Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Wyk9EGfS9LS69kq9dcEz7kyaxPQ.roa
File: Wyk9EGfS9LS69kq9dcEz7kyaxPQ.roa (raw, json)
Hash identifier: 8rLgbpsrJREffK8ONJkheSLicuCP40DjK8YBAVFmw80=
Subject key identifier: 5B:29:3D:10:67:D2:F4:B4:BA:F6:4A:BD:75:C1:33:EE:4C:9A:C4:F4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019121978928FF12BF539DFA667FAFD4436E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Wyk9EGfS9LS69kq9dcEz7kyaxPQ.roa
Signing time: Mon 05 Aug 2024 08:11:04 +0000
ROA not before: Mon 05 Aug 2024 08:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:97:89:28:ff:12:bf:53:9d:fa:66:7f:af:d4:43:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 5 08:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b293d1067d2f4b4baf64abd75c133ee4c9ac4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:2e:5e:6e:b8:a0:e5:5e:fe:40:fd:f5:01:
06:5f:0b:b5:ee:95:72:ea:72:a7:4d:86:4b:0a:72:
f2:58:d1:46:1f:da:f8:38:53:68:fb:4e:7d:31:47:
82:59:07:b1:0d:0d:79:e4:77:86:6b:02:70:1f:3c:
30:70:b6:49:db:04:e6:95:f8:c7:b6:f3:7b:ff:93:
36:8d:4d:04:01:9d:73:73:12:8e:26:fe:4c:1e:89:
a1:46:c7:ea:56:b8:e9:8f:99:99:60:3a:9b:8a:ad:
4e:3a:96:07:80:6a:7d:ae:8f:99:3e:16:29:df:2c:
fb:be:ee:c5:69:5a:e9:af:2d:30:a7:4c:f6:23:e3:
b9:22:5d:50:ef:99:8b:c7:cf:87:e0:02:ed:8c:02:
6e:da:8a:e2:2f:4b:1f:4d:bc:f4:19:71:03:f4:f0:
e5:af:57:d2:af:dd:4f:88:68:a3:c4:a2:a6:46:cf:
2c:6a:90:00:de:5e:28:69:cc:75:57:d2:d9:76:c9:
27:f8:0a:97:e7:c3:06:4f:d5:82:c2:c2:7a:fe:a3:
9a:c8:23:3f:0a:2e:b4:e2:23:64:1d:45:99:00:e5:
7e:be:97:19:c6:7e:f5:a6:31:eb:c3:ae:b0:e0:46:
66:ce:64:09:0e:e4:5d:1e:bb:37:61:c4:48:94:f5:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:3D:10:67:D2:F4:B4:BA:F6:4A:BD:75:C1:33:EE:4C:9A:C4:F4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Wyk9EGfS9LS69kq9dcEz7kyaxPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
6e:20:4d:83:1a:46:9a:a6:7c:8e:4d:c3:25:19:ba:9e:e4:de:
f3:5d:f0:39:40:9a:7b:25:11:3d:d8:5d:21:27:6a:28:88:5c:
92:e1:b0:ec:f5:8b:f6:48:45:b9:6c:c4:ff:1c:5f:49:6d:f4:
ad:df:83:07:ff:de:87:29:98:9c:25:6e:7b:d8:3d:d2:dc:1a:
87:d6:21:19:f4:24:53:19:6a:ea:95:2d:f4:6d:de:2c:90:82:
40:e8:f3:45:df:6a:8a:0a:1d:81:82:13:03:f3:40:2a:f0:e0:
88:46:f2:3a:f9:ef:37:fb:b5:6a:51:d7:49:58:08:a2:dc:fd:
fc:c7:0a:1e:9b:1c:8e:92:73:0f:1a:85:ea:0c:e5:6e:54:40:
1d:71:a9:b7:f1:6e:62:96:17:82:9e:93:12:bf:55:28:47:92:
a9:a4:1d:60:3f:32:3d:19:c4:74:0d:b5:68:28:09:ba:e6:83:
54:91:d8:75:59:21:68:5c:46:de:0b:43:a5:39:70:bd:0a:ce:
f6:b1:96:fa:44:f7:c1:f8:0f:45:bd:b6:3f:5e:61:f5:5d:f7:
d2:17:61:35:38:57:b4:7a:c3:44:93:38:f3:fa:a5:3f:d2:f3:
60:2a:9c:08:e1:c5:05:c6:12:b2:db:83:c8:a7:9f:86:ca:42:
ad:c4:f0:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:56:34 2025 by rpki-client