Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/vWqmka3oaZQE1cXhvhKJIPN3ikY.roa
File: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (raw, json)
Hash identifier: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=
Subject key identifier: BD:6A:A6:91:AD:E8:69:94:04:D5:C5:E1:BE:12:89:20:F3:77:8A:46
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019423D76033BE888FD6E54B3E802095B58E
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/vWqmka3oaZQE1cXhvhKJIPN3ikY.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205749
IP address blocks: 2a04:92c7:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:60:33:be:88:8f:d6:e5:4b:3e:80:20:95:b5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd6aa691ade8699404d5c5e1be128920f3778a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:7a:20:94:85:2f:d8:dd:a3:43:c4:d9:1f:
b6:b3:cd:f2:22:1c:72:b6:29:d5:2e:4e:86:f4:4a:
a4:24:95:8c:8b:59:e1:0e:5d:21:31:60:56:0b:dc:
83:2e:d3:13:97:18:3a:3b:fd:05:98:7b:05:10:31:
de:7f:44:fd:e9:80:08:20:71:1c:cb:a8:fa:80:1c:
db:be:f9:bd:ca:21:01:16:62:cd:c5:bc:31:e8:46:
75:3f:bc:23:4d:13:6f:e8:59:25:ea:14:e0:5c:b3:
bc:7a:73:9b:ec:db:49:49:74:a8:01:30:a7:e0:d1:
8a:9c:3c:0e:99:4f:0e:30:11:ed:0b:36:c6:25:aa:
af:c7:07:b5:8a:c8:4c:8e:01:a5:04:1a:ae:bf:d1:
84:7e:0c:26:41:c8:27:ba:2b:d6:07:86:d9:ff:e6:
04:dd:fa:a5:4f:49:6a:64:25:a1:ce:39:e4:eb:67:
44:d1:64:40:55:6d:b6:92:78:a3:8b:16:00:59:a1:
f9:e9:c3:e7:a3:ad:c9:81:7f:00:4e:d2:65:42:2f:
d3:50:11:96:4d:98:d3:93:94:76:a9:e2:8e:ec:63:
6a:57:8c:99:a2:0f:d2:a1:29:08:85:3c:62:b6:69:
7b:42:80:bd:9c:f6:bd:0c:49:18:08:56:6b:cd:5d:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:A6:91:AD:E8:69:94:04:D5:C5:E1:BE:12:89:20:F3:77:8A:46
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/vWqmka3oaZQE1cXhvhKJIPN3ikY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c7:31::/48
Signature Algorithm: sha256WithRSAEncryption
41:7d:8e:fc:9e:a8:0e:5d:61:c8:f5:64:ee:c8:38:59:14:24:
11:44:d3:d5:64:c6:18:f1:16:9a:8a:63:fe:71:25:55:13:75:
f8:72:ad:35:7e:6e:19:6f:e7:29:dd:a9:ac:c1:de:59:ed:f5:
35:a3:ab:2f:b8:df:28:21:b0:89:0c:61:01:b8:8f:43:32:67:
e5:e4:5c:47:46:f1:15:83:35:f9:67:66:fd:65:19:a7:ca:bb:
c0:2c:2d:61:36:2e:c9:96:a3:2c:34:3e:23:59:f8:7a:73:d1:
fc:95:5d:72:86:c0:2a:8c:23:94:00:33:2a:e1:56:4e:53:cd:
b6:49:77:8d:98:c7:25:ad:d2:4d:5f:e1:52:40:c3:47:13:1e:
fa:f4:9c:66:b6:b0:9b:cd:3a:f7:b2:a9:30:c7:08:38:43:1c:
79:7f:0a:12:f6:6e:58:89:23:1b:5d:e2:47:ad:66:bc:d9:a5:
27:f6:db:c9:4a:84:6a:b1:74:c7:3f:2f:d3:f7:e7:25:0b:24:
dc:f0:ee:da:48:9b:fc:be:34:76:df:37:f6:99:eb:95:52:6d:
31:b0:04:58:ef:99:56:8f:b7:ca:9b:cf:5f:b1:21:a9:ff:bf:
0b:29:e4:69:38:7c:16:80:b8:bf:bc:49:22:97:62:67:69:72:
4e:41:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:08 2025 by rpki-client