Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xwbEF7L28NuC5tgCQKAov6UNfKM.roa
File: xwbEF7L28NuC5tgCQKAov6UNfKM.roa (raw, json)
Hash identifier: 48fdqNGdfO37Apg7P5D/XJcfZVmf0zvRg0o+7GtmdMc=
Subject key identifier: C7:06:C4:17:B2:F6:F0:DB:82:E6:D8:02:40:A0:28:BF:A5:0D:7C:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193230D89697EA99AA947901B142565C99F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xwbEF7L28NuC5tgCQKAov6UNfKM.roa
Signing time: Wed 13 Nov 2024 01:05:09 +0000
ROA not before: Wed 13 Nov 2024 01:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:230d:4406/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:23:0d:89:69:7e:a9:9a:a9:47:90:1b:14:25:65:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 13 01:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c706c417b2f6f0db82e6d80240a028bfa50d7ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:9f:7e:7a:ff:27:dd:39:f9:61:18:be:51:
d6:bd:88:d3:ca:9d:89:6a:74:76:c9:36:f6:8b:aa:
2f:96:88:ad:54:ac:ef:58:13:06:7c:8b:d1:55:00:
dd:53:22:8b:22:c6:88:74:27:19:d5:45:8d:b4:f0:
d2:84:34:41:46:74:be:41:4a:0d:7c:42:61:49:60:
e7:3e:be:2d:7f:fe:5f:0b:94:ca:ae:31:f3:a6:4c:
35:d6:53:70:cb:e3:ac:60:40:66:81:07:9b:87:09:
e2:d6:94:80:c5:5b:7f:c5:ea:e9:ef:27:9c:63:f5:
82:28:2e:e0:b9:8c:cc:c7:e9:a9:fe:64:65:72:5d:
39:3a:b7:b1:cc:8f:16:58:0b:e8:ef:9d:04:a1:22:
5f:4b:82:e4:64:61:42:ae:5e:f7:6c:83:36:08:cc:
09:41:b9:5c:1b:29:79:01:b6:ed:e6:7b:ed:de:56:
95:50:12:6a:b9:5d:5c:4c:f7:81:10:e5:39:dd:b2:
c3:f0:52:13:62:c6:a8:09:9f:f8:76:be:66:fb:48:
58:27:2d:8b:bb:17:17:ab:7c:c9:cb:39:2a:b2:19:
cb:99:a5:d6:de:ba:9c:61:96:bc:49:11:81:05:b7:
ca:02:0d:b8:d4:f8:1c:1f:4f:11:8e:7d:5c:21:c6:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:C4:17:B2:F6:F0:DB:82:E6:D8:02:40:A0:28:BF:A5:0D:7C:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xwbEF7L28NuC5tgCQKAov6UNfKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:230d:4406/128
Signature Algorithm: sha256WithRSAEncryption
53:05:11:cc:9f:01:db:de:b0:dc:5a:a0:04:d2:1d:5e:20:5c:
3f:f0:fe:4d:02:9e:05:97:98:cd:1f:40:59:a8:35:20:54:f0:
7b:bc:31:d0:15:4d:70:c3:d0:c2:ac:79:12:ea:67:5b:73:a2:
a4:f3:e6:76:c8:5a:64:c4:9e:2b:c9:c0:68:99:df:c3:d6:84:
e5:c8:8f:ee:a6:59:8f:48:9b:17:67:01:49:1d:f3:70:18:a8:
5b:e0:17:e8:62:cc:80:7e:0e:47:20:7a:6d:24:c4:4d:b1:0f:
49:94:c6:f7:11:cf:99:28:dc:1c:3f:79:72:fa:2e:57:ff:92:
e4:b2:2c:4d:cb:46:be:11:2d:e5:e9:b2:26:7a:ca:b8:9d:23:
dd:97:a3:76:1a:93:c0:53:90:70:0b:b4:4a:52:c2:7e:56:50:
5b:76:b4:91:e2:c3:ae:bc:44:e2:7e:2b:8b:c0:ed:b5:8d:73:
f2:d2:c0:7a:70:6b:d1:a4:c3:75:19:b7:44:cd:dd:65:77:4d:
b1:6a:34:cf:7b:ec:0c:24:99:a0:aa:1d:88:84:76:6f:59:d3:
d8:26:01:bf:7b:98:16:a3:92:1e:0f:d0:36:67:4c:ab:9b:56:
34:3d:ea:52:e9:d6:37:31:ec:3e:4b:eb:bd:c7:ac:7b:89:2d:
ca:6b:fc:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:16 2025 by rpki-client