Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iDZiXqlk9OYq2ivlqjdVtbqrLYE.roa
File: iDZiXqlk9OYq2ivlqjdVtbqrLYE.roa (raw, json)
Hash identifier: FnPE5boIR0kdgpmuTA9MQod2q/hiQHBtI8DJ/BJEOQA=
Subject key identifier: 88:36:62:5E:A9:64:F4:E6:2A:DA:2B:E5:AA:37:55:B5:BA:AB:2D:81
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192EA9E62D33E3895C7A10294CB37A0B6B0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iDZiXqlk9OYq2ivlqjdVtbqrLYE.roa
Signing time: Sat 02 Nov 2024 02:05:01 +0000
ROA not before: Sat 02 Nov 2024 02:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:ea9d:b133/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ea:9e:62:d3:3e:38:95:c7:a1:02:94:cb:37:a0:b6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 2 02:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8836625ea964f4e62ada2be5aa3755b5baab2d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:2b:75:91:d6:c1:92:c0:93:7a:98:6a:e0:
76:e9:ef:a8:24:72:61:b5:83:d8:94:12:4a:10:21:
7d:91:df:94:ee:f0:1e:4f:af:8b:1d:ef:b1:3f:8c:
cb:ee:91:97:09:d8:95:a9:10:af:95:97:ef:b2:87:
98:3c:3d:93:c4:a6:ab:06:0f:bf:bf:73:3c:20:78:
57:ae:97:b6:52:d9:3d:03:99:95:c5:eb:08:69:dd:
f2:f4:35:c5:58:e0:8e:ad:a6:cb:b5:47:cc:93:60:
74:ba:06:49:54:68:7a:c7:47:c6:9e:96:89:8f:ad:
49:5e:25:59:fe:0f:76:b5:2b:b8:ad:fd:01:ae:e6:
9e:8e:bb:89:1a:d3:6a:c7:93:83:45:a1:6b:db:6b:
6e:95:e0:49:38:e9:f3:82:ad:d0:4c:cd:0b:6a:ee:
23:92:e5:2f:55:f5:3c:f1:d0:91:6a:9e:1a:09:e6:
1d:7f:a0:fe:2f:8b:1a:65:d0:d9:c9:bf:4c:ee:64:
7d:1c:b0:4c:06:ee:c6:32:76:c2:18:53:b5:96:6f:
29:9e:59:ca:90:67:ad:fa:8c:61:e5:68:80:36:92:
0f:56:b9:05:a8:89:6a:2c:ee:28:83:28:d8:a0:5e:
0c:a6:f3:dd:c9:f7:7e:a0:0e:60:53:e2:31:4d:7b:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:62:5E:A9:64:F4:E6:2A:DA:2B:E5:AA:37:55:B5:BA:AB:2D:81
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iDZiXqlk9OYq2ivlqjdVtbqrLYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:ea9d:b133/128
Signature Algorithm: sha256WithRSAEncryption
49:da:85:31:56:95:99:d9:92:91:1f:ff:1c:83:76:97:6c:9b:
0e:2b:cb:f3:16:39:07:f1:34:fb:06:83:4e:30:2a:2b:15:43:
45:6f:e4:42:04:08:2a:18:b4:f2:f5:14:31:5b:0d:66:62:69:
cf:00:1f:ec:3c:64:63:dc:e7:33:83:75:30:16:87:85:8a:15:
6f:03:e2:57:3a:e2:53:58:ac:db:3c:8a:90:c7:68:fc:92:29:
e8:ab:52:6b:46:23:f2:35:04:21:32:91:62:e3:f0:80:ab:0d:
12:e7:7d:14:17:4c:23:d3:d9:70:d5:b2:5b:4a:08:09:85:08:
63:2b:8b:ae:e5:62:03:42:8a:8c:d4:c3:37:c9:9b:7c:52:7c:
19:80:2c:c0:85:9b:b7:b1:64:6a:aa:ed:7e:11:ad:bc:23:22:
11:68:9f:76:c2:1d:93:eb:be:33:96:e3:d7:d2:df:a8:30:0d:
c4:64:d5:6f:cd:7a:54:90:b0:9e:3b:7f:51:c1:10:0d:58:ca:
d4:ca:99:49:9b:f0:d1:21:46:2c:de:36:de:d9:85:49:f9:22:
67:3a:d8:80:91:53:9f:d5:22:43:12:2d:a3:7d:0e:6a:3d:b8:
0f:4a:42:81:42:9f:cb:88:76:8d:74:01:d8:a8:31:6b:02:f5:
28:84:74:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:33 2025 by rpki-client