Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WLreldNrlhbmm8MSsaO-d5WOBgo.roa
File: WLreldNrlhbmm8MSsaO-d5WOBgo.roa (raw, json)
Hash identifier: wKuTlaP3woycoPXXulthRt+KtQX9dCaWs3+toGyHklY=
Subject key identifier: 58:BA:DE:95:D3:6B:96:16:E6:9B:C3:12:B1:A3:BE:77:95:8E:06:0A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918DF549C2B64AFB878F0523CAA7E10AE0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WLreldNrlhbmm8MSsaO-d5WOBgo.roa
Signing time: Mon 26 Aug 2024 09:12:28 +0000
ROA not before: Mon 26 Aug 2024 09:12:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:f5:49:c2:b6:4a:fb:87:8f:05:23:ca:a7:e1:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 09:12:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58bade95d36b9616e69bc312b1a3be77958e060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:a5:db:18:8d:40:3b:ba:0e:6d:45:f7:66:
f6:93:fb:e5:57:b3:c8:0f:fe:72:1d:f3:bb:2a:ca:
fb:c4:6d:1b:18:b6:78:de:05:56:06:c1:45:b5:ba:
a9:f2:56:19:df:ca:ca:2c:79:a9:4f:7a:ca:4f:14:
cc:f0:6c:b1:bc:f6:61:38:fa:60:3e:fc:e8:9f:a3:
03:f5:f9:1d:c8:d1:22:95:ba:f1:d7:24:c8:7d:4d:
e2:a4:4a:d2:17:9b:ae:06:0a:b4:ac:4a:59:b5:db:
48:0d:9c:39:53:80:eb:01:36:42:15:2b:ba:27:54:
3c:42:a4:d6:1d:f1:ec:48:80:83:d4:5a:d6:b8:38:
7f:1e:8d:69:d4:05:95:bf:4f:97:08:95:7d:33:2f:
0a:e4:ac:ac:b2:3d:ea:5f:e4:b8:73:79:11:61:9b:
ef:4a:58:1e:f8:9c:5c:2e:6e:b2:6b:67:86:8d:7e:
d6:43:83:7e:85:c9:54:38:a6:97:e3:6d:8e:5f:8a:
8a:ba:f3:74:63:45:bc:dc:be:a2:15:5b:91:2c:a2:
96:5c:94:d8:9e:53:93:86:9c:89:65:ea:12:3f:ee:
7f:ce:90:f0:ac:2d:b4:9a:b4:2f:60:e7:d8:3f:ce:
1a:1d:24:da:2a:53:55:d6:d7:11:bc:b6:ef:23:af:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:DE:95:D3:6B:96:16:E6:9B:C3:12:B1:A3:BE:77:95:8E:06:0A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WLreldNrlhbmm8MSsaO-d5WOBgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
47:b7:dc:40:0a:0f:9a:46:72:c1:b0:d4:44:7e:2f:ba:7c:e8:
0f:5a:67:83:ed:18:23:6a:40:8c:37:bf:7a:71:92:24:52:e4:
e2:37:7c:b5:f7:ef:0a:d9:1a:35:de:68:46:0a:8f:9c:2a:18:
b5:8a:48:3b:52:95:96:9a:d6:a1:2a:be:2e:d2:3a:ea:08:2d:
ca:f3:ba:51:e4:a0:2e:c2:1a:06:c5:6f:67:d2:72:b7:aa:f7:
f1:4a:fb:63:b2:1e:0a:34:50:a5:70:54:7b:e5:f1:ec:56:06:
9d:89:3e:da:85:f5:a1:69:8b:21:d5:c9:ec:c5:be:32:29:dd:
c5:72:e6:74:c4:ba:9a:d1:a7:5d:2c:1d:7e:61:6b:63:5c:4f:
e0:a5:7d:07:f3:32:bd:03:45:10:e2:ef:fa:b4:64:a6:45:e5:
59:39:82:5f:a6:ae:dd:28:df:ef:67:41:72:44:85:1b:5c:6f:
81:a6:e4:a0:01:a9:40:c8:8c:82:0f:2b:26:49:10:80:22:58:
fe:f0:e0:31:fb:7b:61:0f:47:92:3a:37:d6:f5:b5:15:38:b0:
81:85:71:95:3a:38:84:1d:7c:b0:46:f1:61:4a:8e:bc:87:ec:
67:4f:91:61:82:56:fd:22:e1:06:14:e3:b9:65:86:d4:53:8a:
59:69:4e:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:13:49 2025 by rpki-client