Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wO1arTCqb-WZZqmGi8OTL4D3GLo.roa
File: wO1arTCqb-WZZqmGi8OTL4D3GLo.roa (raw, json)
Hash identifier: HuYdvtLHpfsUU5b1CBOm8Q5ww6W4+NZczvFs0ybZa6Y=
Subject key identifier: C0:ED:5A:AD:30:AA:6F:E5:99:66:A9:86:8B:C3:93:2F:80:F7:18:BA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918E63319245AC3B77295DB53762AD00B5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wO1arTCqb-WZZqmGi8OTL4D3GLo.roa
Signing time: Mon 26 Aug 2024 11:12:31 +0000
ROA not before: Mon 26 Aug 2024 11:12:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:63:31:92:45:ac:3b:77:29:5d:b5:37:62:ad:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 11:12:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0ed5aad30aa6fe59966a9868bc3932f80f718ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:be:a1:d4:78:30:87:30:48:66:f1:ab:b0:9f:
71:5d:31:d4:62:0e:d2:07:82:3b:6d:09:95:f2:74:
6f:ca:d4:26:86:a2:59:6a:cf:77:c8:7b:d0:6d:7b:
39:f4:d1:fa:71:59:10:3f:a3:b9:3c:f0:40:de:aa:
cc:e6:e4:92:f0:e0:3e:3f:f0:1f:bc:c9:be:b1:c3:
db:41:70:68:91:33:b6:f5:ce:ad:15:32:c5:38:82:
04:1a:86:db:5e:88:ae:0c:bb:44:f3:4b:5a:3d:dc:
e1:68:21:3f:86:58:0d:7d:0e:bf:61:84:ee:7d:5c:
d8:4f:cb:84:a1:d3:87:95:26:1e:28:ca:89:a9:68:
4d:d3:c1:e4:4e:bc:23:31:bd:b8:88:db:f5:d9:31:
18:cc:e5:f4:db:b8:3f:2b:1c:18:69:04:b8:b8:2a:
90:68:29:98:18:07:a5:a4:26:aa:5b:5b:f0:44:b7:
e6:54:3c:b2:54:59:ff:92:60:9f:d2:ae:09:9f:d8:
03:27:15:ad:0f:2e:4f:06:40:a0:a0:a9:58:cc:a5:
1d:ba:97:8e:b6:ed:7a:43:5c:6d:b8:8b:31:19:d4:
4d:9f:8c:f6:bd:24:38:3a:fe:a6:c0:b7:8e:30:b8:
34:e9:e9:c6:5e:7b:0f:c0:22:8a:09:e1:eb:12:16:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:5A:AD:30:AA:6F:E5:99:66:A9:86:8B:C3:93:2F:80:F7:18:BA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wO1arTCqb-WZZqmGi8OTL4D3GLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
96:e7:3c:de:51:68:17:bc:df:ba:ef:bd:03:bd:25:c1:90:ed:
bf:45:1c:e7:c9:c1:44:9b:a8:68:a5:8b:96:4b:fe:11:6b:45:
55:10:f3:c6:e7:86:f8:3d:cd:36:ef:d0:eb:79:77:d3:df:6c:
22:5a:7a:7f:b7:ae:7d:dc:b3:66:64:e2:4d:60:ad:29:4d:ff:
ec:36:3e:2f:d0:55:bc:fc:54:59:86:4b:ef:20:74:36:0c:b2:
cd:b4:c4:7b:d3:66:ec:57:d2:e0:cd:26:d9:14:8d:bf:1a:36:
5a:49:d5:fb:0f:89:d4:14:be:14:33:d2:c3:25:e2:81:f8:8c:
2b:85:1a:0e:c8:38:77:f6:2e:cc:cf:ec:99:64:c1:d6:a2:ab:
bb:8c:47:33:53:fb:ae:39:63:2b:5f:b7:bc:42:83:e6:85:bc:
15:ec:a7:f3:ad:9a:6c:9a:92:7c:8a:d3:64:d5:ba:f0:2d:22:
57:e1:89:0b:f8:b4:d7:a4:fd:00:40:e7:c7:90:67:0b:b1:4a:
2c:03:37:ce:98:65:2b:8d:3a:cc:8f:a1:0a:7c:19:35:ad:c0:
33:5b:f3:34:ed:0c:e1:a6:76:d6:c7:92:50:7a:d6:16:22:cd:
40:91:4f:55:8a:a6:b5:11:b4:3b:32:43:a8:3e:1e:de:9a:75:
8d:74:d0:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:08 2025 by rpki-client