Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wJkD-PbJPWuPWbVUeOgC--gF46M.roa
File: wJkD-PbJPWuPWbVUeOgC--gF46M.roa (raw, json)
Hash identifier: 0loUYywfR4U1Oks1+3xKyW/WBu9TX0XR8fLB01Ztb2s=
Subject key identifier: C0:99:03:F8:F6:C9:3D:6B:8F:59:B5:54:78:E8:02:FB:E8:05:E3:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959949DDEEBDEB02B27F2EC911E0DDFF63
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wJkD-PbJPWuPWbVUeOgC--gF46M.roa
Signing time: Sat 15 Mar 2025 10:11:49 +0000
ROA not before: Sat 15 Mar 2025 10:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:49:dd:ee:bd:eb:02:b2:7f:2e:c9:11:e0:dd:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 10:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09903f8f6c93d6b8f59b55478e802fbe805e3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:22:61:b3:9b:dc:bd:42:22:88:ec:d7:cf:
f0:95:d2:2c:88:ea:7a:81:1f:ca:ce:03:23:c0:d1:
be:1b:1d:89:07:2a:0d:27:a9:6a:d4:c0:36:80:b9:
fd:ba:fa:66:2e:b1:7d:ee:8f:a5:63:9c:53:a2:34:
65:16:ed:e7:fd:5f:26:45:55:08:45:bb:65:42:21:
cf:ac:ac:1d:a1:76:18:27:0a:e6:5e:55:6a:df:e4:
7c:87:47:94:e0:aa:b5:fe:ac:55:f8:2d:44:1b:15:
87:d0:71:3e:7b:61:3d:09:ac:e6:c6:91:d7:22:5b:
b4:a3:32:e9:3f:88:a4:8b:03:3b:38:3b:d6:cd:a0:
0b:d6:a3:b2:4a:20:3e:7d:49:8a:c5:e4:80:d9:ea:
ad:ca:07:82:db:d0:52:81:e4:98:b2:60:9d:38:f8:
2b:bf:dd:65:59:3a:a1:ac:04:76:65:02:f8:f8:ac:
77:a3:55:de:ad:82:16:70:38:60:5d:f0:de:ba:97:
26:a8:a2:aa:33:94:c9:d3:e1:16:eb:99:aa:11:c1:
6d:a7:b2:4c:59:4d:4e:d8:d2:38:a7:a4:8e:3c:68:
67:b4:b3:a1:62:50:1a:28:75:d4:ed:27:c0:0f:db:
1c:2b:6f:d6:bf:fe:6a:67:1d:d2:f0:d5:b5:cd:0f:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:03:F8:F6:C9:3D:6B:8F:59:B5:54:78:E8:02:FB:E8:05:E3:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wJkD-PbJPWuPWbVUeOgC--gF46M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
68:82:f0:35:f6:05:19:bb:16:c0:ce:b4:33:98:d6:16:db:42:
9b:bb:72:e4:2b:3f:67:f0:15:49:be:7b:31:01:3f:d4:95:10:
6f:6d:60:42:37:1e:c9:bb:32:3d:b7:8f:d2:49:45:b7:d8:a4:
34:e5:36:32:15:40:46:c3:43:ca:7a:ff:91:19:24:d4:eb:ba:
aa:f0:6d:17:ae:bf:28:e4:3a:b0:b7:31:fd:99:b4:2a:3a:9a:
80:99:c3:e4:4d:3c:02:98:87:c2:82:06:57:01:ce:3b:7a:f1:
08:be:1c:92:2f:0d:01:d9:95:db:8a:7c:c3:60:98:38:1b:96:
eb:6f:a7:9b:2f:e9:11:e4:72:00:da:c8:6b:9e:8e:c1:f2:76:
e4:53:03:fe:82:fc:dc:a0:1e:7b:d7:d3:91:f0:37:2e:02:7b:
80:1d:bf:af:84:d7:52:2f:5e:46:5a:a2:f3:51:4a:a9:32:a6:
cf:0f:df:71:f9:b0:a1:3a:69:c8:d4:a3:45:31:6e:66:5e:52:
8b:10:4a:37:d2:80:42:af:4d:9c:75:b2:0c:c7:1c:33:1f:8c:
a5:e4:40:03:0b:cd:15:68:0f:37:85:7e:ef:cc:2a:52:da:25:
89:2c:87:8e:65:7e:7d:85:11:56:02:d8:73:18:f8:05:37:c2:
23:07:aa:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:06 2025 by rpki-client