Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wyWiX4Im8oisLaWNIo4l-9mnjwE.roa
File: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (raw, json)
Hash identifier: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=
Subject key identifier: C3:25:A2:5F:82:26:F2:88:AC:2D:A5:8D:22:8E:25:FB:D9:A7:8F:01
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B263CE21C37E0EDDCFD4BA4350C5D5
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wyWiX4Im8oisLaWNIo4l-9mnjwE.roa
Signing time: Thu 02 Jan 2025 01:47:38 +0000
ROA not before: Thu 02 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 2a11:840:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:63:ce:21:c3:7e:0e:dd:cf:d4:ba:43:50:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c325a25f8226f288ac2da58d228e25fbd9a78f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:29:4b:3f:21:f1:03:34:d6:69:9f:5e:a5:
b2:ae:20:2b:e4:80:a9:d3:bb:a1:ca:ac:fe:ed:4b:
fb:86:ee:cd:f7:64:a8:ca:75:ea:ef:30:2a:9e:a0:
c4:14:fa:5f:dc:af:7c:d8:67:da:6d:70:50:0e:a6:
d5:0a:d2:3e:47:ee:9d:03:a6:50:58:4e:09:4e:00:
43:d9:9b:cf:ff:88:fd:85:12:65:d9:64:a6:bd:59:
97:bd:a3:03:ed:3f:74:29:22:79:49:e8:6a:d5:bf:
7c:5b:94:04:f8:1d:92:d1:c2:29:78:18:5c:da:4f:
87:91:0e:b2:e9:d9:8e:53:33:13:84:f1:56:0d:4a:
58:98:bc:1d:b8:57:ba:a3:db:49:74:7e:e5:c6:a3:
cd:5c:91:3b:98:91:0a:f3:75:c9:43:45:ca:43:ab:
8e:55:f5:b8:2d:cd:83:91:e0:68:ee:2c:68:8f:36:
50:51:0d:b5:c6:8a:c0:7f:c7:01:27:27:28:2a:d6:
e2:45:b1:d3:4f:0a:04:0f:ec:b7:a5:fd:a3:51:14:
ab:38:d0:5b:82:03:60:61:d3:3e:32:d5:aa:ea:24:
9d:23:a2:c6:8e:a3:67:75:b4:fd:e8:17:d4:cb:55:
08:30:47:27:fc:33:c4:af:9a:d4:20:cf:f0:4d:6c:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:A2:5F:82:26:F2:88:AC:2D:A5:8D:22:8E:25:FB:D9:A7:8F:01
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wyWiX4Im8oisLaWNIo4l-9mnjwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:21::/48
Signature Algorithm: sha256WithRSAEncryption
3b:0e:ea:7d:ce:78:a2:bc:ee:f4:95:40:05:d3:2d:e0:f0:6c:
6d:92:3a:8d:18:41:21:13:d1:11:ff:60:20:7a:03:27:52:3b:
b3:00:b8:73:5c:95:a4:42:f7:23:28:ec:6f:7a:c8:08:c9:77:
78:1d:d0:ce:62:17:4b:3d:dc:ed:34:24:36:42:65:38:74:e9:
b5:e1:93:2c:0d:4f:56:f1:e1:5f:21:ce:b5:bc:3b:56:b2:64:
45:88:98:91:a0:3e:31:71:78:5b:d5:e8:c0:0b:07:f1:81:ea:
0f:30:ac:c9:19:7f:0f:eb:82:ad:01:c7:bf:ae:00:92:5d:61:
a9:82:0b:5b:d5:50:08:8d:81:3f:17:e5:2f:16:c1:9a:b6:45:
43:ff:99:65:ca:cc:ff:82:52:12:74:cb:a6:c6:28:a6:d7:4e:
f3:de:af:83:b0:5d:ce:72:17:5c:15:a0:45:6a:18:57:13:57:
37:e0:17:c5:da:3c:c0:97:f3:2c:d6:59:5a:6a:f8:01:93:ec:
69:45:15:50:49:b6:d8:5b:39:87:5d:53:c1:22:2e:b0:c8:19:
df:2e:c0:bd:f8:a6:d9:10:64:cf:8b:20:ac:de:5f:1a:73:bf:
78:9b:70:1f:5b:08:af:14:5e:33:1c:8d:14:b3:cd:ac:83:12:
56:4e:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:40 2025 by rpki-client