Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yM3HqyQNtXX9L7VAxL5oKC5zHLc.roa
File: yM3HqyQNtXX9L7VAxL5oKC5zHLc.roa (raw, json)
Hash identifier: N0ennXMRXhE7Nyj1bc2pBJ3fDHMT+Kbd2oK7UuKHCqc=
Subject key identifier: C8:CD:C7:AB:24:0D:B5:75:FD:2F:B5:40:C4:BE:68:28:2E:73:1C:B7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914BA7E34242367E94577E185041CD612E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yM3HqyQNtXX9L7VAxL5oKC5zHLc.roa
Signing time: Tue 13 Aug 2024 12:12:59 +0000
ROA not before: Tue 13 Aug 2024 12:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:a7:e3:42:42:36:7e:94:57:7e:18:50:41:cd:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 12:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8cdc7ab240db575fd2fb540c4be68282e731cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:3d:d4:0d:c6:55:12:40:60:f0:42:1f:34:
d0:5b:3a:80:e7:da:52:3b:29:51:b3:92:41:15:55:
05:19:7f:2b:93:b3:d1:ae:75:5e:3c:05:25:a7:39:
d6:92:81:53:8f:95:fc:f9:d5:b9:b3:ce:6b:1d:b6:
f5:37:ab:18:ef:44:67:13:be:9c:13:b5:1f:32:63:
4a:fc:df:57:b1:c7:27:eb:8c:8e:23:4e:d5:bd:9c:
ff:49:1b:b0:a9:77:3d:49:86:c7:c1:e7:64:99:11:
2d:89:04:a7:8c:aa:cd:5b:3d:4c:63:2f:6a:dd:f0:
2f:29:74:05:16:6d:86:31:a7:aa:2c:05:8f:ba:82:
96:24:58:28:86:71:89:ab:e7:c8:d5:b3:0b:bb:ff:
64:d4:d3:6b:f5:9f:00:a2:77:1b:fd:82:2b:e1:59:
c7:cd:0d:61:f8:6c:b7:fa:82:5d:80:0e:9b:7f:32:
21:39:6a:74:d4:19:eb:08:e9:f1:ba:2a:bc:fe:84:
18:38:b2:bd:21:17:79:a7:26:b3:83:24:4d:c8:a5:
df:23:e8:e6:a0:46:46:6f:c0:2f:82:a4:3e:26:18:
59:04:af:d5:91:6d:d7:d5:4e:17:28:b3:e8:3c:14:
45:28:4e:9b:a0:af:93:bd:34:3e:0b:01:3e:21:8e:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:C7:AB:24:0D:B5:75:FD:2F:B5:40:C4:BE:68:28:2E:73:1C:B7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yM3HqyQNtXX9L7VAxL5oKC5zHLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
66:6b:e7:ed:01:af:e4:56:b0:2d:35:b8:57:8a:26:95:bf:50:
e5:13:01:93:e0:4f:40:5b:cd:dd:0c:86:3b:f8:34:29:61:ad:
39:c5:77:3b:a4:a1:ae:a5:e9:9f:ad:e1:22:25:2d:aa:85:07:
9e:3f:78:9b:c9:78:65:77:c1:b2:a1:a3:4b:66:df:40:06:2d:
d1:37:e9:58:7f:7d:c5:63:73:66:50:d3:bb:5f:b9:cc:d0:d7:
93:65:98:23:b5:0a:84:91:ce:41:8f:78:0a:c2:42:1b:bb:79:
cf:05:cd:51:d8:01:b0:eb:aa:66:90:34:4d:e5:f2:93:a2:1e:
d4:c0:03:88:ad:71:3c:5a:8e:19:7a:31:67:9c:02:64:68:18:
53:63:03:0c:23:97:12:d7:7e:01:80:47:f6:5f:09:5c:ae:75:
92:44:69:9a:6c:6f:a2:9b:57:59:51:9f:6e:b4:21:94:73:9d:
a8:ad:79:ce:55:46:e5:c7:fa:5b:30:d4:a1:4c:84:ab:38:b8:
3a:37:1b:5d:e1:84:22:ad:9d:38:88:bd:6a:36:b3:5a:9d:b9:
94:2f:65:30:3a:2a:98:dd:36:f2:10:b8:df:52:27:f1:43:b7:
2c:dd:2f:55:43:e3:95:a8:f0:be:88:52:6e:50:cb:36:9b:e0:
a2:8a:ef:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:09 2025 by rpki-client