Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yuWD64ssG9XmPqhmbOkhgw3PLXc.roa
File: yuWD64ssG9XmPqhmbOkhgw3PLXc.roa (raw, json)
Hash identifier: LtOhRE7+iD1WcC72433pPXKpsEYIj3rFL2NpN+qGH14=
Subject key identifier: CA:E5:83:EB:8B:2C:1B:D5:E6:3E:A8:66:6C:E9:21:83:0D:CF:2D:77
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01933F97723EF0AA578AB6E81646B3D7DEFA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yuWD64ssG9XmPqhmbOkhgw3PLXc.roa
Signing time: Mon 18 Nov 2024 14:05:09 +0000
ROA not before: Mon 18 Nov 2024 14:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:3f96:a252/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:97:72:3e:f0:aa:57:8a:b6:e8:16:46:b3:d7:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 18 14:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cae583eb8b2c1bd5e63ea8666ce921830dcf2d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:27:62:5c:7e:3f:07:a9:6f:8d:2f:55:5c:
64:85:9b:f5:6a:59:c4:14:5c:22:4a:63:a1:5e:4a:
bc:30:8c:a5:32:89:92:95:5b:dc:b6:ec:f9:ac:e7:
35:b4:aa:7b:24:ce:43:f9:2c:79:39:12:49:21:ec:
07:9e:9d:db:d7:b7:e7:06:aa:be:62:c6:13:a9:8f:
2c:17:f2:a5:6e:e9:6f:a7:e6:5e:51:32:a6:44:dc:
2e:06:5f:4e:f5:40:56:f1:44:0f:9e:33:a3:7f:62:
db:12:da:8b:4b:4d:27:52:37:ff:ab:4a:48:26:86:
ef:86:68:a5:cb:17:64:63:4b:ca:9e:23:c0:67:b6:
1e:25:69:34:90:a9:7d:e1:1e:d3:bd:2d:70:54:ac:
4f:69:7d:4b:05:b5:ed:32:01:26:f0:08:8f:91:d8:
3b:82:f7:6a:e7:19:ba:63:bb:7f:33:38:2b:48:4e:
1d:35:ca:0e:71:37:2d:2e:a4:2b:5b:6b:b0:d8:7c:
44:83:60:ae:1a:ea:e7:27:7a:1e:54:2b:57:a7:13:
ef:d6:65:b9:7f:28:c1:33:b4:1a:b1:45:dc:49:bf:
59:1a:f0:2f:84:5a:7f:b1:57:f2:43:fc:74:fa:d6:
ec:fe:8a:55:b4:71:e7:17:d1:91:ad:e6:a1:2c:5b:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:83:EB:8B:2C:1B:D5:E6:3E:A8:66:6C:E9:21:83:0D:CF:2D:77
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yuWD64ssG9XmPqhmbOkhgw3PLXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:3f96:a252/128
Signature Algorithm: sha256WithRSAEncryption
93:22:33:fe:c2:00:8f:d7:7a:2c:76:a8:9a:8d:80:e2:3e:1c:
92:75:26:76:f1:8f:ee:c2:ee:35:b9:4b:d7:a2:aa:bc:79:a0:
c3:27:d7:ce:9f:c9:61:d9:3e:21:68:ee:23:dd:b5:d9:68:ec:
6a:cc:14:1f:49:c0:bf:60:14:fa:e6:16:5c:32:05:29:f1:2b:
df:d2:de:14:19:02:cf:92:ad:cb:cf:4d:79:7a:a5:3e:5c:c7:
5e:20:fd:8f:23:28:a8:95:f5:02:24:75:17:8e:0e:1e:9e:1e:
b9:59:37:53:b7:cb:d2:2a:b4:ed:49:c8:f0:29:1b:e1:34:b2:
3d:18:f6:a4:57:9a:1e:23:d4:9b:07:ea:70:d4:29:49:90:a8:
8d:01:db:5b:38:d8:23:9b:d2:65:67:9f:89:dc:d7:e6:08:41:
52:40:49:6a:47:df:ec:36:7a:f3:76:87:28:cc:77:3a:b0:76:
1e:fb:1d:6a:0d:b9:8f:d5:4f:0c:33:ec:88:f0:88:c1:5f:d0:
c5:ab:c4:0a:98:31:58:b8:d0:52:eb:b8:a7:8b:78:72:b8:b0:
39:cd:77:e3:0e:ee:07:fb:21:a7:0d:0e:29:a7:8c:4f:e5:cb:
06:ad:ad:c8:1a:c7:0f:ea:ce:8f:9d:11:9c:f4:4d:09:0e:e2:
5f:30:f5:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:46 2025 by rpki-client