Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wJwKd3mRFAiyh0yT-CL0-41LB7g.roa
File: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (raw, json)
Hash identifier: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=
Subject key identifier: C0:9C:0A:77:79:91:14:08:B2:87:4C:93:F8:22:F4:FB:8D:4B:07:B8
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF6F4CF1AE98E51EE1E85734B857E
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wJwKd3mRFAiyh0yT-CL0-41LB7g.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8095
IP address blocks: 2a0f:607:105a::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f6:f4:cf:1a:e9:8e:51:ee:1e:85:73:4b:85:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09c0a7779911408b2874c93f822f4fb8d4b07b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:35:47:5e:fd:26:64:07:64:10:3d:be:04:
22:f1:e6:b4:67:39:26:6e:7c:75:05:7e:cb:2e:d3:
57:0c:2d:fe:27:d5:83:74:21:1c:38:da:68:5d:fd:
33:6e:6e:79:7e:66:d2:9a:bc:9b:11:e0:cd:b2:e6:
b2:cb:e2:6d:b5:f5:22:22:bc:e5:4b:e5:20:53:4c:
cb:e5:8a:6f:43:5d:84:63:48:b4:11:e2:4a:3c:24:
c0:99:0c:04:86:d4:a5:3a:b9:5f:1e:0b:96:c2:ae:
ec:6b:7f:43:cb:d4:a2:56:ac:5d:61:ac:7c:42:2d:
db:ba:12:01:44:b1:4a:6d:66:34:e9:1d:29:1b:9e:
6e:4c:25:72:9c:9f:7f:35:9f:d8:68:e8:08:de:9a:
10:6a:ea:27:0d:01:26:61:02:f3:c6:55:db:59:af:
1c:59:1d:86:3b:72:eb:ac:70:52:c5:dc:e1:3c:8b:
c8:36:ec:6d:aa:86:a9:f3:3c:3b:fe:64:01:f2:f7:
5c:ac:c7:fc:f6:56:02:a7:96:a3:9e:d3:55:da:73:
cd:c2:4f:58:d8:36:df:ae:ae:d5:37:dd:0f:6b:65:
9b:43:43:55:ef:35:fc:8e:6b:50:7d:52:46:92:50:
f8:23:91:c1:c8:12:ee:cf:4d:9b:80:17:1b:9b:4c:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:0A:77:79:91:14:08:B2:87:4C:93:F8:22:F4:FB:8D:4B:07:B8
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wJwKd3mRFAiyh0yT-CL0-41LB7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:105a::/47
Signature Algorithm: sha256WithRSAEncryption
3f:87:9e:0d:b4:8b:46:35:8a:5e:ad:36:27:86:bf:b8:8d:95:
bc:6f:4b:2d:7b:58:23:f5:8f:77:5c:85:5a:04:18:b9:f5:b8:
19:e2:89:50:7e:2e:c1:3b:97:8a:e0:2a:79:4b:1b:df:38:1a:
c2:bb:42:35:53:f6:db:23:d4:39:7f:3b:ef:09:14:dc:18:a4:
8a:59:fa:df:62:32:79:17:80:5f:94:4a:b7:1d:74:45:52:67:
5f:57:31:3d:fe:f5:4d:13:c4:5f:35:96:a0:8f:08:26:c0:12:
3b:df:b5:b9:b5:48:63:34:46:ee:a7:8b:f2:f0:80:b1:2e:a0:
5c:3c:5c:5c:86:21:d1:f1:5e:8a:51:e1:49:e6:dd:37:5d:e9:
db:31:94:61:d1:0a:7b:a7:6d:50:67:5a:a1:a5:13:fb:da:fa:
5f:13:e4:ea:25:ed:61:7b:09:86:8f:80:cf:f4:42:11:a6:21:
71:2b:13:32:26:0a:9c:74:c7:c4:96:11:85:de:6e:9b:97:e3:
5a:73:f4:36:5e:66:4f:ec:6b:46:f0:6c:df:fb:8f:a1:47:19:
4d:94:e3:dc:91:be:44:1c:2e:fe:ea:46:66:8c:52:1e:ee:37:
25:d3:32:0e:f8:c4:29:e6:e0:d3:92:a4:49:3f:be:9d:88:6a:
71:c0:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:09 2025 by rpki-client