Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/W8PLYIUawOsKciXpgwY1LsD5N3c.roa
File: W8PLYIUawOsKciXpgwY1LsD5N3c.roa (raw, json)
Hash identifier: pNMTLeSeim5PRfkCX9pCbzS3Po+q+vzl4VslLu5aEY4=
Subject key identifier: 5B:C3:CB:60:85:1A:C0:EB:0A:72:25:E9:83:06:35:2E:C0:F9:37:77
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222028E61484DD908E26206A099ED069
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/W8PLYIUawOsKciXpgwY1LsD5N3c.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198886
IP address blocks: 2a0e:8f02:2250::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:e6:14:84:dd:90:8e:26:20:6a:09:9e:d0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc3cb60851ac0eb0a7225e98306352ec0f93777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:f5:ae:f3:ee:a4:2d:b1:33:08:a2:ba:9f:
42:77:35:1b:4f:81:95:5e:62:40:f1:32:f7:09:7b:
9f:db:7b:c8:5a:13:5d:b5:d9:a6:42:b8:8a:d3:ff:
41:c0:d6:59:89:76:57:5a:f5:1f:80:15:05:fa:c0:
eb:f5:10:04:07:84:21:2f:d7:de:84:98:a9:5f:26:
c2:08:87:33:77:f8:e4:a8:a6:27:6e:d3:dd:71:b9:
42:3f:2e:18:cf:74:a1:7b:49:c6:2f:8c:7d:70:78:
58:79:b1:b9:f6:22:6e:88:75:dd:fc:a2:72:00:cb:
f6:03:9e:60:2d:f2:4e:5f:4b:8d:d1:b6:52:66:c6:
73:78:1b:df:a1:a6:a0:8a:65:2e:78:ec:bf:43:70:
a7:e5:06:50:59:bf:5e:ee:8d:21:53:e9:1b:1b:e0:
d4:4a:f7:28:e0:a8:50:53:a3:9c:64:6c:71:7b:8a:
6c:9e:7c:d2:0a:8b:4b:1c:59:76:17:bb:dc:ab:c2:
f3:27:5d:25:c6:e7:51:9b:9a:37:22:38:04:c9:d6:
5c:7b:20:41:99:0c:ec:30:c7:ec:7e:d1:57:2a:35:
82:86:c4:d4:ae:38:ed:b9:af:da:7d:0e:ed:08:26:
ba:93:b5:26:66:e6:e8:f6:e5:34:03:4c:25:c5:90:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:CB:60:85:1A:C0:EB:0A:72:25:E9:83:06:35:2E:C0:F9:37:77
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/W8PLYIUawOsKciXpgwY1LsD5N3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2250::/44
Signature Algorithm: sha256WithRSAEncryption
2b:d3:46:3f:62:49:ef:9d:22:90:55:1b:86:7a:a5:7d:da:32:
49:be:c2:8a:7c:37:b8:82:cc:ce:71:3f:55:3a:45:3f:63:f9:
90:85:5b:5b:b6:9d:a9:b8:54:d3:2c:b0:46:04:f3:07:17:f4:
9a:e7:43:10:93:49:ad:dd:4e:72:2d:94:80:36:63:c2:ed:9a:
63:a5:0f:4b:6b:4f:9b:39:04:4c:04:f7:3c:6c:b1:2c:b8:79:
84:73:8a:43:8d:de:18:4e:45:5e:b5:f9:62:aa:8e:c4:64:91:
26:42:44:da:c4:7d:be:2c:3d:42:64:0d:1f:51:55:57:3c:95:
5c:5c:bd:90:7d:7c:49:aa:9d:ef:ff:39:4f:1e:aa:a0:e9:a3:
2c:1a:0c:71:c3:bb:2b:a1:f5:18:d1:30:e2:03:ca:b8:5c:2f:
e5:49:ba:23:f9:fa:af:8c:4e:04:fc:7d:30:c3:cf:b9:1a:de:
10:9a:7b:06:e6:20:99:cc:a5:ad:e0:85:30:78:9b:e9:4a:4c:
e9:58:1b:4a:47:c1:93:d7:26:01:e3:de:d7:74:b2:00:9d:69:
5a:0f:58:2e:17:36:9e:bb:01:7a:a1:f3:0b:4e:46:75:a7:86:
4a:ee:35:d4:86:34:f9:0e:08:3f:89:0b:4e:d1:8a:5a:de:26:
8c:a2:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:40 2025 by rpki-client