Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa
File: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (raw, json)
Hash identifier: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=
Subject key identifier: C0:E8:AA:5A:52:29:EE:A1:F3:6B:12:86:0B:2B:C0:2B:C5:26:A7:02
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 0194228DE40AEBADE43A9BC80FB59FC8A78E
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206264
IP address blocks: 2a00:1ca8:2c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e4:0a:eb:ad:e4:3a:9b:c8:0f:b5:9f:c8:a7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0e8aa5a5229eea1f36b12860b2bc02bc526a702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:ee:0c:38:41:56:36:88:40:86:b8:84:0a:
82:26:7b:0a:de:a7:b5:73:93:9d:4d:d7:37:2c:7e:
6c:04:91:65:4b:ba:22:65:cf:66:8f:e5:c9:7d:43:
0c:42:de:a9:ee:b5:dc:2c:82:ba:9f:d0:67:ed:ac:
b4:39:7b:60:70:49:74:f8:9c:9e:42:65:91:66:48:
01:1e:34:51:d0:0e:d2:c9:b4:6b:38:5a:77:60:b5:
22:d3:b1:bc:67:90:fa:85:6a:cc:62:7d:f9:11:99:
ff:ab:d6:b5:77:02:69:e9:77:38:fa:4b:61:49:cc:
7b:f0:d7:82:85:af:d8:87:3a:fd:2f:66:e2:96:97:
47:42:cb:60:7f:77:bc:ce:99:5e:f8:2c:f8:51:72:
b8:03:a0:e2:ad:29:b5:09:32:94:ef:2f:e6:f6:c0:
39:bc:ee:b7:46:04:06:91:e5:5a:b4:8e:b3:2b:d9:
dd:ac:13:87:28:b6:2e:fd:c7:bb:82:57:4a:72:8a:
18:fe:c7:f0:2e:71:fe:4e:82:f4:36:03:35:5c:eb:
8c:0e:2c:b7:b1:90:55:be:d6:b3:62:cd:e3:44:27:
19:b1:17:91:02:b2:ab:00:c5:fc:e1:c0:eb:01:ee:
6b:8f:40:25:1b:08:46:96:b8:90:00:89:f5:f5:de:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:AA:5A:52:29:EE:A1:F3:6B:12:86:0B:2B:C0:2B:C5:26:A7:02
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1ca8:2c::/48
Signature Algorithm: sha256WithRSAEncryption
16:8a:62:73:21:b4:34:24:b1:c2:71:c0:0d:b7:01:fd:45:3d:
6e:18:d3:8f:26:a0:0e:4a:ef:2e:62:fd:a3:b2:77:52:f9:a8:
7e:99:1f:20:13:1e:93:28:30:c6:21:04:94:59:1b:d6:2f:a7:
1f:73:c1:03:e0:92:33:77:3a:08:f1:e1:fa:41:fc:f9:93:de:
8f:13:ba:93:9b:65:f7:ec:58:9a:e6:b7:af:4f:6a:77:01:84:
bf:18:04:ac:1b:41:15:46:ce:50:f9:e4:3b:2f:ee:1a:b4:bc:
c4:22:a5:ac:d6:bc:2c:9d:d1:a5:da:ad:72:c9:16:32:15:65:
d3:8e:eb:1f:b8:35:f3:3b:e3:4f:4d:c7:f4:f9:93:6a:4e:2b:
51:1c:92:ee:f1:0e:33:32:e4:c7:99:ca:4f:1b:72:7a:7d:13:
14:76:2a:65:5b:82:09:eb:be:bc:45:e6:bd:f4:a8:14:49:ac:
46:55:b6:c4:91:5a:e8:8a:fa:f0:1b:eb:34:fa:10:35:54:b5:
9b:16:89:74:74:28:5e:d5:ce:b8:0a:c3:be:a3:6e:fd:80:ec:
a7:bc:d1:0f:5d:e8:2a:9f:59:e6:ee:89:03:a0:26:34:d2:de:
f0:1f:59:00:8c:13:ae:69:75:35:48:0a:31:d4:f0:96:4d:99:
b0:eb:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:00:10 2025 by rpki-client