Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wc-cODGhzvvEbhovPq8iMHJ5N4Q.roa
File: wc-cODGhzvvEbhovPq8iMHJ5N4Q.roa (raw, json)
Hash identifier: x7hYVwUSDjQQAJ0/3FxVDAOKfQVooMNHDw5/8civObI=
Subject key identifier: C1:CF:9C:38:31:A1:CE:FB:C4:6E:1A:2F:3E:AF:22:30:72:79:37:84
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01931F30C5B603E485B51F8678C2F7B471BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wc-cODGhzvvEbhovPq8iMHJ5N4Q.roa
Signing time: Tue 12 Nov 2024 07:05:10 +0000
ROA not before: Tue 12 Nov 2024 07:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:1f30:70d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:30:c5:b6:03:e4:85:b5:1f:86:78:c2:f7:b4:71:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 12 07:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1cf9c3831a1cefbc46e1a2f3eaf223072793784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:41:b4:4c:94:69:42:fe:3a:56:68:46:34:
87:2f:5f:66:09:62:f9:b0:ab:09:cc:9c:0d:5b:47:
51:f3:04:46:39:26:f3:94:df:37:55:5c:c0:fb:f9:
9d:a6:b1:a8:9d:a2:10:7e:e3:75:db:82:0c:3b:84:
5c:74:72:37:35:ee:50:e0:94:ba:03:65:6e:8c:3e:
21:1a:e2:35:d8:8b:98:5e:9d:c7:df:16:95:a0:2c:
8c:ee:77:39:45:74:34:87:c9:6e:29:5a:ef:c6:a1:
41:52:5c:0c:b8:51:3f:ad:c8:0d:37:2b:a3:70:b0:
42:b6:b6:ad:ae:48:6b:16:59:61:f0:08:95:02:5b:
11:f5:b4:82:9c:7d:68:e8:d0:8a:84:5b:c7:cf:dd:
82:f9:cf:d2:21:9e:1f:9d:4b:04:81:0f:0b:c1:ff:
0a:e4:12:91:32:fb:1b:94:64:a1:76:d9:2d:a7:9f:
f9:1a:d2:af:fd:c7:89:2f:ec:8c:dc:b5:88:c7:c7:
35:d1:67:9d:ff:fc:91:4a:5a:67:87:41:6d:14:23:
83:24:9c:93:8f:96:da:50:ce:8a:3e:7b:bb:9a:72:
79:97:b1:ea:7e:f2:68:64:8b:ce:9b:2d:da:b4:61:
14:f9:fe:8b:6f:47:0a:8d:e7:0b:9c:0c:87:9e:0a:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:9C:38:31:A1:CE:FB:C4:6E:1A:2F:3E:AF:22:30:72:79:37:84
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wc-cODGhzvvEbhovPq8iMHJ5N4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:1f30:70d/128
Signature Algorithm: sha256WithRSAEncryption
57:fa:c3:cc:0e:a7:f9:4e:11:f4:d6:04:5a:95:95:5d:67:c7:
c7:ca:ba:cd:8f:15:86:ef:ca:0e:9f:1b:b0:09:a1:47:c0:55:
c8:9a:ed:1b:73:50:89:d5:94:83:c6:7e:87:2d:cf:cf:23:b2:
2e:09:59:12:84:b8:f1:19:91:e2:de:f0:2d:c6:5b:2c:e2:51:
92:80:c0:52:d2:61:d9:5b:99:16:5a:81:f1:dc:c4:d7:9b:e9:
47:50:3e:23:df:48:f7:4d:fa:75:92:e5:27:ee:98:1d:37:6f:
d4:09:db:cb:11:4b:cc:06:49:e8:65:79:12:f3:6a:8f:3e:a9:
ea:fd:37:6f:31:7c:79:30:7c:0d:da:15:04:06:f2:00:8b:ee:
e7:12:2f:c5:98:ec:7c:87:47:8f:ed:d5:ed:60:64:3e:b4:72:
5f:49:cc:3b:06:78:65:3d:12:da:44:41:e3:e2:61:a4:78:dc:
de:24:37:26:56:41:58:07:01:4c:0b:ff:48:64:2c:19:ba:f7:
8e:12:26:9e:fd:c4:e5:69:28:87:38:83:cf:cc:26:7e:1e:ee:
11:ac:ae:f5:7f:f5:31:b9:34:d0:76:09:c7:1d:52:c4:dc:ce:
9a:ae:a4:8f:c9:79:7f:79:c3:0b:b0:2b:af:a9:b7:6c:fd:94:
8a:a0:e8:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:33 2025 by rpki-client