Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wHIay4d_8SbpNyRzem1hi5VEKq0.roa
File: wHIay4d_8SbpNyRzem1hi5VEKq0.roa (raw, json)
Hash identifier: 4/5XyeOUbZEqGmwNJfjlImUT/5ZWboDNkECW9v1h/mc=
Subject key identifier: C0:72:1A:CB:87:7F:F1:26:E9:37:24:73:7A:6D:61:8B:95:44:2A:AD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B681739A9CDD1CA8E99C1ED5199D3373
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wHIay4d_8SbpNyRzem1hi5VEKq0.roa
Signing time: Tue 03 Sep 2024 06:10:22 +0000
ROA not before: Tue 03 Sep 2024 06:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:81:73:9a:9c:dd:1c:a8:e9:9c:1e:d5:19:9d:33:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 06:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0721acb877ff126e93724737a6d618b95442aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:87:09:ea:e2:3d:0d:da:6c:c7:69:e6:ff:
56:b6:09:5e:f5:83:6a:fa:83:51:44:ca:25:07:0a:
be:df:06:f3:62:c5:8e:a6:2e:7b:fd:75:27:37:23:
30:61:2c:1d:57:00:7b:ae:30:aa:9d:de:f0:35:a3:
ee:4d:68:08:a2:ba:0a:da:5c:15:30:95:43:72:e4:
9b:9e:ee:b9:3b:86:ab:a2:2e:6d:2e:d3:b1:b2:a8:
6a:1f:f1:a3:d5:fb:75:e1:d8:d6:e2:44:1c:be:d7:
29:76:e4:35:72:f7:fe:f2:8a:69:12:ec:27:15:1f:
f8:d1:2b:b4:07:e4:9c:23:49:26:6e:a1:46:01:54:
98:b6:00:4e:c9:9a:d1:c8:db:87:9e:51:64:60:89:
c4:a2:42:c6:d4:13:2b:e0:ed:3d:1b:9c:e4:80:73:
9c:83:f7:e7:d2:7b:8f:65:85:d5:55:6b:73:49:60:
d8:39:18:d7:20:3c:f2:5f:a8:85:40:bc:e9:50:f2:
5a:19:54:50:34:b7:38:87:c0:61:9f:91:d5:60:b7:
15:28:38:29:cf:3e:0b:04:18:c0:b7:ed:b8:50:8f:
dd:06:f5:ae:c5:c1:fc:72:ae:2c:80:ae:e9:9a:71:
f8:61:0b:02:43:6d:ac:ef:de:18:f1:80:3c:6a:2d:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:1A:CB:87:7F:F1:26:E9:37:24:73:7A:6D:61:8B:95:44:2A:AD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wHIay4d_8SbpNyRzem1hi5VEKq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
6a:01:4b:c0:b8:03:0c:ba:4a:e9:eb:fb:bf:24:f6:8b:cc:e8:
00:37:a7:c4:f0:7e:a8:5a:46:14:70:6b:29:8a:ac:62:01:56:
0c:a5:c6:6f:cf:b8:09:0c:b3:de:cc:f6:5c:c3:75:fb:b4:91:
84:c5:a2:c6:88:5d:a8:6d:dd:d0:dc:49:4e:99:f4:83:30:60:
f9:74:4f:9b:d3:4b:e4:57:1a:cd:f8:de:f3:98:1b:bc:35:1f:
48:76:a9:6b:fc:dc:b3:a7:e6:cc:66:88:f8:c9:96:5a:27:c7:
0a:f7:3b:b8:26:62:5c:e4:b6:79:fc:58:70:ce:6c:c6:83:73:
39:90:5a:3f:67:5d:c7:d9:44:4c:d4:15:f3:67:64:6a:5f:bc:
a1:f1:85:b9:6d:26:37:81:22:ef:09:45:83:f6:ad:66:5b:4a:
4c:2e:4e:c4:f3:fa:5b:f4:db:3b:80:ed:82:16:ef:3c:b5:ed:
1d:c5:b0:71:0f:79:94:20:28:5f:29:e0:9b:c9:a1:5d:94:88:
63:3b:92:68:69:63:e7:b1:71:f2:3b:d1:d8:2a:da:bf:ea:56:
5f:f5:99:48:98:a6:0c:70:64:cb:07:f6:ec:17:26:42:34:57:
01:b8:18:97:14:9a:86:91:df:d2:aa:fa:55:76:90:3d:c2:50:
47:f6:f3:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:54 2025 by rpki-client