Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/wVbnrxwKxuyFCykAZfTxIk8usp4.roa
File: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (raw, json)
Hash identifier: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=
Subject key identifier: C1:56:E7:AF:1C:0A:C6:EC:85:0B:29:00:65:F4:F1:22:4F:2E:B2:9E
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 019425FD59F1D946DE635A1CDE612B9664BB
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/wVbnrxwKxuyFCykAZfTxIk8usp4.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 2a03:62a0:4901::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:59:f1:d9:46:de:63:5a:1c:de:61:2b:96:64:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c156e7af1c0ac6ec850b290065f4f1224f2eb29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:b3:da:db:ed:14:90:ae:8e:d2:41:42:85:
7c:57:95:9f:97:d8:85:b9:70:e2:d8:92:e5:c0:be:
62:56:ab:69:73:98:22:0e:53:c2:90:92:a3:78:a2:
e6:94:d4:ab:9f:97:16:6f:c2:45:32:95:d8:fc:a3:
ea:62:98:e6:7d:9b:17:9d:69:23:2b:34:89:c1:b7:
d2:91:1c:f1:7e:c2:0b:3a:dc:8d:36:3c:90:05:d8:
0b:64:29:0c:cd:60:42:71:b8:63:19:0c:c6:f8:c3:
44:18:f3:a6:13:15:ab:72:24:3c:ba:c8:3c:c8:df:
97:a7:de:9a:59:78:50:f9:75:37:06:f6:bc:b6:10:
51:fb:a3:a7:a4:e2:1a:6e:19:ee:dc:8d:55:6c:1b:
73:9d:76:e6:6f:42:d3:ad:ed:b6:dc:64:55:06:73:
1b:21:a4:96:35:52:15:ec:cf:72:32:95:45:72:eb:
1d:9b:68:d4:07:2f:0f:79:7b:50:d3:81:b8:5b:8f:
9e:62:ef:a9:7d:1c:c0:5c:a0:72:c1:7e:91:9d:b3:
b7:88:e7:f9:4e:7f:3f:dd:32:7e:c5:e7:8f:85:c6:
ca:76:5f:df:f2:2c:81:a8:50:7e:a7:58:7a:56:1e:
39:5a:67:47:36:90:39:9c:84:f7:87:db:84:ad:ab:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:E7:AF:1C:0A:C6:EC:85:0B:29:00:65:F4:F1:22:4F:2E:B2:9E
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/wVbnrxwKxuyFCykAZfTxIk8usp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:62a0:4901::/48
Signature Algorithm: sha256WithRSAEncryption
b1:3e:8b:6f:8d:46:20:a6:81:65:c2:26:ed:75:c7:01:53:73:
33:b9:91:b7:fd:0d:29:3e:b7:87:5d:a6:ad:dc:b9:f8:0b:ba:
c2:27:96:a9:56:e8:5c:e1:53:fc:b0:18:3a:65:e0:ba:cf:c4:
53:ae:21:fd:3a:1c:69:83:a9:0e:75:aa:4b:e8:2f:2b:e6:9b:
ec:33:99:6e:66:a2:65:16:e7:76:d9:4c:3a:f5:18:ad:9e:b2:
29:88:c7:72:6e:9c:ca:c6:b4:d8:fe:03:21:79:47:6f:f8:6a:
bd:ad:ee:d6:19:1f:11:98:3c:ae:c7:f2:f8:a9:28:f6:a7:c1:
cc:c2:61:98:95:6f:35:61:d0:d9:40:c8:63:8e:c1:12:fd:22:
d7:36:3e:fe:56:37:96:7a:b6:15:2d:b2:3c:76:81:a9:83:52:
b2:2c:21:61:4c:8f:d3:59:84:45:bc:42:48:6a:42:de:1b:d7:
8f:e2:3b:3c:9c:19:2a:1d:f7:02:d9:c0:44:db:18:bb:c2:86:
34:2d:3a:1a:27:82:0b:cd:80:ae:70:88:d3:02:4c:39:bf:02:
da:7a:1f:f4:40:6e:7e:51:f5:b8:fd:c5:53:6a:24:b2:3e:97:
9f:33:61:40:e3:ad:cb:82:69:03:62:73:42:64:fd:8b:8a:57:
53:a3:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:22:24 2025 by rpki-client