Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/wialoZ4LJZiT0GUZdGDmJHEia-s.roa
File: wialoZ4LJZiT0GUZdGDmJHEia-s.roa (raw, json)
Hash identifier: 3ZM0UBPvT0X7hFXDMS/VlZ07/BJ+6fU6xKSzADjIxRA=
Subject key identifier: C2:26:A5:A1:9E:0B:25:98:93:D0:65:19:74:60:E6:24:71:22:6B:EB
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 01942748162AC02FFB6C662A935FAF34D5F9
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/wialoZ4LJZiT0GUZdGDmJHEia-s.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 2a0d:4480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:16:2a:c0:2f:fb:6c:66:2a:93:5f:af:34:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c226a5a19e0b259893d065197460e62471226beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:04:c6:d3:e5:b1:31:0c:12:23:62:98:5a:
0b:95:44:56:87:c9:66:59:64:d7:19:6a:fa:35:a6:
fe:1c:a2:fc:1b:89:0c:22:8a:35:7a:18:db:13:4c:
b1:4b:36:cc:63:a8:b8:72:bc:17:17:99:76:93:d7:
c5:c6:e2:42:eb:74:ac:73:1d:c1:a7:be:2a:20:2f:
a1:7b:e9:e7:62:4c:a9:ad:2e:8f:d8:33:42:6c:3c:
08:ff:c1:38:8e:af:10:6b:3d:46:2a:7c:bb:ab:21:
bd:13:9e:97:42:56:97:c3:4e:fd:ba:90:05:6c:b9:
78:e6:c2:66:37:ba:64:0c:33:20:90:15:2e:0e:38:
ab:57:3c:3a:eb:74:72:66:a5:80:2a:80:e3:50:43:
ba:74:c4:52:13:ba:f2:ae:62:2d:8e:82:81:33:b5:
63:62:46:71:b3:df:53:c1:86:8b:06:84:c0:12:58:
75:d2:15:b7:5e:e0:ee:16:36:ba:40:4d:f6:64:71:
ac:d1:62:67:e8:fd:ee:49:34:97:c3:3d:2b:4a:b1:
81:fe:05:c7:3f:6c:65:f2:74:c9:b0:f8:07:5e:a7:
64:c1:89:eb:9e:90:b8:b5:c4:e7:9f:20:ac:94:f1:
f4:8f:2b:db:25:a0:60:ea:ee:15:e8:78:41:17:75:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:A5:A1:9E:0B:25:98:93:D0:65:19:74:60:E6:24:71:22:6B:EB
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/wialoZ4LJZiT0GUZdGDmJHEia-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4480::/29
Signature Algorithm: sha256WithRSAEncryption
9f:c7:01:9e:5f:94:ab:09:c0:5f:20:b4:c3:31:48:50:9c:e1:
0e:0f:94:85:03:40:f6:96:04:9f:01:93:45:d3:9a:6e:6a:fb:
ea:5e:a7:de:b6:92:57:d4:7e:36:e9:f5:ed:9b:2c:2c:28:cc:
03:89:bd:b2:a8:25:00:86:69:9f:6b:96:8e:f9:69:fc:ba:f1:
d1:72:88:ba:90:e2:36:63:bb:3d:0d:d7:3c:ba:aa:d5:29:26:
e6:5f:cc:d8:93:f2:91:38:33:dc:eb:d8:c0:3a:76:af:2a:75:
ab:a2:85:d3:cc:86:45:cf:e7:49:fa:90:f7:f8:56:3a:f1:b7:
8a:e9:ba:66:93:b8:b4:28:b8:84:f0:a4:68:10:93:21:5b:1e:
ef:7a:37:5d:fb:c8:f9:26:3d:48:c5:a6:18:13:2b:de:65:b8:
13:44:46:4c:0c:55:05:5a:43:6e:fd:93:1e:8d:1e:5d:07:dd:
5b:77:b2:70:4a:0b:73:92:de:f2:fc:3b:2e:3e:59:68:90:e7:
52:f8:9a:23:c2:03:ad:bf:35:18:c1:4d:2e:1e:14:79:dd:be:
bc:90:ba:b6:58:db:e3:b5:d1:36:91:86:f8:72:06:88:ca:a7:
25:51:5d:95:c1:2a:c9:c3:9e:eb:03:4b:8d:a6:c3:74:4a:4c:
49:8e:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:37 2025 by rpki-client