Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/wN1SyL0PWDNUujOkOAzGCGpZPZs.roa
File: wN1SyL0PWDNUujOkOAzGCGpZPZs.roa (raw, json)
Hash identifier: wvkV6iK2UFzAYkkBo16zK4HUUvExRbRV1gNLc2bdja4=
Subject key identifier: C0:DD:52:C8:BD:0F:58:33:54:BA:33:A4:38:0C:C6:08:6A:59:3D:9B
Certificate issuer: /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial: 0192A3D596C71AF9A6E01EE4ACF252FD70BC
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/wN1SyL0PWDNUujOkOAzGCGpZPZs.roa
Signing time: Sat 19 Oct 2024 08:12:16 +0000
ROA not before: Sat 19 Oct 2024 08:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208626
IP address blocks: 2a11:8442::/32 maxlen: 32
2a11:b781::/32 maxlen: 32
2a11:cd03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a3:d5:96:c7:1a:f9:a6:e0:1e:e4:ac:f2:52:fd:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Validity
Not Before: Oct 19 08:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0dd52c8bd0f583354ba33a4380cc6086a593d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:e9:4a:f1:8e:b0:a7:f4:80:3c:76:29:53:
61:57:de:e2:1f:b4:fe:3c:f4:d3:79:fa:8c:4d:cc:
ee:f7:3e:47:65:3f:b7:c4:7d:dd:55:e0:f2:8f:85:
aa:ea:e3:04:49:02:a8:55:a1:86:0c:e7:91:22:bd:
27:0d:6e:59:9a:7e:a3:2a:d3:00:8f:70:47:34:85:
05:a9:03:c2:f1:6f:9f:b2:a1:ad:b9:03:ed:60:8b:
8d:6d:b9:0b:3d:00:d0:0c:11:a0:59:4b:bb:31:10:
15:ad:8e:92:8e:a8:76:1c:22:1b:46:01:30:3e:2e:
6f:32:f8:d4:6c:38:63:b9:81:4a:78:3a:cf:bc:62:
91:95:44:d1:17:3c:7e:9e:52:15:64:59:49:bc:e4:
4a:19:5c:c7:1f:e5:f6:b5:62:25:e6:ce:82:38:19:
24:e9:ae:bd:a1:2d:1d:13:6d:15:ce:66:89:85:5f:
eb:f0:df:fe:62:89:83:b9:9d:e7:41:26:ae:c0:c6:
f1:b2:be:82:a2:ba:f8:bf:ea:1e:de:e1:e2:2f:d0:
bc:b8:b3:1b:19:3b:7c:c0:8c:5c:c7:fa:58:06:b3:
c9:56:8d:07:84:43:5e:e2:e1:c9:2a:6c:bd:fe:9a:
3c:b0:78:b7:e4:90:d6:26:39:a5:fe:f4:90:57:7a:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:52:C8:BD:0F:58:33:54:BA:33:A4:38:0C:C6:08:6A:59:3D:9B
X509v3 Authority Key Identifier:
keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/wN1SyL0PWDNUujOkOAzGCGpZPZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8442::/32
2a11:b781::/32
2a11:cd03::/32
Signature Algorithm: sha256WithRSAEncryption
4f:98:98:e3:51:c7:5e:73:ff:be:82:60:d4:70:3e:79:93:f4:
b8:26:8e:b9:19:3a:8d:4c:ad:d2:a0:ca:35:41:a9:78:f0:6c:
c6:1e:91:62:60:0c:3f:08:ef:50:12:b2:b5:28:d6:9b:cc:1f:
1e:16:3f:42:46:7a:75:e5:27:27:68:22:d7:44:5a:8c:07:73:
82:9a:e7:01:ab:0e:82:c0:06:5d:98:11:3a:3c:e2:51:bf:28:
bd:93:06:6e:e1:20:ea:4b:64:80:17:dd:64:86:ae:10:7a:d8:
69:82:92:dd:b8:e0:59:27:05:8f:e7:82:34:a9:7a:d8:1f:b8:
34:7d:37:61:44:ae:ab:19:fb:34:00:2b:7e:c5:3d:36:3d:93:
a5:c5:f7:81:f0:91:51:20:69:50:0a:8f:f1:f6:32:3b:d8:90:
77:8e:d5:58:6d:19:f6:af:85:de:ca:4f:47:a2:db:0f:e1:3f:
10:f5:10:35:bc:bc:5b:a1:31:84:7e:36:e7:17:bf:55:4b:bd:
8b:e9:ce:19:0a:80:23:c3:36:0b:7e:9a:ab:1f:b0:77:ab:b2:
3d:16:10:9b:f8:e5:a9:a2:6a:b5:8b:df:11:23:33:38:9f:fd:
ea:4f:89:74:91:a8:37:e9:74:bb:3c:b3:c8:e0:5d:c3:5f:65:
33:be:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:01 2025 by rpki-client