Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/wmRMgS8wuKYFpB7L8duZa5b1UW0.roa
File: wmRMgS8wuKYFpB7L8duZa5b1UW0.roa (raw, json)
Hash identifier: wAM8JmbNHlXq/+t0G16QnUToLXun4b0Rpv/o/24ejwk=
Subject key identifier: C2:64:4C:81:2F:30:B8:A6:05:A4:1E:CB:F1:DB:99:6B:96:F5:51:6D
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 01856C13928B8B1B48FBDA13328ABC187F96
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/wmRMgS8wuKYFpB7L8duZa5b1UW0.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210916
IP address blocks: 2a11:6c6::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:92:8b:8b:1b:48:fb:da:13:32:8a:bc:18:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2644c812f30b8a605a41ecbf1db996b96f5516d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:ec:ff:19:a8:9a:f7:83:a4:fb:2f:09:cc:
b0:69:d8:12:2f:51:b6:1c:08:0c:dd:69:be:b1:68:
44:ca:58:b4:89:17:1c:ac:12:56:9b:18:69:19:f0:
ec:14:fa:c4:4f:76:94:ee:87:84:93:d8:f1:9e:8d:
b6:9b:d2:14:32:9f:76:a5:4e:ce:5d:fe:f8:90:b7:
e4:20:f8:84:86:05:d3:e2:b1:7b:d1:15:cc:f0:10:
28:6f:d2:54:3e:44:67:7f:db:af:33:3d:d8:29:ef:
26:42:bb:4d:86:77:76:c8:ba:99:16:41:72:a0:71:
84:ee:c9:51:f5:4a:59:b4:e4:7a:4e:bd:a7:f5:17:
90:f8:d4:04:bb:78:53:a7:d2:b9:66:1a:a8:84:84:
68:9a:4f:e1:c6:33:fc:c6:4a:90:a2:99:9f:79:80:
d4:1c:22:5e:0d:28:f4:45:2f:47:31:86:96:6e:59:
c0:70:78:f0:66:1b:f1:cf:b7:dc:17:6b:ca:79:d4:
bc:56:b7:ab:dd:e9:07:b7:6b:2b:f5:16:7a:b4:94:
7e:fe:7c:ca:44:2d:c8:f9:ad:87:1b:c7:bc:3a:33:
01:0f:4e:bd:c6:45:25:f6:07:71:da:1c:62:82:e1:
66:38:5d:11:c6:c0:9d:16:69:f9:db:e9:11:9f:14:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:64:4C:81:2F:30:B8:A6:05:A4:1E:CB:F1:DB:99:6B:96:F5:51:6D
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/wmRMgS8wuKYFpB7L8duZa5b1UW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6c6::/32
Signature Algorithm: sha256WithRSAEncryption
34:fe:8d:cf:39:2a:55:18:8e:63:c7:ce:0f:55:7a:78:48:b6:
04:11:84:b9:cd:d2:be:f2:8f:12:84:09:32:c6:75:f5:c2:b3:
e1:ff:d1:34:4e:71:0a:a4:da:56:0a:ed:02:2f:09:d1:4f:bc:
93:18:31:70:4e:d4:f9:52:c3:c2:bf:cb:2b:2a:d0:e4:ce:9a:
54:1d:16:e6:0f:01:b1:32:40:8b:93:69:67:f1:24:9d:ec:a0:
ca:3d:b9:0a:62:79:a2:cd:f4:9a:4f:8f:98:90:0b:1d:5f:58:
35:70:a2:9f:dc:da:af:eb:cd:23:bb:92:f0:0c:c0:eb:ca:f5:
c5:5d:03:a0:86:ce:07:2a:9c:98:36:02:79:90:89:10:99:23:
b8:ad:72:40:b0:dc:a4:60:50:ce:48:5d:7f:25:6a:8b:f9:ce:
73:2c:0d:11:c3:b0:9e:92:3f:a1:0a:ac:e9:e2:fb:f0:80:5f:
42:90:fd:ea:65:2b:3c:25:08:a6:77:00:f6:11:4d:d7:0d:c2:
9f:5f:8d:49:12:f5:f8:b7:0b:06:2e:8d:6d:d4:6f:d1:5d:36:
d3:df:e5:9a:eb:d8:c8:50:42:83:5c:b5:52:e2:74:fe:a1:03:
e3:83:dd:06:80:08:09:51:be:61:9c:5c:1c:1f:94:39:24:e1:
36:6f:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:30 2025 by rpki-client