Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wc96KzumdAp5uEkW1giiEjUWbkk.roa
File: wc96KzumdAp5uEkW1giiEjUWbkk.roa (raw, json)
Hash identifier: ydLlFab+iHh4fmGDVHnXTAMq9BS8AWznpm1Z47hM1Xo=
Subject key identifier: C1:CF:7A:2B:3B:A6:74:0A:79:B8:49:16:D6:08:A2:12:35:16:6E:49
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDF0E548488DF0B6B939DF4754BCEE
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wc96KzumdAp5uEkW1giiEjUWbkk.roa
Signing time: Thu 02 Jan 2025 07:49:46 +0000
ROA not before: Thu 02 Jan 2025 07:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215041
IP address blocks: 2a0a:79c0:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:f0:e5:48:48:8d:f0:b6:b9:39:df:47:54:bc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1cf7a2b3ba6740a79b84916d608a21235166e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:96:26:70:95:ae:36:ec:9e:d9:32:20:15:
57:c8:4e:ca:09:c8:7f:af:0c:82:b5:2a:9b:4f:94:
e0:ef:7a:2e:04:f3:0d:98:18:d6:28:71:d2:71:7d:
fb:9a:23:33:fa:eb:7e:ff:d1:47:a1:cd:1c:ed:30:
e4:01:cd:1c:d9:ed:63:8e:e0:a0:37:fd:13:c1:66:
8e:46:16:94:7e:47:28:62:90:2e:c0:7e:a7:cc:e2:
d4:4e:1f:6f:79:21:64:52:ef:10:ac:ab:35:51:00:
ee:08:16:8e:86:d3:3f:b3:41:78:ae:f8:5d:21:b7:
c4:d7:aa:77:f3:8c:81:98:23:c7:5a:36:2b:dc:8d:
29:81:76:16:33:5b:1b:90:35:4e:2d:64:ae:aa:67:
69:1b:2a:e7:34:47:5d:4b:68:3d:9b:55:c0:e9:29:
b6:c4:c1:6b:8a:1f:06:db:99:4c:c6:8d:7b:b5:c4:
e0:a8:1f:08:03:87:0b:e9:74:9d:90:5f:c2:43:89:
f8:7f:fe:6d:3d:f1:82:a0:66:f7:64:ae:1a:95:67:
5c:e8:5f:e9:fd:d1:3f:08:70:26:5c:00:55:e4:55:
7b:58:59:52:5b:29:9c:f5:f3:7f:af:88:8a:9a:21:
94:e2:0b:68:84:22:20:af:e8:c7:fd:af:dd:c3:9c:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:7A:2B:3B:A6:74:0A:79:B8:49:16:D6:08:A2:12:35:16:6E:49
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wc96KzumdAp5uEkW1giiEjUWbkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:300::/40
Signature Algorithm: sha256WithRSAEncryption
66:e0:9d:91:56:2c:96:67:6e:6e:4e:43:bc:38:93:3c:dc:d7:
b8:c5:ee:6e:25:f9:fc:46:80:0e:7e:05:b7:aa:9a:45:9e:3c:
a2:c4:6d:fa:2a:9f:dd:d6:34:fa:df:ec:cc:d8:69:89:86:76:
06:37:8d:10:a4:47:4a:cc:6d:40:50:c9:e5:c5:c7:89:ee:5b:
d3:df:d7:79:43:1e:a0:16:ee:50:36:bd:7a:28:0d:fa:de:14:
f4:9a:ad:c5:44:ae:4d:73:7f:c7:d8:26:41:d8:27:77:e0:2f:
49:7f:53:21:aa:0c:76:60:9d:8f:fa:74:c1:f7:b8:fd:7d:3b:
19:9a:d6:53:11:95:e6:5b:ec:7b:76:93:93:6d:f0:fc:ff:db:
59:09:b1:ce:ce:3a:ea:29:f4:29:e8:9c:21:ff:cc:ea:82:6a:
88:50:84:fe:bc:12:8d:14:fd:ef:e3:21:55:0c:28:b6:58:11:
2e:44:63:4b:d3:57:1a:ba:c8:93:76:63:74:a0:1d:7b:53:ee:
b5:67:6d:84:cd:04:72:be:4c:e8:2e:1d:f5:f4:f7:f0:f3:5a:
f5:2a:06:a9:8b:11:7a:4b:97:5d:1d:00:86:a1:91:47:44:55:
af:0f:f6:34:ad:19:29:c7:3a:ec:fe:1a:39:13:81:0d:ad:56:
86:b9:04:f5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQl/fDlSEiN8La5Od9HVLzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWNmN2EyYjNiYTY3NDBhNzliODQ5MTZkNjA4YTIxMjM1MTY2ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSaWJnCVrjbsntkyIBVXyE7KCch/
rwyCtSqbT5Tg73ouBPMNmBjWKHHScX37miMz+ut+/9FHoc0c7TDkAc0c2e1jjuCg
N/0TwWaORhaUfkcoYpAuwH6nzOLUTh9veSFkUu8QrKs1UQDuCBaOhtM/s0F4rvhd
IbfE16p384yBmCPHWjYr3I0pgXYWM1sbkDVOLWSuqmdpGyrnNEddS2g9m1XA6Sm2
xMFrih8G25lMxo17tcTgqB8IA4cL6XSdkF/CQ4n4f/5tPfGCoGb3ZK4alWdc6F/p
/dE/CHAmXABV5FV7WFlSWymc9fN/r4iKmiGU4gtohCIgr+jH/a/dw5z7OQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMHPeis7pnQKebhJFtYIohI1Fm5JMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvd2M5Nkt6dW1kQXA1dUVrVzFnaWlFalVXYmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgp5wAMw
DQYJKoZIhvcNAQELBQADggEBAGbgnZFWLJZnbm5OQ7w4kzzc17jF7m4l+fxGgA5+
BbeqmkWePKLEbfoqn93WNPrf7MzYaYmGdgY3jRCkR0rMbUBQyeXFx4nuW9Pf13lD
HqAW7lA2vXooDfreFPSarcVErk1zf8fYJkHYJ3fgL0l/UyGqDHZgnY/6dMH3uP19
Oxma1lMRleZb7Ht2k5Nt8Pz/21kJsc7OOuop9CnonCH/zOqCaohQhP68Eo0U/e/j
IVUMKLZYES5EY0vTVxq6yJN2Y3SgHXtT7rVnbYTNBHK+TOguHfX09/DzWvUqBqmL
EXpLl10dAIahkUdEVa8P9jStGSnHOuz+GjkTgQ2tVoa5BPU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:59 2025 by rpki-client