Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/WFimyiGgr92WOtaD0Vnwh9y9DUY.roa
File: WFimyiGgr92WOtaD0Vnwh9y9DUY.roa (raw, json)
Hash identifier: LIt1lZH6klNm32B+ey0MuUQHbVjTOwezeyiwO+JHwkA=
Subject key identifier: 58:58:A6:CA:21:A0:AF:DD:96:3A:D6:83:D1:59:F0:87:DC:BD:0D:46
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 0188E33AB7DD68CA723DC2A81E243B686492
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/WFimyiGgr92WOtaD0Vnwh9y9DUY.roa
Signing time: Thu 22 Jun 2023 13:10:56 +0000
ROA not before: Thu 22 Jun 2023 13:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198150
IP address blocks: 2a00:1c28:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:3a:b7:dd:68:ca:72:3d:c2:a8:1e:24:3b:68:64:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jun 22 13:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5858a6ca21a0afdd963ad683d159f087dcbd0d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:54:5a:02:cb:67:58:43:83:cf:a1:10:43:
08:78:37:b1:25:a6:02:c4:eb:60:46:cf:07:38:ae:
38:b5:9d:36:80:f3:9a:7f:fa:22:fb:96:eb:de:c3:
7e:54:b0:f0:50:23:a3:65:a4:d1:34:8f:c1:b2:1f:
43:37:d7:74:e4:31:63:e5:37:09:fe:be:98:fe:31:
b0:63:9f:2b:20:0a:b1:d8:f6:f0:89:3e:7d:6d:67:
32:5d:e5:1d:48:70:c0:fb:52:08:b4:91:02:6f:4a:
e6:81:ff:69:44:a2:89:39:f8:2d:d4:cf:75:d9:f3:
9a:1b:4f:4c:1c:a2:e7:a9:a2:0b:f7:d2:8e:c3:f6:
91:8a:23:a9:96:3b:07:d2:2d:28:1f:64:ae:cd:b6:
cd:f3:bd:95:f7:26:1a:45:14:43:be:67:43:28:69:
bd:ef:ad:38:6b:c5:7b:2e:41:f5:99:a3:d8:6c:ab:
f8:96:28:08:eb:76:f1:d9:1f:b2:2b:89:f2:72:77:
e7:48:66:de:ab:24:62:34:57:a9:52:99:41:e3:23:
de:73:63:a8:75:5c:5c:ff:ee:b0:48:b7:e2:a3:a7:
0f:ff:6e:58:32:21:69:57:a2:5d:ad:44:d2:b7:f2:
82:d5:bf:34:32:10:4e:74:16:ec:53:26:8f:2e:55:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:A6:CA:21:A0:AF:DD:96:3A:D6:83:D1:59:F0:87:DC:BD:0D:46
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/WFimyiGgr92WOtaD0Vnwh9y9DUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1c28:6::/48
Signature Algorithm: sha256WithRSAEncryption
bd:89:a2:e6:1e:6e:1b:91:b7:aa:b1:8a:d3:6f:df:ef:24:74:
36:1a:f1:93:e2:46:5d:6e:2f:a7:00:3f:1e:cf:58:b1:45:cc:
42:95:17:32:5b:95:e8:fc:7b:5d:4a:a9:14:a7:26:06:76:c7:
45:d2:28:28:7e:85:ce:60:07:14:91:c3:62:1c:c4:00:61:be:
b3:ec:96:8f:dd:04:64:41:34:6b:a5:e4:e0:e9:67:4a:1b:e4:
12:19:14:16:85:6e:db:20:36:3d:c9:50:0d:85:4c:80:d9:9e:
80:27:36:31:4f:9a:ca:1f:ef:a3:d3:6e:31:7e:15:09:22:de:
61:0a:c7:ac:d8:9d:1b:29:ad:e0:55:c0:0e:38:17:0a:08:22:
88:68:da:13:6a:7a:49:c4:6d:75:75:b6:12:18:23:d1:d8:8e:
f9:b1:76:c0:85:5b:10:82:44:52:9b:1a:9c:80:8d:35:1b:ee:
15:76:3c:2f:ce:b3:74:a7:ab:4c:97:51:b2:5a:6b:49:95:81:
74:a3:28:75:68:d8:b3:9e:04:9a:79:bd:d5:19:22:a4:76:b4:
51:19:9e:54:1c:d4:1c:96:a1:00:fe:67:31:d3:18:45:b8:9a:
c5:60:e0:04:52:96:9a:f6:8b:f8:ca:35:83:f0:46:85:6f:ad:
d1:b5:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:19:55 2025 by rpki-client