Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/wa6e-L5g3p2SNEGIRb1a4oqT56I.roa
File: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (raw, json)
Hash identifier: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=
Subject key identifier: C1:AE:9E:F8:BE:60:DE:9D:92:34:41:88:45:BD:5A:E2:8A:93:E7:A2
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 0194228E1201D0422DC5F4DB3A231405B681
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/wa6e-L5g3p2SNEGIRb1a4oqT56I.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199815
IP address blocks: 2001:678:870::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:12:01:d0:42:2d:c5:f4:db:3a:23:14:05:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ae9ef8be60de9d9234418845bd5ae28a93e7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:f3:70:b7:58:5e:c3:03:0f:bd:b4:74:f0:
5b:ad:5f:c0:6e:9a:4f:ef:a8:53:0a:aa:2f:c5:16:
11:34:53:fa:c5:44:f4:eb:23:07:15:20:f1:d6:07:
d4:e1:96:c1:74:7e:33:8b:88:c0:2f:ad:90:0f:d1:
54:19:4e:65:08:63:30:95:be:66:12:b5:52:6a:61:
ad:2b:5b:74:d8:06:f4:b1:b0:6a:76:28:58:86:f1:
20:85:44:58:37:5f:2d:6c:16:d4:cb:ad:cb:3e:dd:
79:2c:f3:2f:ec:02:99:11:5b:78:e7:78:f4:f1:82:
a9:0d:f6:db:ff:4c:4f:24:50:a7:ae:09:99:7b:95:
35:d4:88:a3:07:dc:dd:79:0a:cf:47:59:bb:43:be:
a3:e8:d6:d6:76:d5:79:d3:8b:a0:4c:41:b8:da:ee:
11:61:bc:c6:f6:c0:b6:7d:df:5f:ae:26:43:59:05:
17:f8:44:a2:de:79:2e:80:63:c0:c2:76:86:2d:e4:
ed:05:fb:75:a3:66:fc:94:54:85:4b:65:3f:1d:5c:
52:7e:fc:bb:23:40:81:b1:b7:e6:f8:12:ef:5c:b9:
4b:18:09:ac:09:bf:19:ea:a3:48:15:ec:6a:77:b6:
51:23:16:cf:53:bd:6a:c0:86:0f:05:88:46:7e:bb:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:9E:F8:BE:60:DE:9D:92:34:41:88:45:BD:5A:E2:8A:93:E7:A2
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/wa6e-L5g3p2SNEGIRb1a4oqT56I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:870::/48
Signature Algorithm: sha256WithRSAEncryption
10:e5:1b:89:2b:3d:2f:ce:c6:54:99:3c:5a:13:cc:ca:5b:19:
c1:a9:b3:5b:f5:f7:b9:d7:a5:8a:df:12:1e:25:d0:ee:ed:16:
cd:df:a9:70:be:90:5a:47:77:be:2b:eb:76:ff:27:a7:d2:08:
de:b1:3d:b3:e8:15:20:d2:d6:05:c0:2d:20:db:99:c1:f3:98:
bc:2b:ff:4f:98:e5:23:48:3f:93:e5:0f:85:26:d1:4f:94:ee:
c5:61:da:be:64:e5:2d:42:64:97:03:f7:ed:4c:08:30:1a:61:
5c:2b:c8:cc:7e:a6:dc:f7:67:ae:1c:a9:78:66:c0:52:9f:ba:
62:91:2b:0c:1d:27:c5:96:76:c0:40:f6:b5:e8:2a:d0:b4:05:
25:d1:4b:8b:cb:93:90:1f:36:e2:cc:23:1a:b4:ae:85:5e:ad:
58:90:7b:26:ac:59:6e:3a:15:bd:a0:0a:8e:7c:5d:6d:e2:5f:
a5:15:ee:43:51:5b:d4:ea:b0:6a:1c:0f:7e:5e:2c:56:48:53:
90:0c:77:8c:10:d2:d9:46:2d:08:fb:fd:6c:54:7a:2d:60:47:
2c:28:53:0c:7d:eb:e4:d5:4e:32:08:39:c8:70:b4:67:92:b1:
c3:aa:f1:d7:c6:bf:c9:61:c8:36:eb:93:15:45:39:c4:74:c5:
ac:20:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:16 2025 by rpki-client