Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/W6o9lvJcnnR6KT19lEo85DcjBW4.roa
File: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (raw, json)
Hash identifier: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=
Subject key identifier: 5B:AA:3D:96:F2:5C:9E:74:7A:29:3D:7D:94:4A:3C:E4:37:23:05:6E
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 0194258F4B42C000C17C8910B502D8CEF0FF
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/W6o9lvJcnnR6KT19lEo85DcjBW4.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30860
IP address blocks: 2a00:17a0:1005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4b:42:c0:00:c1:7c:89:10:b5:02:d8:ce:f0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5baa3d96f25c9e747a293d7d944a3ce43723056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:ef:2a:8f:8a:37:da:66:46:9d:71:d5:b6:
82:b6:82:81:d3:65:d5:37:cf:ef:5c:28:e5:9c:4d:
31:9b:e5:73:7d:35:5e:04:1f:a1:85:87:2f:23:e6:
f0:8d:0b:ea:5f:05:fa:cb:11:e7:15:32:c9:04:cb:
5d:50:5b:f4:53:5c:b7:e1:fd:9f:5c:11:d7:49:e4:
ec:78:92:88:eb:f5:2b:2e:5c:ac:eb:6f:dd:8f:ac:
ec:4e:b9:1f:82:d3:ca:e6:e6:24:ec:17:a6:df:c4:
5b:79:cc:23:13:c2:53:ea:5b:89:ec:17:d4:5a:51:
f2:99:f4:45:b9:c9:cc:f8:b4:90:b5:c9:44:25:db:
46:c1:c0:72:8a:65:a8:2b:fe:c1:38:20:cb:46:a3:
4f:10:0b:bc:7c:00:f8:c7:db:c8:bb:9b:1c:b3:c5:
aa:1d:2f:ce:60:b0:e3:1d:5c:27:64:01:55:a1:98:
4d:3e:92:ad:c3:39:2a:0f:fc:f7:84:dc:f2:9a:dd:
f5:2f:0d:39:16:4d:44:a2:7a:38:a7:18:a5:a5:d4:
b1:c9:e8:cb:b8:80:0e:6a:64:32:d0:9e:66:00:d7:
f9:75:53:85:58:d6:ea:26:7f:57:90:c7:71:c3:c5:
7a:2a:fc:87:ac:8f:6c:aa:cb:1e:f3:68:6e:70:c7:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:3D:96:F2:5C:9E:74:7A:29:3D:7D:94:4A:3C:E4:37:23:05:6E
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/W6o9lvJcnnR6KT19lEo85DcjBW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:17a0:1005::/48
Signature Algorithm: sha256WithRSAEncryption
ae:b4:4a:7a:2f:06:cf:b0:0d:1a:a9:9f:72:89:7d:fe:e2:bc:
4f:ff:df:d1:e4:75:6d:4e:59:c5:68:31:10:3d:0d:9e:fb:90:
f1:29:bd:84:22:8f:7f:ea:21:f5:25:11:ab:38:d4:2b:cc:5e:
e4:52:5a:14:49:1d:38:b4:6a:31:8a:59:81:11:64:21:31:ac:
5d:7e:7a:c2:0f:14:62:fb:de:2d:f7:b9:61:b5:15:39:61:c2:
48:d2:c1:0e:a3:5f:3f:27:25:a3:63:97:d6:51:a1:09:06:ff:
c9:60:19:01:d3:1d:c2:7e:ac:b3:da:db:84:fe:4a:f2:29:a8:
cc:67:29:c7:d2:c9:d6:ac:2a:b7:6e:7c:22:76:6c:f3:cf:b3:
ca:e3:2a:76:b0:23:51:a6:ba:aa:b2:34:de:4c:63:04:89:d7:
70:17:9a:c0:36:57:65:2f:06:5b:1c:52:8a:3a:a0:64:b6:00:
dc:69:d0:09:a6:3e:d6:48:c6:cd:74:80:34:5d:71:bf:b2:6f:
8f:49:a5:cc:fa:64:c8:9c:d1:be:86:40:44:2f:67:ad:50:80:
f9:3b:24:24:cf:34:f4:ae:b0:3f:8e:82:19:99:fc:92:37:96:
30:71:65:93:1e:ce:4e:93:cd:a7:c3:f2:9c:63:83:96:9c:7c:
30:30:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:15 2025 by rpki-client