Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1WEBAU6iEWDPdvAXAacHBvCMwBc.roa
File: 1WEBAU6iEWDPdvAXAacHBvCMwBc.roa (raw, json)
Hash identifier: UeXAavh+n54m7pHM7DPR+QWSYe9sETCN1wOkKxXHgxc=
Subject key identifier: D5:61:01:01:4E:A2:11:60:CF:76:F0:17:01:A7:07:06:F0:8C:C0:17
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019422D087DE31FE1A0C29F911793FD19FEF
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1WEBAU6iEWDPdvAXAacHBvCMwBc.roa
Signing time: Wed 01 Jan 2025 17:01:19 +0000
ROA not before: Wed 01 Jan 2025 17:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214891
IP address blocks: 2a12:bec4:1280::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:d0:87:de:31:fe:1a:0c:29:f9:11:79:3f:d1:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 17:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56101014ea21160cf76f01701a70706f08cc017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:0a:fe:01:36:13:de:8c:01:6f:f4:77:ef:
46:f8:d2:88:a2:d3:02:57:2b:a0:41:31:79:24:1f:
79:5b:db:74:4d:83:1b:01:da:94:a1:21:ea:ac:c2:
39:88:d8:38:04:e9:25:97:6c:0f:86:6a:b4:e5:3d:
1c:b1:ee:7d:96:7f:01:98:e6:72:fb:fb:da:e0:f7:
04:c3:2e:54:9a:eb:d8:aa:f4:ce:d4:6e:a5:2c:15:
11:fa:95:fb:bb:2c:fc:74:7c:b4:3a:47:33:80:a1:
2e:af:a4:15:dc:a8:fb:9a:fa:18:33:bd:2d:4f:b8:
95:0a:1e:a8:b0:06:7b:73:32:07:77:c7:9c:77:36:
ef:4e:d7:b1:5a:c6:19:1c:a2:76:a5:f0:20:c0:48:
52:3f:0b:b5:ff:06:8d:38:4a:e5:99:31:b2:d9:64:
96:cd:35:cc:fd:7f:30:31:ae:97:45:dd:c3:d8:79:
5d:25:7c:2b:b1:33:90:e3:fb:f0:cf:d2:d6:74:d8:
7e:77:b0:ba:b9:42:e8:20:1f:88:10:b6:fb:1d:9a:
b4:0f:33:a9:3a:27:66:44:3d:7e:bb:3e:71:c9:15:
ad:75:e0:8f:9d:51:f7:c1:5a:5e:6f:31:71:ac:d2:
3a:5e:6b:55:b3:ec:de:00:80:7a:cc:74:f7:88:7a:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:01:01:4E:A2:11:60:CF:76:F0:17:01:A7:07:06:F0:8C:C0:17
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1WEBAU6iEWDPdvAXAacHBvCMwBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1280::/44
Signature Algorithm: sha256WithRSAEncryption
b6:d0:39:c2:fb:e3:34:ed:ef:58:f5:f5:b2:89:b9:3f:7d:14:
ad:fa:55:4e:56:09:f1:cb:df:92:46:6a:80:65:61:7f:05:1b:
31:75:d0:a5:c5:a2:94:7f:ce:4d:f8:c6:05:21:aa:d3:18:09:
fc:12:fc:28:20:7c:fe:27:31:e2:1c:97:da:e9:e1:d0:53:c0:
e1:0e:df:55:7a:dc:cb:d4:79:a4:58:fb:c3:d1:df:40:02:7b:
8d:c5:5d:f0:d4:8f:57:c3:01:49:e7:6e:02:28:f9:d2:02:f2:
44:4f:9a:9b:ed:cb:48:9e:09:db:0e:b5:7b:f2:2b:0a:ff:15:
ee:12:94:d2:f2:90:39:31:14:af:b6:49:68:5c:c3:c2:83:33:
74:21:a0:13:d5:9d:db:88:99:f5:be:9f:d5:bc:55:44:87:ba:
f2:41:50:57:0e:55:41:d5:6e:1a:ba:ea:5c:69:2f:6e:24:49:
2a:07:22:a7:69:a9:22:14:c3:c0:ad:d5:16:29:64:ee:88:14:
27:2e:9b:ec:16:ad:60:fa:32:3a:c4:a8:08:d2:2e:12:a0:af:
4c:3c:dd:e8:c6:66:84:da:f9:4e:79:79:ba:d5:9a:b3:80:7a:
e8:f3:4d:6e:be:1a:78:b6:3a:e2:f2:17:f0:71:1f:bd:bd:9f:
41:37:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:50:57 2025 by rpki-client