Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wb0BNCBNixc55_00G3xKCIeaaJ8.roa
File: wb0BNCBNixc55_00G3xKCIeaaJ8.roa (raw, json)
Hash identifier: +BWJAaArk3SAGCRi2b2mHS3arPB0fWKzQhvIJVo8KRA=
Subject key identifier: C1:BD:01:34:20:4D:8B:17:39:E7:FD:34:1B:7C:4A:08:87:9A:68:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C34BC745ED9F7B132FAEC5CE31AE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wb0BNCBNixc55_00G3xKCIeaaJ8.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5687
IP address blocks: 2a0e:b107:2130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c3:4b:c7:45:ed:9f:7b:13:2f:ae:c5:ce:31:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1bd0134204d8b1739e7fd341b7c4a08879a689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:ab:2a:26:5b:29:ba:93:ef:b5:b6:ad:9f:
d1:7e:31:ae:cd:89:2a:69:17:32:aa:de:65:f9:74:
36:d2:0a:b9:20:1d:87:dc:51:80:db:f2:c6:17:b3:
ab:c4:4f:fc:aa:24:7f:85:54:77:8f:43:db:38:04:
ef:d7:64:41:7c:39:ef:7a:6e:50:12:17:d7:bf:76:
cb:07:90:e6:a2:bd:f1:3b:63:76:3f:47:44:a5:89:
d8:80:b8:ec:45:18:e1:3d:f7:13:6f:4e:2b:89:b9:
e7:ee:9c:30:0d:86:dd:40:33:49:e3:01:fb:f4:d7:
ce:6d:4b:7c:4b:8e:2c:82:7d:25:d1:7b:f7:13:fd:
1a:44:ea:7f:14:61:38:00:80:e3:ca:34:b2:da:5d:
d0:71:78:ef:cc:55:ce:00:70:b9:57:99:97:4f:79:
eb:f8:42:1b:60:20:c2:6d:74:b2:d2:0f:5e:f6:7d:
72:c5:85:30:f1:3f:c1:22:34:a0:7b:e9:1c:64:ac:
06:b7:11:3d:d2:8a:77:28:28:91:aa:63:33:7f:ad:
23:a9:a6:b5:95:21:ef:8e:1c:e7:5e:59:b7:be:23:
20:f9:29:91:7f:fa:72:e5:07:e9:a5:13:60:2a:87:
12:5b:2f:71:45:04:fd:17:02:26:b2:6b:65:9a:fa:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:01:34:20:4D:8B:17:39:E7:FD:34:1B:7C:4A:08:87:9A:68:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wb0BNCBNixc55_00G3xKCIeaaJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2130::/44
Signature Algorithm: sha256WithRSAEncryption
7c:31:12:13:de:9a:90:0c:2f:3f:48:c0:7b:f4:95:ab:5a:09:
3f:71:64:3a:ab:ba:21:51:5f:b2:0a:80:6d:44:3c:45:43:8c:
19:bd:70:85:e1:df:0e:e1:af:d1:66:b0:b6:f8:d8:9d:f5:53:
1c:35:3c:3a:e8:5f:b1:bc:83:90:33:34:c5:c4:88:df:bc:9a:
fe:1f:89:81:3e:59:a1:82:ba:97:e4:6e:be:1e:c0:a4:88:93:
90:c4:db:33:9c:96:4b:8d:ee:2f:f9:05:2e:5a:b5:4b:ff:ff:
10:d2:36:63:1b:5e:50:95:ff:a5:3f:50:cd:8b:ed:93:a9:11:
b7:8b:e7:42:b7:5b:ad:84:e9:2b:93:8c:0b:a7:72:d4:70:88:
8c:ae:4d:98:2d:3a:69:bd:07:f2:2b:b2:8b:92:19:2d:99:30:
80:b1:c7:5f:10:fb:24:b8:70:b5:5b:87:9b:9a:ad:25:41:30:
80:de:5c:5d:19:0c:d0:19:e5:6f:54:2f:ac:03:9c:90:36:98:
b9:90:3b:e4:a5:a5:79:21:b1:39:5c:30:86:fa:7f:2d:d6:87:
54:03:53:36:de:e5:87:9e:96:c4:af:70:57:6a:26:4d:2a:b8:
01:68:a0:65:5f:d4:86:8a:f6:f2:9e:6d:5b:87:6e:b3:fc:2f:
e8:21:62:82
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIcNLx0Xtn3sTL67FzjGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJkMDEzNDIwNGQ4YjE3MzllN2ZkMzQxYjdjNGEwODg3OWE2ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryKrKiZbKbqT77W2rZ/RfjGuzYkq
aRcyqt5l+XQ20gq5IB2H3FGA2/LGF7OrxE/8qiR/hVR3j0PbOATv12RBfDnvem5Q
EhfXv3bLB5Dmor3xO2N2P0dEpYnYgLjsRRjhPfcTb04ribnn7pwwDYbdQDNJ4wH7
9NfObUt8S44sgn0l0Xv3E/0aROp/FGE4AIDjyjSy2l3QcXjvzFXOAHC5V5mXT3nr
+EIbYCDCbXSy0g9e9n1yxYUw8T/BIjSge+kcZKwGtxE90op3KCiRqmMzf60jqaa1
lSHvjhznXlm3viMg+SmRf/py5QfppRNgKocSWy9xRQT9FwImsmtlmvpKEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMG9ATQgTYsXOef9NBt8SgiHmmifMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvd2IwQk5DQk5peGM1NV8wMEczeEtDSWVhYUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByEw
MA0GCSqGSIb3DQEBCwUAA4IBAQB8MRIT3pqQDC8/SMB79JWrWgk/cWQ6q7ohUV+y
CoBtRDxFQ4wZvXCF4d8O4a/RZrC2+Nid9VMcNTw66F+xvIOQMzTFxIjfvJr+H4mB
PlmhgrqX5G6+HsCkiJOQxNsznJZLje4v+QUuWrVL//8Q0jZjG15Qlf+lP1DNi+2T
qRG3i+dCt1uthOkrk4wLp3LUcIiMrk2YLTppvQfyK7KLkhktmTCAscdfEPskuHC1
W4ebmq0lQTCA3lxdGQzQGeVvVC+sA5yQNpi5kDvkpaV5IbE5XDCG+n8t1odUA1M2
3uWHnpbEr3BXaiZNKrgBaKBlX9SGivbynm1bh26z/C/oIWKC
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:40 2025 by rpki-client