Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WIBr8dGhnUz-hFnOTqeo51uIB9c.roa
File: WIBr8dGhnUz-hFnOTqeo51uIB9c.roa (raw, json)
Hash identifier: IScsTCvMdidegSiE08lLfK7R3sL8Qx/u/REr4p6q2U4=
Subject key identifier: 58:80:6B:F1:D1:A1:9D:4C:FE:84:59:CE:4E:A7:A8:E7:5B:88:07:D7
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC406433E6022299DC297353159E7
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WIBr8dGhnUz-hFnOTqeo51uIB9c.roa
Signing time: Thu 02 Jan 2025 05:48:20 +0000
ROA not before: Thu 02 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38255
IP address blocks: 2a0e:aa06:49f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c4:06:43:3e:60:22:29:9d:c2:97:35:31:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58806bf1d1a19d4cfe8459ce4ea7a8e75b8807d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:f7:7b:64:12:aa:7e:ad:87:91:69:c4:9b:
60:ee:75:b9:76:85:99:56:02:4c:03:1a:a2:13:a8:
14:dc:01:ea:3a:95:39:16:f5:5a:5c:65:a9:b5:ef:
da:c6:ef:1b:2c:fe:5b:9f:79:b2:21:04:a4:1b:c9:
e7:bd:6f:7c:92:b7:8b:84:05:23:96:49:f2:4b:3d:
f2:aa:f4:01:c0:ff:14:e6:d1:68:f5:27:b9:64:2e:
23:b6:27:7f:7d:3d:11:fa:28:27:f8:66:70:89:a1:
11:c9:5d:fa:9e:9d:ae:63:2e:86:7f:d2:4d:93:bb:
0f:c7:2f:e7:a3:b3:99:75:e4:8b:75:c1:bb:56:92:
89:c5:21:c8:54:12:93:c6:9b:e6:ad:74:81:a0:d9:
71:d8:92:76:1c:a4:1b:42:1a:9e:46:ca:04:11:c3:
98:4f:c1:5f:e7:0c:f7:b4:1f:db:22:58:39:d5:c5:
db:52:7d:45:9a:4f:3d:1b:52:ff:c2:74:69:8d:b7:
64:7a:fc:b6:98:16:9f:29:99:22:db:19:7f:3f:a7:
9a:97:52:0e:e1:83:82:72:c0:4a:6b:47:ac:f1:d9:
c6:a8:f3:81:5b:b5:3d:bb:26:b1:1a:2a:11:57:ee:
f4:c5:6d:41:fe:c0:b5:e0:7e:2d:a9:d8:13:3f:50:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:6B:F1:D1:A1:9D:4C:FE:84:59:CE:4E:A7:A8:E7:5B:88:07:D7
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WIBr8dGhnUz-hFnOTqeo51uIB9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:49f::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b5:98:40:58:2c:7e:e5:15:ae:61:52:e8:ff:0b:c7:bb:7c:
51:1d:63:1c:33:d0:5f:a7:9c:37:87:ea:1b:93:bb:56:8b:ab:
05:d7:6d:56:b8:0c:19:1d:f4:69:9a:e1:fc:06:a4:38:b9:34:
90:d0:86:9e:4c:58:b4:fc:c6:38:be:1a:30:df:de:c7:6b:e8:
95:1d:df:4f:12:cb:0d:d2:54:19:dd:b3:15:1a:39:81:4a:11:
30:83:1f:0c:16:dd:0e:54:d5:0c:d1:44:1b:66:94:96:ad:8a:
36:98:35:f9:52:32:dc:68:60:30:dd:25:5a:aa:e8:67:b4:f3:
ce:1f:04:18:17:57:fa:13:b5:ff:81:1d:7f:1e:de:1a:59:42:
da:28:40:e8:6c:6f:e6:7e:b6:b0:d1:49:33:cf:07:79:5b:c2:
f1:30:5f:7d:c7:19:b5:96:0a:65:e0:32:90:84:f3:5e:15:fc:
88:07:6b:0a:d5:65:2b:5a:07:8e:3b:d0:7c:22:54:25:99:86:
9b:f3:e5:01:92:9f:b3:e8:52:52:29:73:2e:f0:a7:bb:92:af:
6a:9c:75:da:c3:39:d8:0e:da:da:2d:44:13:2f:70:23:f5:d8:
fd:74:b7:f6:9b:fb:3b:7a:fc:62:f8:79:6a:29:d0:83:74:68:
2a:84:98:d1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljsQGQz5gIimdwpc1MVnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODgwNmJmMWQxYTE5ZDRjZmU4NDU5Y2U0ZWE3YThlNzViODgwN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0H3e2QSqn6th5FpxJtg7nW5doWZ
VgJMAxqiE6gU3AHqOpU5FvVaXGWpte/axu8bLP5bn3myIQSkG8nnvW98kreLhAUj
lknySz3yqvQBwP8U5tFo9Se5ZC4jtid/fT0R+ign+GZwiaERyV36np2uYy6Gf9JN
k7sPxy/no7OZdeSLdcG7VpKJxSHIVBKTxpvmrXSBoNlx2JJ2HKQbQhqeRsoEEcOY
T8Ff5wz3tB/bIlg51cXbUn1Fmk89G1L/wnRpjbdkevy2mBafKZki2xl/P6eal1IO
4YOCcsBKa0es8dnGqPOBW7U9uyaxGioRV+70xW1B/sC14H4tqdgTP1CCRwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFiAa/HRoZ1M/oRZzk6nqOdbiAfXMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvV0lCcjhkR2huVXotaEZuT1RxZW81MXVJQjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qBgSf
MA0GCSqGSIb3DQEBCwUAA4IBAQAOtZhAWCx+5RWuYVLo/wvHu3xRHWMcM9Bfp5w3
h+obk7tWi6sF121WuAwZHfRpmuH8BqQ4uTSQ0IaeTFi0/MY4vhow397Ha+iVHd9P
EssN0lQZ3bMVGjmBShEwgx8MFt0OVNUM0UQbZpSWrYo2mDX5UjLcaGAw3SVaquhn
tPPOHwQYF1f6E7X/gR1/Ht4aWULaKEDobG/mfraw0Ukzzwd5W8LxMF99xxm1lgpl
4DKQhPNeFfyIB2sK1WUrWgeOO9B8IlQlmYab8+UBkp+z6FJSKXMu8Ke7kq9qnHXa
wznYDtraLUQTL3Aj9dj9dLf2m/s7evxi+HlqKdCDdGgqhJjR
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:42 2025 by rpki-client