Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/WMqMrN8GSXOfRqdUfWDSfGSeNoY.roa
File: WMqMrN8GSXOfRqdUfWDSfGSeNoY.roa (raw, json)
Hash identifier: +HUvEm/zmLGsWH85M7k1xXVdXwdEmqkh5XDlJHFGu2c=
Subject key identifier: 58:CA:8C:AC:DF:06:49:73:9F:46:A7:54:7D:60:D2:7C:64:9E:36:86
Certificate issuer: /CN=3a611bc291ff1de02256f2315345680603fa4edb
Certificate serial: 019426D9CC2D122548B64EDDE50CB2FDA416
Authority key identifier: 3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/WMqMrN8GSXOfRqdUfWDSfGSeNoY.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215041
IP address blocks: 2001:67c:1570::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cc:2d:12:25:48:b6:4e:dd:e5:0c:b2:fd:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a611bc291ff1de02256f2315345680603fa4edb
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58ca8cacdf0649739f46a7547d60d27c649e3686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:08:47:a1:39:a5:64:79:62:6c:03:d5:b5:
09:54:24:b8:2d:f3:80:9d:92:20:5f:5b:8f:ff:b0:
e8:e3:db:f3:0f:0b:45:b6:f3:91:76:e1:c6:b8:51:
c8:b5:04:ca:28:f8:24:16:b8:c0:fd:71:b8:7c:86:
e6:a7:45:19:24:58:15:7a:2e:8d:30:c7:e1:7d:c0:
3a:36:39:9d:7e:66:2e:28:5d:13:0c:e9:d4:0d:d4:
fd:bc:52:da:91:a6:77:89:47:54:7e:f3:d7:4b:48:
0a:cc:b9:76:81:eb:40:28:5a:c6:18:5f:d5:d6:11:
cb:57:1d:c6:7a:02:97:f4:d8:91:e5:f3:61:35:8a:
2c:2d:e4:03:a6:24:07:79:58:cb:17:9f:9c:da:80:
69:e0:63:9e:2d:3f:98:a7:03:c9:05:36:9e:79:70:
f5:65:f4:2c:32:d7:7a:27:40:6b:b2:d0:4d:db:d4:
84:79:a2:1f:89:b5:26:79:74:7a:19:d8:73:28:fd:
f8:97:50:0a:cc:cf:c3:80:45:11:6f:48:c1:44:b3:
90:42:dc:5b:2b:14:3f:22:36:0d:22:9b:00:10:84:
e6:7e:8d:c6:16:e2:c9:32:2e:2d:91:6e:1e:6d:ec:
9b:9a:46:bd:f4:3f:e6:bd:21:27:d4:3f:98:73:f6:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CA:8C:AC:DF:06:49:73:9F:46:A7:54:7D:60:D2:7C:64:9E:36:86
X509v3 Authority Key Identifier:
keyid:3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/WMqMrN8GSXOfRqdUfWDSfGSeNoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1570::/48
Signature Algorithm: sha256WithRSAEncryption
71:82:60:88:34:69:40:28:50:3a:62:d9:bd:7a:82:ea:17:c8:
68:fb:4a:d0:bb:61:6f:04:f6:56:97:e8:cd:63:2d:6b:83:d6:
b9:4b:cd:f7:2a:b0:37:4e:bb:8f:f0:ac:c1:cb:45:d6:fd:2a:
20:ac:fc:c6:c7:52:14:51:c3:63:3e:3c:03:1d:54:b3:05:91:
bc:8f:d7:3b:7b:55:0c:12:fa:b0:b8:46:cd:5e:07:e0:1e:0c:
43:9f:24:b7:9f:d9:01:a7:41:d0:07:0a:bd:43:30:65:3b:6e:
8a:fb:1e:f5:94:5f:d5:67:2c:17:d8:6c:75:cb:66:ac:f2:14:
50:83:26:9a:40:a8:5a:f1:9a:1a:78:82:39:81:9c:77:b6:6c:
5b:ef:bf:6b:31:cd:eb:c4:d8:b7:54:f2:9a:b8:d8:5e:4e:d5:
c0:c1:98:a5:77:14:62:8d:28:35:2b:8c:a9:2a:23:88:33:06:
cc:03:54:8f:af:a1:38:b1:2f:81:35:3f:4b:a4:63:87:aa:29:
5c:16:b2:ce:6c:af:ce:99:7d:3a:6b:a9:b1:fa:7f:f0:47:33:
6a:67:58:a2:70:a1:b6:4c:8e:96:a9:d1:2d:11:da:9d:7b:a8:
67:45:ae:d7:af:5b:30:57:cd:bd:92:c0:f8:ab:06:41:9b:21:
88:8a:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:15:28 2025 by rpki-client