Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/wr12a9AIrcr_aNyfTvBnBd_4UPk.roa
File: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (raw, json)
Hash identifier: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=
Subject key identifier: C2:BD:76:6B:D0:08:AD:CA:FF:68:DC:9F:4E:F0:67:05:DF:F8:50:F9
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019422FB11348871A1D72E5AD19896393632
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/wr12a9AIrcr_aNyfTvBnBd_4UPk.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206402
IP address blocks: 2001:67c:990::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:11:34:88:71:a1:d7:2e:5a:d1:98:96:39:36:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2bd766bd008adcaff68dc9f4ef06705dff850f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:e8:eb:5a:96:dc:60:65:cb:f0:7d:06:7f:
e3:36:3f:2b:90:9c:1d:64:62:ff:40:14:d4:56:c3:
29:38:6f:ec:0e:f1:8c:18:57:38:ed:7c:9d:2e:bf:
b2:0c:41:af:d3:d4:df:30:94:b0:81:05:4b:59:60:
f3:c3:09:93:78:b5:94:60:65:24:ba:a1:07:21:fe:
4a:96:bb:b2:b0:5a:c6:22:b1:b4:ad:a6:28:ec:a7:
e4:01:05:df:aa:7b:ca:5f:67:ca:d2:30:59:2b:96:
2b:89:75:f2:99:88:9d:d0:d1:b7:21:92:d1:90:67:
58:3f:1f:e1:af:c9:58:b5:32:01:61:5a:ab:35:6f:
00:1f:7f:91:13:c7:b5:4f:81:06:0c:e4:04:04:3a:
37:9f:b5:c7:cb:e4:8b:74:a9:db:13:e0:68:1a:76:
07:c6:0a:27:ae:9f:50:ca:64:02:ff:fc:ca:fc:fa:
a8:6c:88:25:35:9a:23:38:8c:9b:9b:35:98:c3:f2:
da:a2:cf:e2:fd:ba:5c:c7:be:04:7c:13:e1:d3:0e:
0d:53:53:5d:8a:a1:61:00:03:39:e4:27:cb:05:09:
8c:7c:53:84:9b:c2:32:0d:60:72:70:67:fb:f4:eb:
f9:51:f3:86:69:b4:fd:4a:af:dc:b3:3a:07:1c:77:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:76:6B:D0:08:AD:CA:FF:68:DC:9F:4E:F0:67:05:DF:F8:50:F9
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/wr12a9AIrcr_aNyfTvBnBd_4UPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:990::/48
Signature Algorithm: sha256WithRSAEncryption
08:c2:fa:2c:87:1e:6b:35:d4:bd:2d:4b:50:92:ab:14:64:9b:
a2:d6:b4:18:ad:6a:97:bf:89:3f:66:4b:c7:d7:1e:ca:39:26:
cb:ee:4a:81:fe:83:51:15:9c:e9:90:ab:dd:55:2e:37:cf:ce:
44:16:48:70:23:fa:06:89:9c:af:5d:fc:92:08:04:35:63:5f:
96:ce:0c:10:ea:e8:3a:fd:e1:72:d5:c7:f2:29:9d:88:80:16:
8f:0f:46:54:0b:9b:44:50:22:eb:42:bf:96:26:74:9a:1e:c8:
68:36:8b:ef:d4:0e:11:c9:b3:7d:59:13:f1:fb:63:0e:a7:62:
b9:ae:58:55:48:0d:b9:0d:79:c6:9f:bf:ea:04:0e:c2:12:50:
5e:92:5c:df:92:ee:16:2d:02:01:58:d8:b6:c8:14:28:a8:84:
66:1d:da:31:bb:48:b1:59:81:bb:35:75:11:1b:53:11:63:e5:
92:fb:41:f1:ea:d7:d2:0a:08:6f:16:7a:e9:f3:b7:e8:f2:99:
11:b6:3d:f4:db:ec:af:6f:6b:bf:62:4a:a0:c4:db:20:f2:b5:
a2:38:72:8b:cd:07:1f:85:c4:6f:64:c7:34:ef:2e:fc:7d:07:
75:63:6c:6f:65:3d:a1:3e:2f:33:f5:99:c9:ee:41:10:91:63:
c9:9e:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:58 2025 by rpki-client