:66:f9:28:71:db:11:43:fd:
2b:fc:c1:d5:ca:4c:2a:ac:91:6d:42:30:ec:09:1d:4a:23:6e:
57:91:28:85:63:7f:eb:57:19:bd:b7:6f:92:14:90:22:1e:0f:
a8:6c:6a:19:a6:51:94:c4:44:af:cf:b5:10:35:57:c2:e4:51:
b4:da:4a:33:84:60:6b:67:72:c6:26:c9:3b:a9:82:e4:5d:60:
d2:e8:59:61:82:f5:21:95:21:8d:18:e1:32:eb:d2:1c:1a:f6:
d0:4e:77:00:e8:5b:03:03:1d:1d:cb:cf:27:66:06:fc:46:c0:
b6:07:55:13:24:66:80:fd:f7:d0:d5:c4:77:6e:cb:46:25:af:
2b:ef:f7:61:e9:13:0a:12:6a:91:71:91:df:58:c6:c6:15:8a:
88:d2:f5:bf:f3:da:c9:2d:ef:82:16:1c:36:8b:4f:9f:df:59:
9c:7e:26:bc:8f:8d:94:fd:b4:49:86:b1:66:ac:78:7c:5b:14:
24:94:5a:14:95:6a:fc:c5:46:17:cf:c1:81:f8:0a:e0:de:21:
d4:6e:d4:44:1f:51:7e:37:6e:de:b3:3f:04:6f:ad:84:f9:2a:
34:f0:8c:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:31 2025 by rpki-client