Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xHcjINP42xUjYXI_7CcXKuA8sfI.roa
File: xHcjINP42xUjYXI_7CcXKuA8sfI.roa (raw, json)
Hash identifier: dyE1KciYd/OyXq7Ynq/kgwFnrxRC1rHoZNm+v0lFuGE=
Subject key identifier: C4:77:23:20:D3:F8:DB:15:23:61:72:3F:EC:27:17:2A:E0:3C:B1:F2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945954B6A4890867A361F264987D4B04B3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xHcjINP42xUjYXI_7CcXKuA8sfI.roa
Signing time: Sun 12 Jan 2025 07:05:11 +0000
ROA not before: Sun 12 Jan 2025 07:05:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:5953:e8ff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:54:b6:a4:89:08:67:a3:61:f2:64:98:7d:4b:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 07:05:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4772320d3f8db152361723fec27172ae03cb1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:53:76:0f:6e:cb:a9:ed:fe:2c:47:89:c9:
cc:87:99:d0:e4:e3:79:a2:ae:52:67:97:26:06:39:
53:bf:a2:45:d5:32:5d:10:3c:4b:56:2c:eb:14:28:
45:0b:28:9a:48:07:e4:5f:3d:09:ce:4a:3d:8f:e0:
8b:bf:30:f5:97:cf:0d:a0:24:56:70:f8:7d:a6:f3:
80:00:fd:c3:00:6c:36:32:10:78:fe:76:9a:5d:01:
4a:3e:78:e0:72:1d:25:83:26:92:39:8e:c2:d8:e7:
95:43:63:d1:70:3f:b0:29:e1:80:71:b9:d1:59:e3:
0a:c8:3e:e9:75:ed:50:79:3c:dc:a8:ca:b2:18:7c:
4f:22:73:e4:02:ab:71:22:30:98:8d:85:0b:c0:0d:
bc:44:32:4c:59:af:d0:89:73:99:e5:c5:ae:ce:c7:
16:92:ff:31:5f:cd:c4:6c:33:67:70:86:d0:0f:e5:
e4:cf:50:d9:f0:4f:92:50:1b:f8:c6:19:57:27:49:
59:96:fc:d4:c1:a3:3b:64:e4:bf:ad:15:5c:e2:e4:
80:75:1e:68:74:b5:ba:ca:42:e6:af:37:68:bf:34:
c4:4c:8e:92:ec:25:03:66:88:1e:f1:9c:45:5c:f7:
d8:ce:24:1a:a2:14:7f:0b:70:99:e3:3c:41:fe:3f:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:23:20:D3:F8:DB:15:23:61:72:3F:EC:27:17:2A:E0:3C:B1:F2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xHcjINP42xUjYXI_7CcXKuA8sfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:5953:e8ff/128
Signature Algorithm: sha256WithRSAEncryption
3a:36:a3:d9:72:25:01:89:52:09:f0:d1:4a:b6:cc:5a:ee:a4:
f0:6a:a2:37:75:9d:ca:82:5b:40:1f:73:ba:31:db:8a:64:f9:
f0:c3:c2:8e:9f:af:ab:cf:8e:85:83:54:34:7a:4f:fa:3a:8f:
db:d3:c9:a5:cf:70:4a:31:4a:da:14:d8:df:12:7a:a9:f5:c9:
4d:e1:34:da:ed:6f:6d:f1:9d:e9:ea:4c:d6:e3:68:d1:fc:e7:
79:3e:a4:98:5e:a8:a6:00:11:3d:57:a4:35:95:f5:e4:f6:2c:
1e:c4:ec:b1:c1:d1:4d:fb:8b:f9:3e:b2:f8:3b:26:e6:4f:b7:
63:c9:12:1b:0b:9f:7e:90:03:c2:dc:1d:83:32:ee:bd:b1:b3:
87:d3:e9:e9:19:24:bd:de:48:70:7c:aa:1f:4e:bd:12:b4:69:
2a:69:2c:41:41:5b:0c:57:d7:ab:46:a3:90:38:9f:f9:da:5e:
ae:3d:2c:2b:a4:5a:24:21:7f:7b:46:a0:0b:e2:a9:03:7d:09:
86:aa:51:eb:42:2d:94:eb:b7:d4:c3:79:69:2e:88:c3:dc:97:
04:ee:db:fa:cd:98:9c:b7:9c:6a:ae:12:26:ea:b0:0e:47:03:
05:f9:a6:5b:03:4b:2b:a0:7b:d0:0c:99:6a:5e:f2:8d:23:d1:
3c:14:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:27 2025 by rpki-client