Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/wtvxFnZndacwSA3XXuf02BAXIT4.roa
File: wtvxFnZndacwSA3XXuf02BAXIT4.roa (raw, json)
Hash identifier: XEzxKqkXSTwi1eRfjFWqrPTFl+D9umbzThJ/4S2Z8B8=
Subject key identifier: C2:DB:F1:16:76:67:75:A7:30:48:0D:D7:5E:E7:F4:D8:10:17:21:3E
Certificate issuer: /CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Certificate serial: 0186FF4BDD59892182BD5FBCE0FA3C5637B6
Authority key identifier: 0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/wtvxFnZndacwSA3XXuf02BAXIT4.roa
Signing time: Mon 20 Mar 2023 13:53:27 +0000
ROA not before: Mon 20 Mar 2023 13:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25145
IP address blocks: 2a0c:ae80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:4b:dd:59:89:21:82:bd:5f:bc:e0:fa:3c:56:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Validity
Not Before: Mar 20 13:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2dbf116766775a730480dd75ee7f4d81017213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:7b:90:21:3e:09:88:1a:17:c5:f1:60:80:
f8:57:4b:0d:d9:a3:8d:f5:81:44:5f:86:e7:8e:ea:
29:2a:6d:f9:af:48:6d:09:38:db:4a:2b:81:3d:97:
18:73:4b:6a:48:60:65:c4:6c:f8:54:a2:03:e1:da:
25:28:25:43:b9:f3:de:8c:33:53:c3:4c:a4:ad:68:
3d:b4:aa:8c:d3:6f:12:23:cf:2c:be:06:2a:7d:21:
85:e2:0e:35:2d:2e:2a:a7:52:4c:20:cb:f9:a2:f5:
ba:a8:1f:7e:83:e2:eb:ad:c4:92:33:c7:04:d8:01:
8d:bf:70:7a:3f:a6:59:9b:8e:97:ef:6b:f0:62:42:
88:e4:7b:ee:bd:71:50:15:0d:25:5e:2b:2a:b9:c8:
09:0e:45:ed:85:42:55:ff:41:ae:aa:95:a0:92:d2:
9f:05:e6:db:f2:f4:71:28:7f:a8:64:11:ee:a3:13:
d2:9c:0f:e7:5f:fa:52:63:fd:a9:75:32:0f:7f:9b:
fb:93:86:91:24:7f:18:e1:cd:e6:97:4f:b3:b9:02:
1a:d1:93:b8:71:2d:3a:e0:10:3c:68:52:4b:24:cc:
aa:44:b3:11:b6:2b:02:8f:ed:f7:77:b6:8e:cd:be:
ef:5a:60:57:a5:70:6e:fa:cc:e7:f9:21:2f:2b:1a:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DB:F1:16:76:67:75:A7:30:48:0D:D7:5E:E7:F4:D8:10:17:21:3E
X509v3 Authority Key Identifier:
keyid:0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/wtvxFnZndacwSA3XXuf02BAXIT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/Cqw4izfUR2j84Orsl95DP69yudw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
20:5c:06:c9:9a:15:a3:25:84:06:3b:03:16:b5:98:41:01:b6:
ce:df:5e:78:7f:60:73:ec:0e:80:5d:f7:58:f5:c4:57:77:d8:
25:03:f6:df:a3:e3:6b:da:4b:7a:54:43:d9:0d:df:fb:ff:f1:
fd:95:d5:ed:6d:d9:91:85:a8:c3:c9:93:00:96:f3:6a:ae:2f:
87:d4:91:af:e5:87:85:e2:03:81:f8:9c:1b:df:d3:ac:5f:74:
2f:59:6c:5b:6e:51:8e:e2:0a:d8:09:b6:4f:70:7e:d3:5f:50:
4a:11:a3:60:e3:2e:75:bf:4f:58:02:c7:de:2e:f7:3e:5a:89:
1c:af:ad:37:3b:46:ea:1e:a4:b9:75:1b:b0:e8:ce:81:51:96:
eb:f2:79:b4:8d:4f:67:4d:8a:f3:7e:e7:cb:ea:00:a6:53:8b:
40:bf:23:7b:7b:a1:ae:96:a4:71:71:0b:96:85:c2:08:d7:a8:
5a:7c:d4:55:f7:4d:9d:db:d3:be:42:5e:75:ab:33:ec:33:37:
21:24:7e:c9:95:89:cb:bf:47:d1:3e:76:0b:db:1e:67:40:65:
69:41:be:71:6f:c9:9f:a8:69:f5:bf:c2:27:4c:e3:bb:fd:7e:
02:31:67:a8:2d:db:37:87:43:b8:b8:b6:c6:c8:bb:bf:6d:33:
dd:31:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:48 2025 by rpki-client