Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/WNwGMlF8HyleZw_sjT3gIhzEnRk.roa
File: WNwGMlF8HyleZw_sjT3gIhzEnRk.roa (raw, json)
Hash identifier: T6H94RdGbaK6b2iiCjoHSo0V7zCoWUBk1fn8N66633w=
Subject key identifier: 58:DC:06:32:51:7C:1F:29:5E:67:0F:EC:8D:3D:E0:22:1C:C4:9D:19
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDC3BFFEE6F3B0DEC2E1A74EEE5849
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/WNwGMlF8HyleZw_sjT3gIhzEnRk.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208240
IP address blocks: 2a07:3500:1060::/48 maxlen: 48
2a07:3500:1061::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:bf:fe:e6:f3:b0:de:c2:e1:a7:4e:ee:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58dc0632517c1f295e670fec8d3de0221cc49d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:e8:8b:c2:cf:5e:29:60:3e:6d:0f:d7:4c:
61:e1:55:a1:a0:a2:12:4d:77:0f:7d:e6:61:91:14:
08:c7:5c:06:86:77:7c:45:74:a9:07:80:b0:fb:e3:
a9:e4:3a:b4:3f:47:55:ba:80:90:e1:cd:4d:cc:07:
fb:85:b3:45:e4:8e:f0:58:aa:c8:32:f5:4b:14:d3:
81:2e:4a:36:37:66:ce:97:90:69:7d:7d:05:e3:e5:
0f:98:52:0b:37:99:82:92:20:41:b0:59:c5:ee:0f:
05:79:53:b9:61:7d:40:9b:f2:e1:67:50:95:ee:20:
17:2c:a3:3c:a0:50:ab:7e:2a:78:ac:22:c0:53:9d:
1d:dd:ae:0d:4c:d0:94:2a:45:30:b0:db:dc:b5:03:
c0:6a:37:00:2f:1b:c8:6d:96:a8:18:6e:35:e1:0d:
a4:b8:f6:61:c7:36:15:64:bb:50:2d:cc:9f:d3:2c:
ff:c1:a7:a0:4b:a6:13:35:4f:c7:5b:c8:40:86:c3:
f8:df:5f:ce:c6:96:7b:78:29:9f:0b:e2:19:f0:0d:
26:fb:cd:34:31:06:07:71:fe:03:10:81:7a:67:ba:
f0:73:f1:2a:a4:43:d1:1e:53:f2:30:50:de:c5:4c:
7b:e2:e5:9c:df:8f:d7:bb:e5:eb:1d:2d:26:12:17:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:06:32:51:7C:1F:29:5E:67:0F:EC:8D:3D:E0:22:1C:C4:9D:19
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/WNwGMlF8HyleZw_sjT3gIhzEnRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1060::/47
Signature Algorithm: sha256WithRSAEncryption
2b:09:f6:05:15:90:c5:8c:aa:0d:b4:c1:90:3e:10:4c:82:68:
28:95:b4:ff:c5:24:28:b8:80:00:a8:87:d2:a6:8d:1c:7b:f5:
ad:54:e8:8a:2d:97:d8:46:e9:a4:51:5f:0a:a3:ac:9e:98:3a:
ea:49:2a:1e:6e:f7:4a:dd:e4:8b:bc:be:b6:ba:8c:d5:51:69:
72:30:58:be:c8:a9:60:2f:2e:f1:c9:14:fc:6b:7a:d1:6b:30:
46:d9:28:9e:4e:d9:ff:ed:83:c6:5a:27:f1:6b:af:5e:ec:79:
ef:ad:48:b0:8a:60:4c:52:4e:80:a9:9a:2e:3b:a2:35:b8:b4:
b6:60:8f:51:25:56:e6:54:a5:6f:8f:f5:29:76:a1:b4:af:5a:
f0:fa:f8:c6:7a:cb:51:76:ac:40:ba:88:d8:96:52:9c:f7:c4:
7e:ee:04:4a:3b:87:8f:19:e1:41:cb:00:13:c3:53:4d:f4:34:
3a:6f:fb:b1:72:b9:b2:c0:18:b3:d9:35:3a:9c:e4:1b:c1:e3:
8e:99:cb:18:b8:d4:17:36:25:20:09:e0:6d:ee:6f:cd:4a:05:
1f:a3:a5:09:2b:4a:31:c9:45:73:31:86:7a:5d:30:7e:42:f9:
ff:f7:d4:5b:91:9c:6a:63:b8:d6:bb:22:ed:24:0c:0c:79:5a:
15:7f:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:36 2025 by rpki-client