Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yJvE7wTKhPjL_bUvHLb8wpmQLyc.roa
File: yJvE7wTKhPjL_bUvHLb8wpmQLyc.roa (raw, json)
Hash identifier: r73dDL30fui5Lwy9yFQUuNrS0InOCdqCZ3nhZO9dDEU=
Subject key identifier: C8:9B:C4:EF:04:CA:84:F8:CB:FD:B5:2F:1C:B6:FC:C2:99:90:2F:27
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191ADE6B1433DEC3BB8BE1187F933A0736F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yJvE7wTKhPjL_bUvHLb8wpmQLyc.roa
Signing time: Sun 01 Sep 2024 14:04:22 +0000
ROA not before: Sun 01 Sep 2024 14:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:ade6:a824/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ad:e6:b1:43:3d:ec:3b:b8:be:11:87:f9:33:a0:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 1 14:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c89bc4ef04ca84f8cbfdb52f1cb6fcc299902f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:dd:e3:6a:96:76:5e:e8:01:8f:02:1e:24:
e8:51:ee:62:d4:3f:8d:b2:e4:68:79:9d:5a:6c:e6:
5a:bd:9e:d4:eb:23:bd:ae:25:51:42:91:55:7d:50:
be:82:85:6a:39:08:38:f6:55:3f:56:fb:e9:0e:48:
2f:e1:7e:2a:58:8e:db:71:42:ca:4a:36:26:e4:cd:
61:2e:02:14:ad:2a:8d:65:5d:3b:8d:33:c6:1d:31:
10:c8:fb:f4:78:0a:74:a5:7a:5a:07:45:00:c4:6b:
69:fb:d0:b8:74:c4:2d:96:13:8c:f0:a4:74:5a:74:
88:69:d4:e2:66:38:fc:12:59:77:9f:43:3b:e5:3f:
70:c3:65:c8:04:e3:28:6c:f8:ef:5a:66:9b:96:f6:
b7:81:eb:91:ea:74:4a:17:d9:fa:e0:2d:7c:ca:53:
be:b3:c1:27:24:96:d8:a0:cc:91:8a:fc:f5:6a:9c:
15:42:ec:cf:26:a0:50:3a:35:09:5d:08:12:a7:dc:
32:2c:6f:5f:33:c4:17:67:e1:76:24:36:69:02:b4:
76:53:b0:5e:d9:7a:13:02:26:5b:31:39:7d:8d:52:
9f:a6:e7:77:7f:89:30:de:17:72:86:41:81:79:6a:
de:45:2a:b7:e2:e9:a6:2d:48:89:82:f7:8b:d6:6f:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:C4:EF:04:CA:84:F8:CB:FD:B5:2F:1C:B6:FC:C2:99:90:2F:27
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yJvE7wTKhPjL_bUvHLb8wpmQLyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:ade6:a824/128
Signature Algorithm: sha256WithRSAEncryption
07:1e:47:ed:3a:58:56:43:cd:f4:bb:a1:a9:d2:ae:df:6b:a5:
ed:9f:25:2f:53:67:0b:ac:ec:74:a1:51:73:ab:d5:c5:d9:c5:
d4:5b:cd:5c:0d:01:81:a3:e2:5f:0c:6f:20:06:7a:38:1e:8d:
34:f0:aa:bd:ac:29:44:f9:5d:ae:fd:c7:af:61:aa:41:e1:cb:
9d:fb:f8:d2:fb:3e:ee:9c:04:7f:e0:6f:6e:4f:a4:b5:07:c6:
e2:35:76:2d:40:10:b4:bc:b4:e7:39:25:71:e7:1c:25:15:67:
02:93:5d:f7:0d:be:b5:e6:de:2b:c7:21:49:45:80:50:98:e1:
22:57:54:4d:e4:9b:e4:9d:5f:57:b0:34:0b:26:38:23:05:b0:
31:c2:5e:05:3a:18:cb:19:df:e9:a6:a4:be:3b:31:86:b8:b0:
69:be:72:f9:d8:2c:33:fc:ad:83:f4:a8:6d:e9:16:7d:7d:6a:
22:7c:78:cc:93:df:be:97:e2:d6:cf:45:ea:78:61:86:90:70:
1a:ad:e2:6a:ca:2a:f8:6b:64:e6:5f:24:9c:07:de:87:c7:d6:
ba:a0:11:22:e6:53:94:35:00:d8:7c:e4:01:82:5f:78:5b:8f:
8e:64:c4:28:34:34:c5:33:bf:82:61:6c:c0:17:f0:6d:41:db:
9b:03:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:48:32 2025 by rpki-client