Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/_WKVvCx8pQQz405nj5JDI8J_0r0.roa
File: _WKVvCx8pQQz405nj5JDI8J_0r0.roa (raw, json)
Hash identifier: AuBj6xP/Hpbamrpz6aS9Y0zUWLp4q+rHygMsso/01eU=
Subject key identifier: FD:62:95:BC:2C:7C:A5:04:33:E3:4E:67:8F:92:43:23:C2:7F:D2:BD
Certificate issuer: /CN=35a2b45fbed19b378a3038fe21adffab68d750c7
Certificate serial: 018B439BCF19D387427C61961568D0B815B4
Authority key identifier: 35:A2:B4:5F:BE:D1:9B:37:8A:30:38:FE:21:AD:FF:AB:68:D7:50:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaK0X77RmzeKMDj-Ia3_q2jXUMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/_WKVvCx8pQQz405nj5JDI8J_0r0.roa
Signing time: Wed 18 Oct 2023 16:26:06 +0000
ROA not before: Wed 18 Oct 2023 16:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216128
IP address blocks: 2001:67c:590::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:9b:cf:19:d3:87:42:7c:61:96:15:68:d0:b8:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a2b45fbed19b378a3038fe21adffab68d750c7
Validity
Not Before: Oct 18 16:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd6295bc2c7ca50433e34e678f924323c27fd2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:02:95:f6:df:d4:2a:03:14:93:4c:c5:74:
1f:e2:86:1f:65:c0:52:7b:1e:a2:e8:a0:0b:c5:78:
14:07:0d:0f:c4:19:a0:eb:36:4a:67:d6:54:d3:d0:
30:a0:3a:e2:1f:b9:8d:3d:fd:eb:e4:c3:6b:7e:95:
d5:68:a6:4b:0a:55:f2:22:1a:5d:c4:23:8d:2f:6f:
a8:8a:25:bc:9b:db:a6:f6:30:3c:e3:2c:64:90:e5:
05:42:53:77:50:37:4f:f6:e6:e2:3b:8f:28:c6:36:
91:9d:5a:4d:5b:b3:a1:86:37:20:58:81:5b:7b:e5:
26:33:4c:35:f4:02:35:22:4c:5c:0b:04:9c:e7:c6:
bb:0a:30:ee:f5:b6:49:cd:02:2c:5f:f6:9b:4e:43:
bf:b2:f4:dc:5d:11:17:f3:bc:40:e8:2d:92:4b:8a:
fc:ff:ac:29:24:6e:93:f9:e9:43:cc:a4:9e:1a:90:
ce:4e:ac:7a:0d:49:a1:4d:8c:b6:ae:9a:c5:b9:54:
79:3a:5f:77:7c:7a:1b:f0:4c:62:b3:6e:bd:96:ce:
24:8a:a0:a2:cc:c7:e7:07:bf:05:03:00:d6:63:03:
f2:4f:67:58:dc:9b:d7:22:76:ec:f3:4a:4f:be:62:
a3:48:8c:7a:f9:ee:b7:e3:07:36:c5:fc:9a:a2:cd:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:62:95:BC:2C:7C:A5:04:33:E3:4E:67:8F:92:43:23:C2:7F:D2:BD
X509v3 Authority Key Identifier:
keyid:35:A2:B4:5F:BE:D1:9B:37:8A:30:38:FE:21:AD:FF:AB:68:D7:50:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaK0X77RmzeKMDj-Ia3_q2jXUMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/_WKVvCx8pQQz405nj5JDI8J_0r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/NaK0X77RmzeKMDj-Ia3_q2jXUMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:590::/48
Signature Algorithm: sha256WithRSAEncryption
a9:5c:7f:39:dc:3f:fe:26:9c:46:48:78:a9:48:4f:8c:65:fe:
60:62:41:87:0d:94:9a:ff:07:26:f7:88:48:bb:94:19:41:31:
42:5f:66:f3:71:4b:00:9a:02:0e:27:46:31:28:fd:80:b5:cb:
c7:19:ca:5c:bd:a3:ee:32:f1:32:51:28:73:0a:f2:be:c5:97:
98:c2:a5:cf:ae:cc:fb:c8:6d:aa:ac:28:bb:95:64:90:34:9c:
97:6e:f7:bc:1d:a5:c3:3f:64:94:b8:81:8a:5c:55:09:e3:40:
84:e6:15:a6:ee:ac:d6:34:02:11:de:5a:ae:ee:a0:f6:1b:56:
0c:3f:3c:90:5e:57:eb:1e:93:6b:84:02:7e:71:89:de:bd:04:
b8:39:1d:30:0c:0c:98:63:c2:f0:c6:de:a4:6a:42:d7:1e:8b:
f5:df:d7:b6:80:44:70:99:3a:16:4c:f7:63:49:22:5f:6d:40:
bb:0a:ec:f7:f4:1c:3d:c3:e4:cb:16:ee:32:53:ac:37:ce:b3:
36:1c:db:13:93:89:b5:60:ca:3e:5d:92:5b:73:59:dc:d2:04:
cd:2d:be:33:1f:b7:80:e9:88:30:71:54:ce:45:17:c3:59:61:
b6:2f:07:95:d8:74:22:7c:36:83:58:5d:e0:4c:2e:fa:69:60:
4c:39:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:57 2025 by rpki-client