Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ywNrw983zPtfy3Izy7pkYCRKErU.roa
File: ywNrw983zPtfy3Izy7pkYCRKErU.roa (raw, json)
Hash identifier: R+mUtLrUATcYNk0jLPsUXi5rJGVGzwPfEgUNSYdTU20=
Subject key identifier: CB:03:6B:C3:DF:37:CC:FB:5F:CB:72:33:CB:BA:64:60:24:4A:12:B5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01913B8E9137B4A54B4DB341FC6EF55D19C1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ywNrw983zPtfy3Izy7pkYCRKErU.roa
Signing time: Sat 10 Aug 2024 09:11:24 +0000
ROA not before: Sat 10 Aug 2024 09:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3b:8e:91:37:b4:a5:4b:4d:b3:41:fc:6e:f5:5d:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 09:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb036bc3df37ccfb5fcb7233cbba6460244a12b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:01:35:14:ed:f3:b1:05:34:e6:d8:be:cb:
65:dc:87:38:9a:1e:15:20:da:01:d0:a8:96:63:e0:
0a:c7:88:e6:e5:b7:92:83:81:37:df:95:0c:e2:16:
f8:70:2f:b2:91:5f:41:cd:0c:71:f6:d5:d9:95:a9:
38:97:0e:f0:74:12:4c:cc:e1:00:4f:e3:03:d6:bd:
73:be:ec:b4:12:14:ec:02:55:4c:e4:f2:8c:c2:64:
7e:26:e0:ee:78:37:db:94:e1:4d:9f:86:4e:f1:f8:
3e:c6:68:0d:af:b5:52:fa:c7:ee:64:5d:28:92:04:
4d:4b:aa:4e:d3:1e:a3:4a:2a:a1:c8:42:ad:34:6c:
8e:d9:1e:62:5e:ab:02:4c:79:21:51:31:b6:e1:39:
8d:2f:96:e9:00:ff:f9:a9:7a:53:f1:50:7f:8f:b5:
4c:c8:c5:ca:3b:66:a1:e1:52:c0:74:2d:47:3b:cf:
3a:65:f0:8d:3f:48:00:e8:d4:38:68:fb:e3:50:73:
32:0f:47:63:82:c1:50:e1:a5:d6:d6:c2:7b:c6:d0:
49:6f:19:8b:62:58:67:04:2b:88:0e:bb:23:e8:ba:
57:83:af:9b:d9:b1:fd:2a:7a:7d:76:2e:91:f9:69:
ec:da:10:16:0a:09:74:c4:2c:34:5a:9c:aa:11:08:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:6B:C3:DF:37:CC:FB:5F:CB:72:33:CB:BA:64:60:24:4A:12:B5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ywNrw983zPtfy3Izy7pkYCRKErU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3d:23:e0:19:78:ff:18:4f:aa:c3:6f:24:ee:13:e7:9b:48:53:
d0:c1:3f:6c:4b:88:c7:54:fd:a4:da:6c:2f:d0:ff:32:27:ea:
4a:ae:53:90:36:5c:20:b0:29:ea:38:8b:f1:de:f7:2a:3b:5d:
da:66:67:3d:7b:14:8d:19:d3:0b:be:59:84:39:e9:e9:75:2b:
c1:14:59:4c:16:8a:0c:ec:17:7c:85:81:4f:48:00:f2:24:ed:
df:ee:8a:a6:7e:ab:d5:ff:52:a3:42:3b:9f:4e:55:5c:5a:8d:
e2:af:f1:50:d5:e5:c9:be:27:df:50:56:ad:9e:9b:40:a2:3a:
42:38:ef:4e:a8:c6:c3:9f:29:c8:7d:40:b4:25:42:61:67:00:
01:ce:6e:73:9c:9a:9b:43:39:75:6f:b3:71:3b:39:63:2f:e0:
ef:92:8e:e5:bc:b7:f8:56:ab:bc:53:0d:3d:9c:0f:79:b1:d8:
9e:a9:e1:28:d8:52:2d:d5:d9:8f:52:b7:0d:ee:ab:e2:dc:fd:
d8:fe:61:19:86:15:70:df:5b:e8:48:a9:ec:c8:48:c2:de:dd:
0f:22:73:93:e3:a1:c9:0e:fc:26:9c:ed:97:cb:f2:21:0e:53:
79:4d:8d:f1:d1:ed:19:62:6c:b8:55:5c:da:cb:99:09:ea:0d:
c7:85:49:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:29 2025 by rpki-client