Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/WI0aVavPNuQB7Qxhyk0tYdzzlh4.roa
File: WI0aVavPNuQB7Qxhyk0tYdzzlh4.roa (raw, json)
Hash identifier: MA2xzrM8YbU304MsgHRAejwfy2yneIUyJP68TnZzX0A=
Subject key identifier: 58:8D:1A:55:AB:CF:36:E4:01:ED:0C:61:CA:4D:2D:61:DC:F3:96:1E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 019387D085AC81569F01E9DD7AEB7318C29B
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/WI0aVavPNuQB7Qxhyk0tYdzzlh4.roa
Signing time: Mon 02 Dec 2024 14:40:10 +0000
ROA not before: Mon 02 Dec 2024 14:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214013
IP address blocks: 2a0f:7803:f6c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:d0:85:ac:81:56:9f:01:e9:dd:7a:eb:73:18:c2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Dec 2 14:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=588d1a55abcf36e401ed0c61ca4d2d61dcf3961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:03:07:db:4d:15:80:25:a6:52:ee:44:e7:
8f:6a:8f:33:f5:36:f2:c4:c6:13:a6:50:f0:c5:99:
c7:14:78:e5:ab:40:ea:14:d3:a8:9c:2c:26:77:e4:
9b:5d:ac:e5:b0:70:0d:2e:b6:4d:34:d6:95:22:4a:
dc:bd:3c:e1:bf:70:48:13:95:1d:b8:73:ee:b5:96:
18:9d:94:21:de:b4:98:0f:5d:6b:e9:cc:b5:2d:5f:
2d:db:76:53:6f:ef:65:09:ec:78:7b:19:c3:c7:7b:
c7:11:a8:35:e6:46:4b:a7:b3:91:ac:29:78:64:b5:
c5:fd:d5:2c:24:84:d2:7c:4a:f8:d9:0a:44:5e:69:
0c:3a:14:be:3f:a8:34:2d:44:6d:d8:6b:1c:03:68:
9b:f3:09:f5:ad:d1:92:59:df:9f:06:56:74:27:2b:
da:60:a7:60:f6:10:51:f0:30:95:b5:28:40:6f:bb:
2e:3d:90:5f:28:fe:e4:54:d3:fd:90:45:a2:f8:93:
e7:4a:1e:66:da:e1:92:81:e4:d4:27:a7:50:c8:1b:
07:c7:83:aa:f2:8a:e7:39:f9:d9:3c:b7:3e:a4:fb:
35:44:16:2f:2c:09:03:4d:27:79:ad:d6:e9:1a:19:
a4:da:a8:f3:09:2d:a8:5c:96:67:d3:7c:d9:47:a6:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:1A:55:AB:CF:36:E4:01:ED:0C:61:CA:4D:2D:61:DC:F3:96:1E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/WI0aVavPNuQB7Qxhyk0tYdzzlh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f6c0::/44
Signature Algorithm: sha256WithRSAEncryption
27:e9:b4:37:ae:ba:09:64:d7:40:41:0d:bb:c5:52:be:f3:4e:
4f:27:96:27:0e:4d:74:fc:54:ae:96:1b:8e:d6:01:a4:b0:4e:
3f:d5:d3:67:5a:d9:0f:23:31:34:ee:37:57:08:45:9f:f5:88:
1e:50:7b:4f:c2:60:a0:dd:37:a5:87:74:df:37:64:ef:2f:7c:
c9:45:6e:6f:4e:c1:67:b1:4f:34:63:b7:46:c9:bc:53:fa:0e:
58:ed:04:00:95:e8:be:be:3a:f5:cb:9d:18:ee:d6:8c:6d:e1:
04:80:05:8c:90:fa:07:3c:92:b7:69:2e:b0:fb:72:8f:f2:c8:
f3:d5:64:2c:3e:16:3b:af:ef:7b:aa:21:f7:5c:88:be:86:83:
74:43:f4:90:1a:8f:41:1a:49:b8:62:98:4b:18:6e:2d:9e:6e:
53:ce:8f:02:4a:28:0c:1b:97:b1:4e:74:97:37:74:c3:e7:5e:
77:6f:4a:84:0b:59:2a:fb:4c:a8:2c:6b:1b:84:5a:97:50:15:
4c:1a:24:4e:17:a3:da:e4:ca:7e:a3:02:c0:e8:2d:36:f2:ea:
8f:34:c8:0f:6c:a0:2a:c6:e3:ef:55:fb:df:db:4f:78:81:d1:
eb:c6:66:a2:46:a8:40:ca:22:bf:e3:5c:00:2d:b4:91:68:0c:
d8:da:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:34 2025 by rpki-client