Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WcqBix7r-FXYGxWPd5-iPK35LXw.roa
File: WcqBix7r-FXYGxWPd5-iPK35LXw.roa (raw, json)
Hash identifier: k72uydX4RkKqcZ/YX+6PV80IppTr1E4FwiNfnfhql78=
Subject key identifier: 59:CA:81:8B:1E:EB:F8:55:D8:1B:15:8F:77:9F:A2:3C:AD:F9:2D:7C
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01942220257204E36E38BA7EE38C5F62B85D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WcqBix7r-FXYGxWPd5-iPK35LXw.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57403
IP address blocks: 2a0e:8f02:f04f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:25:72:04:e3:6e:38:ba:7e:e3:8c:5f:62:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ca818b1eebf855d81b158f779fa23cadf92d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:eb:96:f3:14:8d:12:10:04:0f:d1:71:ff:
48:44:dc:d2:3f:df:83:0c:8e:c1:03:f5:eb:31:1a:
c6:41:bd:52:2a:c7:1e:09:47:cc:e7:73:38:82:49:
a6:5f:9e:6e:04:7d:37:ff:98:41:a1:89:1c:d4:84:
c8:5e:db:59:42:52:4a:7f:95:6e:9f:bf:f7:bd:b8:
1f:2d:68:9c:02:73:5a:bf:2a:d6:91:90:09:4c:23:
fa:37:94:67:5a:0a:ed:1a:08:1d:23:80:22:25:90:
28:1b:6d:6b:1e:e1:02:1d:af:3e:78:6c:08:1f:e3:
0d:aa:06:ce:3e:d3:6b:fa:40:15:ac:74:1d:94:4e:
60:90:cf:58:20:52:4f:30:35:dd:fe:9d:b1:62:2f:
db:3b:0a:c3:64:a9:15:d5:d2:9d:83:b7:57:1e:3e:
6c:af:30:bc:ba:7c:50:06:b0:36:ac:00:fc:05:f8:
86:4e:e4:69:5c:35:dc:d8:d5:1d:18:40:83:94:13:
c2:27:09:14:fa:35:0c:33:3d:66:8d:4f:59:39:a9:
a3:ff:6e:c3:43:b3:2c:2e:3d:34:0c:9e:56:0b:89:
7e:6b:a2:d5:08:fc:f6:4d:04:bf:46:34:31:59:94:
40:fe:06:56:82:66:c6:f7:e8:57:65:59:d2:d5:9a:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:81:8B:1E:EB:F8:55:D8:1B:15:8F:77:9F:A2:3C:AD:F9:2D:7C
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WcqBix7r-FXYGxWPd5-iPK35LXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04f::/48
Signature Algorithm: sha256WithRSAEncryption
38:7d:3d:8e:85:94:84:cb:2c:64:36:44:30:e8:bc:bc:e2:ca:
cc:5b:c7:7e:2e:ee:99:f7:bd:ea:75:d1:68:a9:f5:bd:07:45:
a0:44:5c:7f:e6:9a:c1:0c:8d:bf:af:33:9e:2d:be:b3:a7:ff:
a5:a8:08:00:4e:c8:c3:01:35:e1:2d:89:18:82:32:31:ba:73:
3f:cf:d1:6d:d5:24:f5:7a:97:1a:7e:1e:cf:80:a8:24:b6:d4:
7e:dd:dc:0d:51:17:a8:3c:fb:77:61:31:96:0b:af:ff:c2:a0:
37:f8:1a:89:57:dd:ae:bc:40:51:59:ab:86:59:fd:35:b1:26:
83:32:d5:69:40:bc:10:0c:13:a4:e8:db:69:61:c6:ae:d0:2a:
93:f3:d3:6a:12:63:26:5b:61:0d:f4:35:ff:7c:a7:c5:83:66:
b6:de:1b:0c:80:e2:fc:7b:57:51:c8:b7:77:34:b2:58:ff:6a:
58:f3:6c:30:a9:bf:73:95:d2:6c:1e:08:6d:22:45:d5:db:4e:
63:88:58:66:58:2f:31:a2:ef:4a:4c:e9:fd:68:3c:16:cf:f9:
f5:3e:ce:f3:f0:f1:9c:cb:ac:d1:b7:e5:a0:d2:3e:a8:c5:f3:
86:94:54:fc:71:94:d6:bf:81:fa:86:53:7b:52:4b:40:04:8b:
4f:c7:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:47 2025 by rpki-client