Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/jWpsvTVNS1Ff638kpa7ScxTuuk4.roa
File: jWpsvTVNS1Ff638kpa7ScxTuuk4.roa (raw, json)
Hash identifier: 63THTjmppr49Yj/Ay+jWsinwc396xB57u7trQc+8Nhg=
Subject key identifier: 8D:6A:6C:BD:35:4D:4B:51:5F:EB:7F:24:A5:AE:D2:73:14:EE:BA:4E
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019427B542DD94712A4A1DB800D3FE9599A2
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/jWpsvTVNS1Ff638kpa7ScxTuuk4.roa
Signing time: Thu 02 Jan 2025 15:49:38 +0000
ROA not before: Thu 02 Jan 2025 15:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2a0c:4a00:2b::/48 maxlen: 48
2a0c:4a01:1b::/48 maxlen: 48
2a0c:4a01:3b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:42:dd:94:71:2a:4a:1d:b8:00:d3:fe:95:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Jan 2 15:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d6a6cbd354d4b515feb7f24a5aed27314eeba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:46:50:9f:4f:e4:3c:ae:ed:d1:ac:f5:f4:
bb:ef:46:cc:8e:f4:9a:33:9a:fd:47:0d:12:e0:69:
0c:50:cf:10:55:96:37:cd:2d:2b:30:e7:67:72:97:
4d:f5:2c:64:dc:55:b0:29:95:a4:ac:fd:e6:4e:24:
df:27:98:60:a8:ef:e5:fa:a9:52:30:6e:47:24:f1:
8e:aa:69:57:e1:be:75:0a:79:1a:4a:39:e9:80:0d:
4f:e1:73:65:83:10:37:6c:80:6b:78:37:80:f3:cf:
e5:cc:28:f3:fa:7c:fe:85:33:6c:82:fc:ce:75:ed:
af:f4:1d:d4:b1:5e:0c:35:89:e7:0c:fd:7d:13:14:
3b:59:24:3e:d7:47:1d:18:7d:22:f2:4a:6c:e4:54:
ef:a2:98:bf:36:34:39:c2:1a:75:76:98:4c:11:9d:
b7:d7:5b:b0:bd:2f:bd:d5:bf:27:75:c9:4f:90:51:
d6:21:dd:bb:1f:b1:0f:1b:b4:60:7d:de:7b:cc:3d:
11:be:60:02:26:aa:9d:72:4d:df:ab:5e:49:aa:66:
13:a8:1a:cc:2a:c2:6a:1d:23:cc:08:6d:1b:36:1f:
73:83:2a:42:cf:b5:3f:d3:ce:c1:dd:4f:ab:70:ec:
16:67:5f:5c:bb:36:4f:c8:91:7c:15:48:29:e4:3c:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:6C:BD:35:4D:4B:51:5F:EB:7F:24:A5:AE:D2:73:14:EE:BA:4E
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/jWpsvTVNS1Ff638kpa7ScxTuuk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4a00:2b::/48
2a0c:4a01:1b::/48
2a0c:4a01:3b::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c7:3f:f0:11:c7:88:2d:48:b8:09:4c:9a:89:d2:bc:2b:45:
3d:4c:66:88:0d:ae:71:d5:32:df:48:fb:2c:2e:9c:5d:35:5b:
0d:65:43:55:f5:f0:94:86:40:fb:4b:92:9e:8f:18:63:6f:cd:
00:17:82:d8:90:b5:ca:5e:39:0f:fe:8c:a4:da:16:29:cd:2e:
a0:f9:a6:ea:e5:f6:06:94:ef:52:71:2b:00:25:e9:25:46:9a:
53:ee:59:f0:43:cb:56:79:1d:4b:f7:25:e6:6d:b3:17:d6:0e:
df:d8:39:6a:5d:70:ef:0b:50:df:3b:4a:61:eb:2d:df:eb:c9:
31:b3:7b:3e:6c:f1:45:7c:b7:d0:d0:a2:73:b8:14:84:cf:1e:
89:bf:c9:b9:2b:00:76:cf:bc:21:e9:79:62:5d:74:f1:15:1a:
d0:de:f2:d4:7d:1a:a4:d2:8b:ba:51:d3:22:f9:7c:2e:24:1c:
6b:60:2f:52:1e:5b:7f:b1:85:14:6c:ed:e1:15:d3:92:17:52:
34:26:a8:dc:85:17:53:d3:3f:7c:6d:0f:28:ec:c6:b4:8a:fa:
b8:f6:73:3e:15:d2:f3:57:36:21:70:80:7a:3f:11:e3:02:4a:
0b:16:fd:03:f3:41:96:42:58:db:ba:f7:ed:d9:a7:3d:5c:e2:
b0:9a:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:56 2025 by rpki-client