Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/wNB8kX5BAcu2XkWzCZEgPunHNqc.roa
File: wNB8kX5BAcu2XkWzCZEgPunHNqc.roa (raw, json)
Hash identifier: m3Os4yjsTiNvVrvudWWDmmi/i6khMrxyBWDNsJ3tNhg=
Subject key identifier: C0:D0:7C:91:7E:41:01:CB:B6:5E:45:B3:09:91:20:3E:E9:C7:36:A7
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 01938BEC764D7931A9C8504C23388E1BD11D
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/wNB8kX5BAcu2XkWzCZEgPunHNqc.roa
Signing time: Tue 03 Dec 2024 09:49:09 +0000
ROA not before: Tue 03 Dec 2024 09:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a06:1301:4120::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:ec:76:4d:79:31:a9:c8:50:4c:23:38:8e:1b:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Dec 3 09:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0d07c917e4101cbb65e45b30991203ee9c736a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:d2:8c:ef:78:32:97:59:16:c7:fa:de:5f:
46:b1:6d:16:a9:33:bb:e5:ea:31:06:10:c1:da:8b:
1c:78:f6:ac:f7:3d:6e:8a:92:14:40:ee:cb:21:98:
8b:9a:8c:24:52:73:8c:75:ad:ee:c6:61:59:b0:d9:
a4:eb:ae:b0:d3:e0:9b:64:be:c5:2e:c7:2e:87:37:
13:66:4c:8d:20:ee:0f:a8:d4:43:c5:72:ee:2a:39:
8f:47:bb:2f:08:85:f6:39:f7:11:82:a8:d2:25:6f:
cb:fb:8a:f7:9f:58:1d:7c:c4:1a:63:de:94:c0:a4:
02:97:6f:7f:4c:94:9c:b6:aa:84:ea:ad:bf:9d:82:
49:2a:e2:a1:6a:af:77:f5:c5:d5:19:43:8e:18:38:
9c:69:c8:16:b2:9e:bc:71:a3:fa:e9:c6:6d:98:8f:
81:f0:08:a8:b5:90:5b:88:99:f8:7c:1d:05:72:05:
72:36:07:21:c2:66:34:ad:63:83:db:dc:a6:7b:1f:
9c:01:01:c5:32:3e:86:c9:41:37:3a:e0:f6:8a:7f:
af:dc:ca:0a:3f:7c:ab:99:bd:d0:7e:b7:f5:28:31:
96:b7:df:eb:67:fc:cb:0e:31:83:e7:47:5a:cf:32:
17:9c:28:a7:55:e5:9f:a1:a4:ec:a9:c3:c9:3a:ff:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:7C:91:7E:41:01:CB:B6:5E:45:B3:09:91:20:3E:E9:C7:36:A7
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/wNB8kX5BAcu2XkWzCZEgPunHNqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4120::/48
Signature Algorithm: sha256WithRSAEncryption
92:55:0d:bc:d7:97:45:68:55:ab:28:74:bd:6c:ba:5d:77:12:
61:65:12:e9:e0:97:b1:3a:4f:12:9f:e5:e0:5e:ce:ea:47:fe:
f8:ec:1f:a3:07:cd:a7:67:ea:4c:c9:62:e7:7f:7a:9f:12:02:
d7:e8:63:43:de:12:6d:df:02:00:e3:b3:27:9a:53:12:aa:86:
e2:86:85:d0:61:1d:c4:cc:e1:c1:94:a6:51:e8:8f:8d:3c:a3:
8d:28:9a:7f:45:df:b9:d7:2c:b0:cb:fd:8b:11:b7:71:f3:0b:
b3:1d:23:ae:d0:d6:e3:62:41:34:f4:57:35:2b:54:02:5c:f0:
d4:bd:1c:f6:f5:77:47:ec:b7:70:8f:98:53:41:41:ed:25:96:
dc:de:82:4e:97:b6:74:dc:6f:5a:ac:56:7e:18:4d:a4:b8:00:
a8:d2:07:05:7a:1f:35:d9:3c:b8:7f:ec:09:26:3b:7e:2d:90:
6e:c1:9c:05:ed:0d:d6:6f:15:93:30:2e:1f:bc:af:39:ff:4d:
6e:6d:c3:89:df:db:48:d6:25:e2:77:84:7c:b2:67:5d:90:19:
55:4a:f1:2f:48:68:0c:fc:3e:5b:3d:26:31:39:30:27:e4:8f:
3b:8e:06:63:d3:15:83:c4:17:d0:28:ca:1a:dd:bd:f5:00:be:
2d:96:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:35:59 2025 by rpki-client