Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WD6wNiXrg3OAsoahFkBYTv6yTLk.roa
File: WD6wNiXrg3OAsoahFkBYTv6yTLk.roa (raw, json)
Hash identifier: IRlcLE79x69+yuhflAg322ymfE/8y7PHrr5KWBTkFW8=
Subject key identifier: 58:3E:B0:36:25:EB:83:73:80:B2:86:A1:16:40:58:4E:FE:B2:4C:B9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917C5D05573AC75BB35E296A3AF90E15AE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WD6wNiXrg3OAsoahFkBYTv6yTLk.roa
Signing time: Thu 22 Aug 2024 23:12:36 +0000
ROA not before: Thu 22 Aug 2024 23:12:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7c:5d:05:57:3a:c7:5b:b3:5e:29:6a:3a:f9:0e:15:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 23:12:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583eb03625eb837380b286a11640584efeb24cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:2e:3f:c5:45:06:e8:03:67:98:cc:12:2e:
98:96:88:32:98:cf:f5:da:23:e4:56:9b:9b:2a:23:
3c:0e:b7:e2:90:90:b3:f0:a0:ce:57:b9:69:f1:da:
2b:24:79:73:bc:94:5d:43:ed:f8:5f:59:5b:bd:12:
28:00:37:58:6f:2c:21:3a:c9:36:5f:2d:5c:f3:ad:
48:84:9e:16:de:8b:b7:ae:79:3b:9a:6d:49:d6:a2:
62:81:a2:2c:d7:5b:4c:1d:4d:bf:75:e9:81:f8:ce:
ef:2d:1d:be:43:43:5e:5b:4f:62:19:84:b6:2b:76:
47:32:b1:7f:ce:24:7e:bf:f8:39:61:83:f3:2f:f2:
91:31:7d:e1:4a:ae:34:a4:03:7b:eb:cb:04:d9:57:
ca:2b:76:2f:85:4e:e7:fa:ca:e4:09:75:77:42:8e:
22:ba:a4:9a:e0:2e:bb:a3:fc:8d:fa:7f:5c:a4:1d:
00:f3:49:f5:e9:f1:c5:3e:37:2a:5c:52:68:f2:1d:
86:2f:58:58:08:11:b7:33:a0:a3:7b:bb:f2:a8:84:
db:8d:a7:ed:52:4c:86:9d:ce:6f:28:93:6f:2e:61:
48:9d:38:c8:c8:fc:80:ef:7a:a3:c2:57:74:f5:9c:
05:15:79:c1:d0:8f:09:e4:67:42:4f:ff:1e:45:ee:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:B0:36:25:EB:83:73:80:B2:86:A1:16:40:58:4E:FE:B2:4C:B9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WD6wNiXrg3OAsoahFkBYTv6yTLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
66:dc:69:ca:82:9c:7b:ff:44:89:63:05:a6:90:cd:29:9f:fa:
c9:90:72:a9:73:01:6c:e9:b2:71:76:41:4f:d6:86:cc:22:e5:
1c:9a:91:c0:b7:b3:70:6c:26:00:b0:14:19:9e:50:18:64:c4:
16:c7:78:7d:02:c1:8b:dd:8c:94:61:ef:eb:e1:45:96:bf:52:
81:70:6f:29:f4:c8:a7:13:83:f2:02:42:61:f7:32:9c:e7:e2:
59:a0:24:4b:48:49:93:74:6b:cc:92:59:21:36:db:83:da:4c:
ef:c1:59:47:02:35:81:83:e6:c9:63:f8:cd:a8:41:74:fe:58:
7c:d9:a2:01:ec:99:02:04:bd:50:19:2a:a4:c3:b0:77:e9:d3:
47:a9:9b:1e:9a:26:d5:9e:52:a4:95:c6:83:89:1a:15:2a:24:
d7:03:8d:d7:14:83:3f:f9:97:65:97:c7:ae:7a:58:bc:f8:fe:
63:e6:62:4c:ef:8a:ef:72:ed:f3:26:16:07:f9:d9:47:c3:10:
8a:44:ca:5b:e9:d3:f3:7c:bb:02:2c:0e:13:74:d4:ca:25:2f:
a4:ad:1a:0f:bd:c5:ca:d7:b7:22:3b:8d:8b:23:dd:f6:02:ed:
86:33:71:01:fe:bf:eb:12:9e:b6:97:6f:2c:c1:1d:09:19:1a:
ca:16:de:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:17 2025 by rpki-client