Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/wlsbMnRl_YXQKLY4J-I4XKJStjg.roa
File: wlsbMnRl_YXQKLY4J-I4XKJStjg.roa (raw, json)
Hash identifier: 9Qiy7xS6MeqO/aaNsUt4NW77aekBy2kBq/+6kOGqOAA=
Subject key identifier: C2:5B:1B:32:74:65:FD:85:D0:28:B6:38:27:E2:38:5C:A2:52:B6:38
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01856F54AD0DFDE69E4D9A586AF18FE3F417
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/wlsbMnRl_YXQKLY4J-I4XKJStjg.roa
Signing time: Sun 01 Jan 2023 21:54:58 +0000
ROA not before: Sun 01 Jan 2023 21:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199578
IP address blocks: 2a03:db80:3824::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:ad:0d:fd:e6:9e:4d:9a:58:6a:f1:8f:e3:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 21:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c25b1b327465fd85d028b63827e2385ca252b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:04:91:ca:0f:43:2b:e6:e3:d3:b4:cc:0c:
74:73:df:90:0d:c4:c7:f6:12:5b:ef:3f:b1:ae:b3:
eb:6d:c8:a8:03:d7:c9:7c:87:3a:df:b6:57:34:f3:
d2:a7:f2:14:b5:58:8c:ed:e5:4b:d2:99:66:86:f2:
66:ae:92:2e:3f:90:be:9d:e1:d0:96:7b:a7:ad:16:
d3:de:0a:5f:cf:e9:8b:71:d2:43:34:bc:9d:97:eb:
0c:63:b3:97:32:1f:1f:db:15:4c:2f:f5:94:7e:ec:
d1:31:33:15:65:62:78:ac:60:35:f8:ce:96:d1:79:
7a:88:eb:77:fd:f1:5e:c0:b3:9f:ef:53:6e:3a:30:
2b:46:75:94:1c:36:23:50:a5:93:c0:69:ab:b4:c6:
6d:bd:97:ec:82:c6:34:12:05:e9:91:ce:6c:f4:b1:
0e:5e:66:46:93:13:29:8d:4f:43:61:99:23:c7:fb:
2d:f2:ca:c5:ff:4c:9c:43:a3:5a:1e:d4:f4:0f:15:
97:d1:5d:7e:a6:84:7c:11:79:f3:eb:f9:a4:2a:94:
34:49:2a:71:5a:f5:4b:da:d4:a0:7b:c3:db:11:a7:
f2:d9:d1:76:55:72:ed:8a:51:63:19:72:b7:ac:0b:
39:2e:74:48:3f:c9:a6:89:e8:47:9d:0b:c6:b2:f8:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:1B:32:74:65:FD:85:D0:28:B6:38:27:E2:38:5C:A2:52:B6:38
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/wlsbMnRl_YXQKLY4J-I4XKJStjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:db80:3824::/48
Signature Algorithm: sha256WithRSAEncryption
85:18:e3:f3:2f:08:bb:8f:6d:00:3c:a4:34:b0:6d:ac:41:49:
a0:ed:67:08:f2:d3:59:ef:92:97:7d:84:d4:ee:69:c7:4c:7d:
d7:1f:a1:cd:9c:62:4a:eb:94:e5:d4:df:52:db:27:f6:d9:28:
92:fb:a3:13:11:a5:ad:8d:ca:15:95:62:1b:48:2b:f4:ab:36:
09:66:0c:ff:9b:88:18:7b:2e:55:22:40:da:b4:88:b4:c4:67:
e0:51:e8:f5:b8:48:5b:36:6f:dd:c0:e7:51:ff:1f:04:35:d3:
66:f8:21:24:8d:48:5d:19:16:12:96:41:14:d4:69:1b:69:05:
15:92:c7:b0:25:ac:58:96:09:d2:6d:4b:11:7a:5a:3f:1d:9a:
fd:b2:0e:43:c4:d9:a7:3e:db:f2:b5:01:ea:39:22:7a:80:16:
f8:c0:66:74:14:e7:17:1f:e2:3c:59:40:5e:86:51:bf:91:64:
89:ba:78:5a:db:e1:0c:86:99:f8:18:f4:f7:4b:14:57:33:96:
8d:2f:ef:de:2d:17:90:5a:c1:2f:c8:df:b5:21:a7:d7:ca:3f:
ad:ed:43:ab:3f:6e:83:58:6e:48:f1:5e:bc:90:43:76:3c:a5:
85:4f:c1:5f:2b:ae:34:c1:b5:43:15:ec:1b:10:03:3c:e6:d2:
81:07:99:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:28 2025 by rpki-client