Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/W1A91nKi-sIswEzYleo4iAzR8ws.roa
File: W1A91nKi-sIswEzYleo4iAzR8ws.roa (raw, json)
Hash identifier: AwK4RDFQ58fkJYim1I//qamw70KUvmD+BEZCWoRuZOg=
Subject key identifier: 5B:50:3D:D6:72:A2:FA:C2:2C:C0:4C:D8:95:EA:38:88:0C:D1:F3:0B
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019585204F093BD044620C22BA1307D8C7C2
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/W1A91nKi-sIswEzYleo4iAzR8ws.roa
Signing time: Tue 11 Mar 2025 12:14:01 +0000
ROA not before: Tue 11 Mar 2025 12:14:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200250
IP address blocks: 2a0c:fe01::/32 maxlen: 48
2a0e:a942::/32 maxlen: 48
2a0e:cbc3::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:20:4f:09:3b:d0:44:62:0c:22:ba:13:07:d8:c7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 11 12:14:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b503dd672a2fac22cc04cd895ea38880cd1f30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:cb:41:67:5c:ed:7b:53:af:9c:6c:9d:00:
c5:03:b4:54:51:69:0c:c5:37:f2:fc:b2:15:b0:77:
3d:56:8f:21:af:9e:22:e5:77:80:d8:55:06:25:48:
8e:2f:f0:49:2d:59:24:34:7b:e2:34:ae:f6:af:1f:
ee:3c:6f:4c:46:69:fe:70:a4:1f:08:f2:ba:94:2d:
52:0e:ae:b3:f1:7c:c6:d4:83:3a:df:82:43:81:92:
46:78:1b:47:54:a9:cb:df:34:6a:ba:33:bf:c2:ac:
56:9e:31:08:ef:63:f3:9b:c7:11:ea:ea:b4:8b:6f:
a1:7f:8e:8b:2f:d7:36:59:29:07:95:7e:da:40:aa:
54:c4:a8:4b:ea:a5:3a:cb:ff:56:31:e3:eb:01:b6:
48:32:87:9c:df:e4:7b:d0:f9:28:a2:e8:b5:da:97:
77:8f:36:6d:e0:02:98:4e:70:4a:fb:61:12:4f:91:
4a:02:e6:e3:f6:0f:a6:81:bb:2f:fe:32:3d:1f:9f:
10:eb:74:2d:10:ea:69:ff:85:82:85:07:56:7d:8d:
8a:8b:14:ba:08:7b:14:fa:ad:d1:28:1f:13:0d:75:
6b:20:eb:05:71:18:f3:dd:4c:e3:80:a2:49:50:4c:
4b:57:c6:2f:a8:d2:4d:b3:72:11:44:8e:71:f1:13:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:3D:D6:72:A2:FA:C2:2C:C0:4C:D8:95:EA:38:88:0C:D1:F3:0B
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/W1A91nKi-sIswEzYleo4iAzR8ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:fe01::/32
2a0e:a942::/32
2a0e:cbc3::/33
Signature Algorithm: sha256WithRSAEncryption
23:ee:ee:58:5f:90:b0:17:fd:f4:57:e4:94:d4:ab:70:11:cb:
22:52:57:fb:d8:a9:b5:1a:bf:d9:9a:b7:29:8e:ae:3e:fd:fb:
ed:a0:25:22:98:6b:dc:f7:73:eb:04:b0:90:d4:bb:4a:c0:98:
c6:73:5c:b3:16:4c:40:df:9d:f7:48:a7:6c:ba:e7:48:ee:8f:
d0:06:64:d2:e3:3b:5f:90:e4:e0:1e:e1:47:fb:f3:de:43:c5:
ae:41:b0:cd:bf:26:3d:5a:24:04:32:8b:07:12:4d:7c:d1:a2:
5b:fe:b6:a9:6b:5c:cd:4a:c8:c3:ef:2b:ba:b9:a6:f7:e7:72:
7b:be:4d:ad:8e:41:c0:f9:7a:8d:04:df:13:48:ca:bd:0b:3b:
89:a7:14:10:56:6a:28:00:6f:d6:73:26:09:d4:70:4c:1b:b6:
23:aa:e2:7b:ac:28:5a:a9:d9:f7:44:fb:16:48:cc:3d:9a:5d:
34:79:b2:d1:98:1f:5b:00:58:89:ad:7a:24:57:be:cc:8f:ed:
38:7f:3c:7f:c1:4c:05:61:48:54:cb:b8:b8:7b:16:84:ce:85:
dc:66:9d:7d:aa:19:8c:3f:47:cc:b9:66:30:7c:27:27:27:0a:
b8:de:c3:a8:9e:24:6f:51:7b:16:76:dc:e0:50:3a:f1:2c:58:
3f:24:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:48:30 2025 by rpki-client