Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wXktwp5DsmHW9uzHKaOz_N128A8.roa
File: wXktwp5DsmHW9uzHKaOz_N128A8.roa (raw, json)
Hash identifier: 4eYeBiNpz03pNPDLvWNvVkg4h+HUS7JuLQZqzfTD7uk=
Subject key identifier: C1:79:2D:C2:9E:43:B2:61:D6:F6:EC:C7:29:A3:B3:FC:DD:76:F0:0F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A41578D954C5B096A48015049B89C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wXktwp5DsmHW9uzHKaOz_N128A8.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47987
IP address blocks: 2a06:8ec0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:41:57:8d:95:4c:5b:09:6a:48:01:50:49:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1792dc29e43b261d6f6ecc729a3b3fcdd76f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:0f:5d:83:19:29:9e:3c:b8:83:77:d9:f5:
b2:67:d9:9d:bd:10:02:79:b1:86:67:34:cc:be:66:
a9:cd:c7:23:e8:28:c4:a8:a3:38:94:c0:b1:be:c9:
35:f3:44:96:d4:56:38:15:a0:71:7a:1b:60:03:0b:
8e:5c:c2:3b:39:1e:da:77:ad:36:0e:cb:ef:dd:11:
79:9b:fc:d9:fd:85:bd:58:2e:61:b5:57:6e:84:d4:
81:2a:30:4f:bf:e7:2f:ef:ea:fb:f5:2c:de:d3:03:
fc:2a:7c:34:81:1c:11:dd:b3:6e:e2:1c:f4:dd:9b:
1f:36:ba:06:fd:58:9a:8e:68:2b:e9:dc:c1:39:91:
98:53:03:4a:98:0a:91:2a:02:e4:4c:58:07:cb:9c:
55:35:57:cf:be:f6:41:0f:b4:63:96:2c:2d:a5:fc:
c4:53:d8:af:ca:24:2c:43:6f:e5:03:d5:73:ba:b4:
b6:05:90:1c:f4:22:50:70:43:52:3e:90:ff:7e:8c:
4d:ef:70:38:86:4f:7e:62:07:0c:53:25:9d:1b:bb:
ea:ef:04:43:39:62:37:5f:68:e1:7f:e2:b0:52:6d:
98:6b:68:e8:e3:23:98:63:e3:e6:3f:70:f0:0c:87:
b7:12:33:ec:b1:28:0c:e1:9d:7f:ff:03:24:77:f3:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:79:2D:C2:9E:43:B2:61:D6:F6:EC:C7:29:A3:B3:FC:DD:76:F0:0F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wXktwp5DsmHW9uzHKaOz_N128A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:8ec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:b1:8e:07:36:2d:18:ea:fa:74:47:47:4b:e2:cd:f1:16:f3:
c2:9f:29:5a:e2:50:fe:58:fa:89:fc:72:4e:40:5a:9a:6f:18:
1e:3f:4c:83:3b:84:5f:9a:78:8e:f5:73:9b:a4:9d:96:99:bd:
77:60:ff:6f:de:9e:83:e9:eb:35:14:0f:fc:67:84:f3:6c:e7:
a0:c9:0c:1f:5b:13:16:d2:0c:55:d0:3c:00:32:2a:58:d0:2e:
4a:68:02:6a:47:7f:e3:7c:b0:81:e7:be:91:86:24:54:f6:2c:
1c:0e:ea:ad:86:53:c1:c2:6f:db:92:7c:5a:1c:28:c2:67:fd:
b0:62:1a:67:e6:b9:e2:d1:7f:f0:8a:45:6c:cc:32:9c:d5:ba:
a9:03:df:8b:90:09:b1:64:5c:32:08:27:7f:eb:f8:27:12:e0:
2c:41:7d:4e:cc:69:9d:a5:e0:3e:49:7b:f0:cf:f1:f9:78:18:
4b:3f:35:9a:c2:90:8b:fc:ff:50:e8:82:6a:ac:15:f8:80:82:
96:6b:7f:67:22:aa:3b:f0:17:b6:79:61:71:41:76:fb:91:c1:
9f:ef:48:d8:eb:63:bd:02:1a:e5:0a:6e:d4:54:94:52:dd:7f:
36:17:84:9b:b2:24:be:57:f0:e0:48:df:99:02:7d:95:15:4d:
5b:8a:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:09 2025 by rpki-client