Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zYrT4Q6mfehwU33LX4oiN_OOYbk.roa
File: zYrT4Q6mfehwU33LX4oiN_OOYbk.roa (raw, json)
Hash identifier: uCy13D0vklTMTaY9SvBeNlOE/ezhiuWrDoXT375Sjnk=
Subject key identifier: CD:8A:D3:E1:0E:A6:7D:E8:70:53:7D:CB:5F:8A:22:37:F3:8E:61:B9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192A473F9E7CBACC82AECB555B2650125B4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zYrT4Q6mfehwU33LX4oiN_OOYbk.roa
Signing time: Sat 19 Oct 2024 11:05:16 +0000
ROA not before: Sat 19 Oct 2024 11:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:a473:1ae2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a4:73:f9:e7:cb:ac:c8:2a:ec:b5:55:b2:65:01:25:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 19 11:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd8ad3e10ea67de870537dcb5f8a2237f38e61b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:33:86:58:e8:05:b8:56:c6:92:33:85:e3:
88:9c:18:02:23:58:e5:b8:5d:e3:d2:14:8a:e8:8c:
5f:0f:64:ac:91:53:31:ae:5e:c6:fa:54:bb:74:ef:
b8:ca:f2:0a:52:44:ea:7f:cc:f2:f8:9c:0f:f1:98:
57:97:49:91:76:78:bb:78:f9:b8:f4:fc:00:88:61:
13:c6:7e:25:02:89:5d:4e:c4:37:b5:28:62:dc:6c:
dd:95:19:fb:70:ec:3d:5c:7e:3e:87:1b:bf:94:66:
46:23:da:0d:b8:e0:ae:1c:d6:04:dd:d6:d3:f3:db:
39:f6:d5:99:c2:06:b7:f4:a1:86:3c:46:47:5f:1f:
12:ee:d4:0e:ee:70:d7:a9:7f:80:3e:0d:4b:60:17:
1b:d8:2e:66:13:ac:9e:e0:18:36:0d:40:fb:64:7f:
a0:8d:4c:1b:00:49:ae:ae:c8:89:30:9a:76:3a:a6:
59:36:4b:10:c0:5a:1a:67:3a:15:6c:d5:00:3d:49:
bb:b5:0d:ba:14:65:e6:0f:45:87:ca:ff:62:0c:5e:
d5:e0:43:82:5e:85:12:aa:f5:1f:d9:95:6f:eb:06:
d4:a8:90:6e:24:9d:b0:06:2e:8c:aa:66:7e:6e:66:
56:11:06:83:42:ad:b5:c7:98:c3:16:1a:a1:69:14:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:D3:E1:0E:A6:7D:E8:70:53:7D:CB:5F:8A:22:37:F3:8E:61:B9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zYrT4Q6mfehwU33LX4oiN_OOYbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:a473:1ae2/128
Signature Algorithm: sha256WithRSAEncryption
8b:5d:91:c2:ee:b8:be:81:db:a0:be:3e:0e:5e:85:4b:d5:0f:
ad:51:57:67:d8:bc:35:7c:c1:40:86:c4:1a:74:40:c5:5c:33:
ba:b8:c7:ba:84:86:ab:95:75:e2:a7:4a:e7:06:3c:e9:77:bb:
f7:ef:ef:4e:21:13:4d:14:38:3e:e1:87:a9:63:e2:18:33:74:
51:19:27:fe:d5:40:24:a5:c4:43:e3:80:b7:60:17:60:4b:79:
70:68:e6:2e:04:6f:9f:cc:69:73:68:75:21:45:29:02:09:d3:
7a:36:de:22:b9:cf:7a:c7:50:8a:55:c0:fd:e4:87:53:c6:88:
ed:5b:b3:76:a8:f4:66:97:7f:d4:55:e2:27:56:81:8d:77:60:
8e:3c:0d:7a:f4:fc:34:10:ff:f2:9f:55:99:c3:78:58:4a:e0:
68:4c:06:7f:25:7c:a7:48:b7:e3:42:37:80:b4:cc:ba:c6:27:
bd:24:92:93:8b:1c:c0:19:54:c7:ce:b8:5d:52:81:51:c9:22:
a4:26:17:0f:e0:54:f4:ad:ca:d3:7d:06:f5:cf:ca:e5:74:8c:
b6:4c:2d:f1:45:9e:f8:2d:52:cf:b6:a6:d7:22:b6:eb:2d:37:
c8:72:2c:58:05:7b:c7:fc:52:87:38:11:93:f8:94:19:dd:08:
55:bc:5b:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:18:26 2025 by rpki-client