Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa
File: WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa (raw, json)
Hash identifier: 3lu/ayfZLYDj8vnQ7f7Xh2AT2XdViQ0lLouzSMEvwU0=
Subject key identifier: 5B:02:9C:54:17:16:E7:04:E0:C5:AF:FB:A5:2F:8B:75:7F:C4:C5:01
Certificate issuer: /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial: 019420D65C9E725FE31746D1D80327826BAD
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137182
IP address blocks: 2a0f:4280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5c:9e:72:5f:e3:17:46:d1:d8:03:27:82:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b029c541716e704e0c5affba52f8b757fc4c501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:57:d6:ac:2a:de:0f:fb:51:38:5f:18:9f:
95:9e:e1:3f:af:5e:21:08:16:5a:25:e0:ca:d7:c0:
09:b5:bc:7c:2d:b2:84:a2:29:1e:76:a8:24:0f:15:
02:00:8e:61:bd:10:39:d7:24:d0:99:88:a1:a4:b6:
44:0d:ec:65:04:42:d8:64:b1:43:20:12:78:83:9e:
4e:d5:dd:b3:d6:99:b3:39:9f:bd:3c:d9:a2:8c:f5:
d9:b4:7a:89:55:4d:bc:61:3f:09:be:4e:f9:3d:00:
9b:ae:e9:8f:d5:bf:0c:7a:c6:66:68:fd:56:38:b4:
94:9d:b3:4f:f2:03:34:74:be:0f:84:6e:bd:eb:b2:
78:f8:4e:46:dd:16:f8:83:45:e7:61:1c:cd:38:c4:
71:b0:cf:5a:41:19:fd:3d:ba:23:38:0d:c0:6d:3f:
14:e2:a2:38:f1:7b:f0:d3:6b:07:0d:a1:e7:b6:b2:
7a:94:51:8c:ac:a5:79:7e:d7:98:ad:e6:4c:0f:14:
7f:ef:b6:e1:60:7f:67:37:b8:65:95:ac:43:2d:f0:
f4:00:18:cc:49:46:00:5f:42:1d:eb:5e:ad:b3:88:
a6:01:8f:28:da:49:11:cf:fe:87:83:e2:01:fe:30:
a9:8a:8c:d2:60:2a:03:22:5a:46:d4:f3:39:b0:a1:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:9C:54:17:16:E7:04:E0:C5:AF:FB:A5:2F:8B:75:7F:C4:C5:01
X509v3 Authority Key Identifier:
keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4280::/29
Signature Algorithm: sha256WithRSAEncryption
2a:be:83:d9:3e:ed:4d:df:dd:6f:57:b7:5d:3b:c8:95:9d:dc:
75:11:fd:40:4a:1e:3f:32:2b:1a:e0:d5:73:61:11:59:9a:aa:
6e:6b:59:ff:47:5e:ab:28:95:ca:c6:14:78:c6:fb:47:b7:74:
a7:fd:d8:c0:69:11:95:ee:40:93:c2:de:a7:73:a8:0d:89:84:
a2:65:e9:55:82:23:7d:3b:a8:56:ea:b6:2d:e1:aa:42:ac:09:
d8:28:10:03:4f:fa:96:a0:3d:b2:eb:9a:77:29:16:ab:18:1e:
4a:fb:79:35:b3:31:aa:e1:a3:93:13:1e:b4:55:ea:d0:3c:22:
03:59:a6:fb:ba:44:b8:f4:15:70:1d:be:aa:e2:6c:76:bd:38:
c3:89:9d:0f:36:cc:8f:41:c9:51:24:76:9c:68:da:df:33:8f:
b9:54:55:d1:d4:23:16:42:ea:70:3c:9e:ff:16:c9:77:70:bc:
96:93:a2:1e:04:7c:ed:b0:18:fa:20:26:13:b9:42:56:4a:f4:
be:a2:c5:69:fb:e6:09:c4:fc:c5:16:42:36:61:f7:7d:77:e1:
67:f4:41:0d:8d:b3:2c:22:2e:bb:37:2e:2a:0a:81:e9:63:25:
95:62:b7:6f:18:b1:09:1a:64:77:40:f0:09:5b:c2:6c:0d:eb:
74:60:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:52 2025 by rpki-client