Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wnKEbgoRNpVfEZZXVeLf1tECj-0.roa
File: wnKEbgoRNpVfEZZXVeLf1tECj-0.roa (raw, json)
Hash identifier: hx6z7t2h2c1REXcE/j59dwCm2MefowQcnz0Qa9Eu/zs=
Subject key identifier: C2:72:84:6E:0A:11:36:95:5F:11:96:57:55:E2:DF:D6:D1:02:8F:ED
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59E785D324902FEB811D223C0EB75
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wnKEbgoRNpVfEZZXVeLf1tECj-0.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6713
IP address blocks: 80.15.243.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9e:78:5d:32:49:02:fe:b8:11:d2:23:c0:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c272846e0a1136955f11965755e2dfd6d1028fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:61:6d:4c:1b:5b:b7:d3:46:f5:2a:6f:4a:
1c:39:a4:05:87:1e:1e:a5:50:c2:1b:f4:dd:e2:ea:
44:93:0c:81:b4:3c:0e:92:49:ac:8e:0b:8f:ad:30:
1f:33:31:2b:b7:25:1d:1a:82:22:40:66:37:2d:ef:
43:3e:7d:e2:fd:e5:25:9b:13:3f:32:07:25:86:ff:
40:7e:19:b9:41:43:a2:2c:44:24:68:07:c8:74:ff:
a3:9d:b3:81:bd:cd:42:07:0e:a8:00:a3:30:f7:2e:
04:7a:d7:98:4d:7d:d9:27:74:e8:7b:15:74:5b:dc:
5e:4e:01:80:13:b7:54:15:81:fa:c8:2b:e7:c2:7e:
4e:2d:63:ce:02:c4:45:c5:67:f0:cd:c1:6b:25:72:
d6:25:75:ac:f7:98:30:ef:3a:63:f9:00:c5:b7:66:
8e:55:bc:10:b5:c5:94:0a:07:f6:fc:23:4c:d5:30:
3e:83:7a:97:e7:e8:2b:1a:8f:53:d8:9f:57:ce:72:
03:de:29:66:e8:46:2d:6c:97:fe:04:e6:d0:71:a6:
1b:18:39:55:ee:6b:c2:af:5c:26:6f:05:a6:4a:32:
cb:b3:2b:fe:45:81:0a:6f:42:ab:3f:6d:29:b5:0a:
2b:21:64:38:4f:bd:57:84:77:10:4e:4c:6b:ba:7e:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:84:6E:0A:11:36:95:5F:11:96:57:55:E2:DF:D6:D1:02:8F:ED
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wnKEbgoRNpVfEZZXVeLf1tECj-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.15.243.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3d:89:2e:e8:a2:66:c2:b3:5b:34:a7:32:9f:71:0c:13:f4:
34:3d:06:77:a2:ff:07:b9:6b:5e:45:b8:08:c6:8a:1b:35:50:
0d:33:0c:79:a9:2c:cf:0c:ab:b5:c6:1b:88:b7:c4:d4:fa:44:
e7:93:3a:9c:c6:ad:49:c5:a7:0d:23:1f:1e:34:28:f8:dd:34:
e1:93:08:0d:fe:2a:ae:24:fe:1c:d7:53:dc:41:87:90:b2:d0:
44:92:08:8b:ee:6a:60:01:34:04:cb:33:7a:a0:43:3d:5d:dc:
93:76:3a:63:2b:24:53:4a:13:eb:01:7b:0f:80:e8:b8:ec:56:
b2:e0:21:63:33:70:15:ce:23:04:ef:af:05:a1:78:cd:4f:25:
5f:0f:a7:c1:2c:07:92:1d:5b:46:6a:d7:d6:0f:52:8b:7f:c4:
68:fa:14:f4:d8:ec:77:29:c2:64:84:6d:c1:c3:20:6b:34:b5:
1c:7e:d6:d8:01:0c:44:0f:74:be:54:1d:50:66:7a:a8:3d:25:
c8:26:59:4f:5a:ec:43:c5:cb:7f:b0:5f:09:3b:05:54:34:06:
2e:60:d6:ca:5e:59:ea:d9:ab:97:da:40:3b:c0:28:f3:71:ad:
80:a0:e0:08:17:c6:19:61:22:ea:e3:c2:e0:ea:b1:b3:06:99:
68:bb:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:30:52 2025 by rpki-client