Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/wRlQRR0wjybotkSwm99MDtTpSls.roa
File: wRlQRR0wjybotkSwm99MDtTpSls.roa (raw, json)
Hash identifier: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=
Subject key identifier: C1:19:50:45:1D:30:8F:26:E8:B6:44:B0:9B:DF:4C:0E:D4:E9:4A:5B
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 01941FFA9D026D6FF1B737496914EC04D5BA
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/wRlQRR0wjybotkSwm99MDtTpSls.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0a:2b00:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:02:6d:6f:f1:b7:37:49:69:14:ec:04:d5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c11950451d308f26e8b644b09bdf4c0ed4e94a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:47:df:a2:3d:a3:33:c8:56:31:94:eb:05:
67:12:a3:be:a8:8d:3b:35:8e:9a:7a:8a:a7:4c:b5:
12:87:2c:5e:e3:e5:63:bd:11:3a:94:a9:17:59:4c:
3d:39:9f:60:82:d8:d6:c0:e3:ae:84:b6:98:d0:68:
07:b2:b5:86:1b:77:90:6c:a4:1f:86:b1:03:0f:62:
57:10:28:a2:74:9f:38:54:05:eb:23:66:54:16:37:
bb:0b:28:84:32:a8:47:26:58:e2:5e:05:97:0c:43:
6d:48:16:64:2a:01:82:9d:8f:31:9b:aa:32:47:43:
16:57:26:8f:8c:82:90:dc:4f:ff:12:d4:18:d7:d7:
2f:e1:06:3b:a5:75:8d:61:2b:7a:0d:3d:f4:1c:05:
17:19:75:c6:e1:f1:1e:43:c7:f8:3c:6e:32:7c:f4:
4a:ce:15:3d:ec:19:e8:65:09:b6:f5:6a:d4:18:39:
50:38:79:53:31:ee:19:03:7b:65:c4:e6:5d:8e:83:
69:69:af:f5:da:de:92:ed:81:52:35:7b:62:c8:0e:
f4:a5:e8:9b:ec:12:b7:07:95:db:50:2a:a2:d7:e4:
84:41:62:9c:71:58:fc:50:d8:88:2a:9e:73:f3:4f:
05:8b:24:bd:69:18:8b:6a:f4:0c:7d:71:2b:ae:85:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:50:45:1D:30:8F:26:E8:B6:44:B0:9B:DF:4C:0E:D4:E9:4A:5B
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/wRlQRR0wjybotkSwm99MDtTpSls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2b00:20::/48
Signature Algorithm: sha256WithRSAEncryption
96:93:04:5a:9f:e3:7d:b6:22:e5:7e:a6:1e:9e:91:22:a8:eb:
11:d8:98:2f:28:3a:29:a5:a6:c4:6c:16:da:50:c8:54:95:40:
e1:22:9c:4a:fc:01:87:cf:76:f5:4f:f1:c7:fb:a8:bb:1d:14:
c4:65:24:b6:ee:e5:3e:3c:27:5c:1b:15:fa:85:98:09:a9:5e:
9a:b3:50:ee:15:5d:7c:df:8a:ad:10:d8:27:07:c3:fb:9f:a4:
1e:b1:6e:e0:9e:50:09:d0:50:60:26:4d:bb:4c:e6:8b:34:89:
f2:4f:02:e3:86:c7:0a:f4:f4:fb:1e:d4:77:63:c7:48:63:95:
46:ea:88:87:15:a3:47:4e:77:c2:d1:e0:51:67:b1:3a:fe:59:
cf:c1:5f:14:85:47:82:31:06:dd:5a:1d:3d:75:18:37:bb:df:
81:55:0d:5c:e6:17:44:60:fb:d6:f9:92:c4:0d:d5:c6:d7:5a:
8a:03:1e:5b:b3:ba:95:d9:84:2b:ff:ea:1c:1e:d6:4c:62:65:
8f:50:3f:44:9a:04:62:9d:3c:20:c1:0c:7e:55:65:b4:6f:9f:
a2:ca:28:8b:c3:3b:b0:1e:ae:f1:00:7d:28:46:55:2d:b4:96:
6f:8e:bd:4b:3c:34:5e:1b:73:0e:ee:ca:af:ea:4e:26:af:c8:
6a:bc:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:33 2025 by rpki-client