Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/waNULbcRhTUiNsANSLGcB4J4itI.roa
File: waNULbcRhTUiNsANSLGcB4J4itI.roa (raw, json)
Hash identifier: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=
Subject key identifier: C1:A3:54:2D:B7:11:85:35:22:36:C0:0D:48:B1:9C:07:82:78:8A:D2
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 01942825CEA771D8750A78F182C82C8CD292
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/waNULbcRhTUiNsANSLGcB4J4itI.roa
Signing time: Thu 02 Jan 2025 17:52:33 +0000
ROA not before: Thu 02 Jan 2025 17:52:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 2001:67c:eb0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ce:a7:71:d8:75:0a:78:f1:82:c8:2c:8c:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Jan 2 17:52:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1a3542db71185352236c00d48b19c0782788ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:91:59:b9:16:45:1a:20:5b:ce:32:40:69:
41:50:5e:5c:0a:0b:ec:66:58:53:97:e7:b6:1b:36:
18:35:84:e5:d7:47:56:bf:c6:6e:ee:21:59:b9:f6:
f8:35:61:4d:29:a5:02:c0:72:b2:fc:b1:6c:82:d1:
9d:52:6a:45:f2:81:ea:d5:10:57:f5:84:a3:a2:8d:
42:e4:8c:e2:af:50:0a:34:60:11:5d:d9:10:d1:18:
be:18:65:86:01:2f:bf:7c:dc:28:aa:47:cd:25:e2:
24:ec:93:dc:7a:6f:a3:f7:f4:c0:cd:63:f2:58:3d:
54:f0:8d:76:44:27:d2:fd:f8:38:1d:c4:c3:4b:15:
1d:07:2e:27:34:af:79:c4:a4:85:3d:1d:9a:a7:e6:
c3:27:8f:a7:b3:4e:a4:5b:09:4e:51:1d:bc:23:e0:
18:58:e2:e8:d1:23:73:b8:c7:be:7d:c3:51:65:f9:
e8:d6:76:f4:8a:a9:eb:76:bf:4f:79:bf:5c:71:8b:
c4:f2:e7:c4:08:ad:e8:1a:af:69:c3:ab:2d:49:25:
cf:b2:1c:fa:c3:00:4c:b4:22:ee:8d:de:08:dd:81:
d5:0b:6c:15:af:6e:33:e5:5c:a0:b5:fc:6f:16:41:
5b:c1:16:bb:5b:66:6c:89:0b:ad:ef:62:4e:8b:12:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:54:2D:B7:11:85:35:22:36:C0:0D:48:B1:9C:07:82:78:8A:D2
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/waNULbcRhTUiNsANSLGcB4J4itI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:eb0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7a:24:96:5e:01:e6:9a:62:4e:9f:e9:2a:19:7d:79:f0:1d:
15:6b:9c:7b:34:01:69:e4:ff:68:ae:78:e0:bd:06:49:b3:91:
fa:bf:4e:28:34:e2:ff:16:7e:eb:a7:1f:b3:e6:58:7d:85:76:
c1:2b:bb:61:ce:6f:2a:9d:2d:d4:88:0f:cf:7d:49:31:c6:6e:
ae:c4:c0:56:67:7b:fa:90:78:42:7e:7b:0a:2e:75:dc:61:e1:
50:cc:ca:d5:09:4c:dd:b9:5d:5e:b5:3b:73:84:13:c9:e2:c1:
56:3a:b0:f1:f6:96:b3:ed:73:7c:40:ab:ba:84:99:7a:55:24:
3f:4a:42:6c:c3:2b:29:a4:53:df:d9:9f:4a:6c:66:c6:eb:96:
88:fd:91:93:c3:62:9d:7d:e6:82:7f:56:5d:d2:12:6f:9a:1e:
34:2f:d3:6d:11:cd:e0:a0:a7:74:49:36:1d:f0:36:9b:d5:8a:
58:cb:0d:93:05:14:7f:b5:5e:60:ae:c9:71:0a:d9:4e:ba:ff:
14:c9:d7:9e:57:d4:74:3e:9c:24:41:ae:7a:80:03:7a:60:c8:
55:2e:87:6f:11:32:a5:83:b0:02:86:73:76:d2:ef:06:24:a8:
63:61:af:6f:f9:83:f6:5b:6a:87:dd:e8:08:a1:e6:46:d2:27:
26:df:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:17 2025 by rpki-client