Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa
File: WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa (raw, json)
Hash identifier: 1/VFn2v02knd9dSenNmn42s5XXg6Yfw+0bFY3ogbnpY=
Subject key identifier: 58:FA:D8:93:76:45:62:BC:A1:6D:73:45:DB:F8:3F:41:50:B2:E4:6D
Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Certificate serial: 0194266C0ADEE07945E9962657AB2FA084F5
Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 2001:67c:9b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0a:de:e0:79:45:e9:96:26:57:ab:2f:a0:84:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58fad893764562bca16d7345dbf83f4150b2e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:24:37:84:32:22:54:85:d8:cb:f4:6f:f6:
ff:b2:77:31:d3:1b:f4:1f:a8:52:4f:f6:71:7b:fe:
47:91:c0:6b:78:ce:3b:f2:b3:19:f6:73:09:0c:a1:
ef:c9:5f:27:34:e4:d7:81:bc:c1:4e:5f:65:61:76:
f6:1e:75:20:64:a3:ec:37:39:53:4c:d2:aa:c6:d5:
51:52:53:5f:a2:1e:ac:74:b2:8b:8a:d3:55:3a:ea:
b9:68:93:68:bb:09:9e:54:4f:59:0d:55:e3:5d:bb:
61:9e:38:a7:46:44:67:e6:6d:26:83:50:08:94:40:
8c:41:a4:55:06:7a:9f:77:42:95:c8:35:94:f5:73:
6d:e8:4b:85:13:35:80:06:cd:6d:20:a9:65:e2:af:
2b:b6:a5:09:02:59:33:3e:a7:01:79:f3:7f:c3:ef:
2f:47:b9:ee:22:ca:a7:b6:c5:57:fe:23:32:2c:21:
dd:e3:5b:5c:f9:e2:e3:17:72:d6:e9:1e:4c:a8:07:
e5:29:59:2b:05:92:cb:d1:e3:b1:3a:06:89:39:fc:
7d:7e:ad:0c:8f:2d:fb:8b:28:4e:db:17:f6:50:c6:
c0:0d:bf:b8:8c:3f:1f:3e:7e:0f:81:e7:aa:ce:33:
a9:7e:e5:83:6c:5d:64:4a:ef:a2:2d:08:d7:2a:01:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:D8:93:76:45:62:BC:A1:6D:73:45:DB:F8:3F:41:50:B2:E4:6D
X509v3 Authority Key Identifier:
keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9b0::/48
Signature Algorithm: sha256WithRSAEncryption
74:d0:66:32:aa:ce:cd:4d:fa:32:7d:7f:b4:a5:d5:6b:ca:09:
62:06:ca:b2:b3:c7:58:f2:24:1a:30:10:74:4c:c3:c8:a3:f7:
c4:96:fb:12:0e:59:5e:7e:0f:b8:4b:05:20:db:56:1d:f1:2b:
e7:24:73:27:20:3f:6b:6b:6a:19:dc:14:41:00:1b:17:76:d0:
79:2e:f7:5f:28:8c:20:88:90:45:52:51:99:62:5b:a3:41:f6:
b3:92:73:b3:84:e7:e6:da:15:35:33:66:15:b1:1f:00:f7:1f:
10:b0:98:60:90:5f:82:cd:33:85:63:d1:d9:6e:29:66:06:ae:
e8:a9:19:8f:04:9f:be:e4:0c:bb:56:e3:7c:2d:b8:ce:f4:e9:
2e:ec:d9:41:1e:2e:79:f8:ad:2a:20:ba:24:10:60:38:dc:72:
0a:9a:9b:8d:3e:a3:c0:c6:0a:18:57:5c:1a:2b:3a:5d:60:25:
09:18:75:8c:92:5d:f9:aa:f2:3f:86:f2:cc:a6:f7:fb:2d:3b:
a6:ad:df:ca:15:48:21:2f:01:66:a9:be:f0:d4:78:0d:12:ec:
ac:41:67:69:23:0b:51:f0:95:c3:a6:c1:1e:59:f3:a7:73:82:
ea:9c:ac:b1:16:74:a1:91:ee:bc:6c:e1:e3:d2:8b:7f:ac:54:
ae:20:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:09 2025 by rpki-client