Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WbnXWeOKNhso7xhS22xIqSE2rYo.roa
File: WbnXWeOKNhso7xhS22xIqSE2rYo.roa (raw, json)
Hash identifier: VYuwZBlJv7Pyg23b3a4246fw+kpf9E5WcV+VuY0nmj8=
Subject key identifier: 59:B9:D7:59:E3:8A:36:1B:28:EF:18:52:DB:6C:48:A9:21:36:AD:8A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914B6F205FDEC6898240EBF026DFEA1BF5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WbnXWeOKNhso7xhS22xIqSE2rYo.roa
Signing time: Tue 13 Aug 2024 11:10:59 +0000
ROA not before: Tue 13 Aug 2024 11:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:6f:20:5f:de:c6:89:82:40:eb:f0:26:df:ea:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 11:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b9d759e38a361b28ef1852db6c48a92136ad8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:57:77:4b:07:1a:3c:66:3c:67:ab:2c:37:
a5:bf:59:3f:0d:a3:42:3f:0f:7d:96:ae:59:03:ca:
b1:95:f8:af:14:7e:7f:0a:4a:08:54:dd:0c:26:c7:
9e:39:25:60:ba:fc:45:07:cb:d6:1a:cf:5e:85:f6:
18:43:13:2d:a4:cb:53:f8:f2:a2:d0:7e:55:9d:1a:
92:fa:22:7b:fc:78:7f:2d:23:71:60:02:3c:61:5c:
bc:74:a8:d0:49:09:05:15:9a:43:09:fa:5e:e3:65:
30:4e:08:5b:f7:5c:0d:f6:e7:68:6b:46:b6:24:f1:
61:6f:b1:da:2e:df:86:9f:bc:1e:d2:52:25:23:cf:
c7:d1:36:c3:c5:1b:7c:b0:43:b9:b4:6b:9a:c3:65:
25:86:15:29:78:ae:8e:e7:e7:81:c6:86:75:0c:20:
b3:d1:9d:b9:98:75:39:e9:45:39:fd:69:af:30:33:
2e:65:ac:b4:64:89:67:86:55:08:29:c3:3e:c2:b1:
aa:84:72:8f:4e:9c:53:20:dd:ce:a6:ce:c7:ce:5e:
82:e0:3d:e8:23:70:43:cb:c0:cd:29:57:2e:54:33:
98:c5:53:5c:96:a0:8b:7f:ad:dc:d4:ee:a9:78:55:
cb:e0:92:ee:57:1b:e7:e8:21:a9:ed:51:59:3b:29:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:D7:59:E3:8A:36:1B:28:EF:18:52:DB:6C:48:A9:21:36:AD:8A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WbnXWeOKNhso7xhS22xIqSE2rYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
66:95:e5:ef:ff:7f:fd:aa:ed:4b:d8:7d:70:35:ae:a8:d4:2d:
33:0b:8c:61:93:a3:ec:a8:4c:a7:17:50:15:74:5d:c4:d1:42:
79:b9:00:16:d4:c9:2d:4f:62:6a:83:e5:57:7e:e2:be:1f:fd:
15:3b:b2:fe:a7:7a:1c:4e:18:cd:38:fa:ef:4b:d6:60:76:fe:
41:7a:74:76:d6:9d:28:0c:90:ef:7e:8b:81:5f:58:8c:7d:32:
81:76:6d:3c:0c:38:69:b6:94:9d:79:52:1e:86:92:5a:d7:70:
eb:c0:ad:01:bb:bb:ba:1f:0e:c5:cc:7a:60:d5:af:dc:8f:40:
5a:50:0e:8b:98:df:80:b6:a0:89:46:79:19:70:36:1e:f0:db:
15:14:1f:4e:f3:27:3b:9f:33:f9:0e:1d:fe:54:0e:59:3b:e7:
0b:9f:bf:a3:f4:0b:c8:92:3e:da:ca:ca:7d:3f:a0:6d:20:d3:
9d:c2:5b:46:0f:a2:1f:f2:56:ac:ff:ce:93:f5:c7:89:c5:b2:
f4:ce:fb:ff:be:93:bd:37:15:a5:4e:19:b4:d6:6c:69:66:65:
34:6a:81:95:1c:f3:46:18:ef:99:9e:00:05:5d:27:a7:0d:40:
22:f6:b0:1d:d8:fe:bc:5e:00:85:8c:45:da:21:d7:f2:0b:c3:
62:d0:bf:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:21:55 2025 by rpki-client