Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa
File: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (raw, json)
Hash identifier: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=
Subject key identifier: FB:E5:83:02:11:4E:05:6E:E7:71:2A:0C:F2:37:F1:BB:FC:7F:68:F0
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0194221FCA24C3DD1DABC2A17685D2D36F72
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60084
IP address blocks: 2a00:ab00:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:24:c3:dd:1d:ab:c2:a1:76:85:d2:d3:6f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe58302114e056ee7712a0cf237f1bbfc7f68f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:13:3a:e8:cd:c4:ea:8f:e4:7a:a1:06:97:
e1:26:ec:05:6a:a8:df:f6:3d:a9:ef:d5:36:1c:38:
31:ec:a6:04:87:9c:a3:16:1f:a8:ee:3e:2f:60:6c:
92:bd:fb:e4:61:44:c7:99:e0:82:77:61:dc:47:89:
68:2e:77:23:a2:d7:22:e9:94:23:22:ef:8a:d0:92:
d9:7f:70:7d:0b:10:16:8c:05:aa:6a:96:61:cc:a6:
10:1a:52:5d:8e:b0:7c:e7:8e:4c:83:01:78:22:bd:
ff:48:8d:c1:71:6e:84:49:74:cc:73:dc:15:d8:c2:
27:b5:45:57:23:dc:a3:e5:83:72:63:af:09:42:32:
6e:e3:1c:53:f5:99:2c:7a:48:89:cc:00:cb:56:d4:
19:5a:8c:aa:8b:a7:a0:b7:0e:7e:ca:37:ea:1b:a7:
74:18:cb:ab:af:db:1a:a5:45:26:6c:48:09:de:17:
94:5c:cf:b8:28:c6:18:c9:33:78:1a:8e:6b:32:22:
f4:f1:55:c6:f1:36:32:20:8a:6a:ad:23:93:4c:4f:
23:51:d0:82:69:cd:6f:33:92:24:13:17:fa:9e:23:
78:6e:83:10:11:77:f5:74:3d:94:62:59:26:ed:4e:
c2:70:6a:72:ee:ba:a3:0a:70:d8:17:af:fe:86:ef:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:83:02:11:4E:05:6E:E7:71:2A:0C:F2:37:F1:BB:FC:7F:68:F0
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ab00:7000::/36
Signature Algorithm: sha256WithRSAEncryption
0e:e8:22:d1:e1:33:37:85:0a:1a:0d:e4:66:84:cb:2b:27:ed:
02:c1:c9:54:cb:94:6d:21:61:9f:9a:4f:8f:e2:e2:24:df:23:
44:3e:3d:ee:54:8e:85:4c:9c:08:8f:1c:1e:e5:9b:7f:38:a8:
de:a1:00:80:54:d5:e1:ca:2e:1c:cc:f5:d9:9e:0e:db:5a:1a:
a6:54:10:d4:18:c8:49:99:de:5e:51:19:c4:41:f5:03:2f:91:
44:82:d8:d5:26:cb:2d:cb:43:21:06:03:c9:23:f7:dd:a1:ad:
c1:8a:e3:df:e2:c5:61:38:6f:50:65:c5:28:b8:67:d6:c5:22:
07:9a:be:81:46:53:b9:3e:56:08:97:63:ec:88:63:0b:06:b8:
dc:3c:4d:c9:ac:5e:54:1e:c5:e1:47:26:5e:ec:1b:1c:9b:0e:
e7:72:a4:77:63:67:c3:8b:93:8b:71:3d:c4:e7:7e:61:de:67:
8a:4a:78:f2:80:f1:cd:75:33:59:b2:07:83:51:f5:14:62:39:
e1:71:83:59:3b:3d:50:da:41:db:22:69:1e:97:13:63:6c:a3:
8e:1b:35:5d:89:94:5f:05:39:9f:4d:46:8e:40:c2:2c:1c:9c:
47:10:0c:69:a8:8f:1e:e9:95:75:04:e0:e1:42:09:4e:ef:e8:
26:e6:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:54 2025 by rpki-client