Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fWpoWhletGcetsSLSygDCaFQmVE.roa
File: fWpoWhletGcetsSLSygDCaFQmVE.roa (raw, json)
Hash identifier: hOgkiiVSzpW3K1emleUfN8QGVHRRsrIHv4agvqJ1YMA=
Subject key identifier: 7D:6A:68:5A:19:5E:B4:67:1E:B6:C4:8B:4B:28:03:09:A1:50:99:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227DD052F5AF4E34D861EC4FABAD68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fWpoWhletGcetsSLSygDCaFQmVE.roa
Signing time: Thu 02 Jan 2025 03:50:04 +0000
ROA not before: Thu 02 Jan 2025 03:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214592
IP address blocks: 2a0e:97c0:420::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7d:d0:52:f5:af:4e:34:d8:61:ec:4f:ab:ad:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d6a685a195eb4671eb6c48b4b280309a1509951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:6c:0e:62:b8:9c:53:3f:cc:b5:f7:38:c4:
b7:6e:27:22:5d:8b:cf:44:71:22:20:98:1c:4e:20:
ed:ed:9b:ac:ad:3f:58:5c:03:5c:94:83:37:c4:85:
48:a5:b1:9a:49:5b:9b:e7:a7:9a:fa:ae:58:fa:4f:
ae:a8:86:9b:02:02:e5:80:14:c2:a0:28:41:d1:5c:
10:4c:6a:20:61:a4:df:e2:8e:f3:c5:ae:76:a2:f0:
9d:52:53:1d:ff:f4:2a:af:9d:be:f0:bc:99:19:2c:
08:08:41:c4:19:cd:3e:bf:2c:df:17:d5:ca:48:37:
ac:3e:52:f1:3a:17:6f:e8:df:1e:3d:63:c0:b9:3e:
55:28:d4:c2:2e:81:6d:17:9e:91:dc:e8:e9:c4:df:
d5:9d:70:9e:1f:32:49:00:63:93:bf:ba:3a:6d:7d:
78:7f:0c:49:d4:2e:b1:40:54:2e:40:f1:b7:ff:45:
03:3d:d3:ed:de:ca:8b:a0:56:86:c2:4c:dd:7f:31:
34:68:44:81:5c:b2:02:10:a9:eb:58:7c:c4:51:6f:
df:55:97:37:03:b9:b8:f4:73:5b:cc:05:e7:fa:57:
5f:bc:ec:67:ab:46:a0:f2:b1:98:5f:f9:eb:28:0a:
cf:ff:b8:c4:73:11:c1:ee:e8:00:be:3c:59:05:84:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:68:5A:19:5E:B4:67:1E:B6:C4:8B:4B:28:03:09:A1:50:99:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fWpoWhletGcetsSLSygDCaFQmVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:420::/44
Signature Algorithm: sha256WithRSAEncryption
5f:4a:50:e8:7e:49:2d:27:d7:f9:9b:1b:12:22:a3:f6:73:82:
a0:41:3a:df:f9:46:fd:35:58:d1:a5:c3:1e:ca:d7:cd:b1:90:
6e:87:e0:c8:da:45:28:59:c5:6b:35:ff:5f:79:28:db:5a:36:
13:d0:04:94:21:9f:73:ec:00:38:ec:2e:85:ab:1f:f1:9c:3c:
f2:08:48:82:3f:39:37:86:3b:ec:36:c2:23:cb:24:0c:43:42:
95:93:4e:f8:d1:10:b2:9e:c4:91:a8:78:77:c1:7f:51:ae:75:
a4:9f:33:85:1d:e3:ca:20:9f:9f:7d:c0:3b:1d:26:d2:c3:f7:
ec:ff:58:5d:5f:38:50:ed:b9:ed:84:69:b8:a7:8a:17:a5:06:
e9:71:8c:b0:f1:51:6d:78:c1:9e:39:3b:16:a0:7c:06:fe:6e:
12:04:8e:74:1b:65:21:87:eb:84:01:49:63:49:74:a5:ca:3e:
88:2b:b5:03:40:ac:46:d9:42:36:8d:cb:f0:20:15:c3:9a:6c:
68:14:6b:c2:8f:6c:f5:c4:9a:f6:ea:eb:68:ee:1b:ce:14:6e:
52:8f:db:20:bf:27:0b:07:fd:c4:81:f0:7b:29:51:3e:0e:5f:
33:1d:e5:bb:9c:5c:5d:2f:bd:f3:cc:60:5e:20:8e:89:d6:f6:
5a:a8:5d:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIn3QUvWvTjTYYexPq61oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZhNjg1YTE5NWViNDY3MWViNmM0OGI0YjI4MDMwOWExNTA5OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI1sDmK4nFM/zLX3OMS3biciXYvP
RHEiIJgcTiDt7ZusrT9YXANclIM3xIVIpbGaSVub56ea+q5Y+k+uqIabAgLlgBTC
oChB0VwQTGogYaTf4o7zxa52ovCdUlMd//Qqr52+8LyZGSwICEHEGc0+vyzfF9XK
SDesPlLxOhdv6N8ePWPAuT5VKNTCLoFtF56R3OjpxN/VnXCeHzJJAGOTv7o6bX14
fwxJ1C6xQFQuQPG3/0UDPdPt3sqLoFaGwkzdfzE0aESBXLICEKnrWHzEUW/fVZc3
A7m49HNbzAXn+ldfvOxnq0ag8rGYX/nrKArP/7jEcxHB7ugAvjxZBYQNfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH1qaFoZXrRnHrbEi0soAwmhUJlRMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZldwb1dobGV0R2NldHNTTFN5Z0RDYUZRbVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAQg
MA0GCSqGSIb3DQEBCwUAA4IBAQBfSlDofkktJ9f5mxsSIqP2c4KgQTrf+Ub9NVjR
pcMeytfNsZBuh+DI2kUoWcVrNf9feSjbWjYT0ASUIZ9z7AA47C6Fqx/xnDzyCEiC
Pzk3hjvsNsIjyyQMQ0KVk0740RCynsSRqHh3wX9RrnWknzOFHePKIJ+ffcA7HSbS
w/fs/1hdXzhQ7bnthGm4p4oXpQbpcYyw8VFteMGeOTsWoHwG/m4SBI50G2Uhh+uE
AUljSXSlyj6IK7UDQKxG2UI2jcvwIBXDmmxoFGvCj2z1xJr26uto7hvOFG5Sj9sg
vycLB/3EgfB7KVE+Dl8zHeW7nFxdL73zzGBeII6J1vZaqF3Q
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:02 2025 by rpki-client