Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa
File: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (raw, json)
Hash identifier: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=
Subject key identifier: 5A:86:68:12:E1:37:38:04:4D:2A:A5:49:F6:D6:97:A3:6F:99:B7:C3
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01942747A26E88949E4120F9F46C81F31325
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212914
IP address blocks: 2a01:4020:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a2:6e:88:94:9e:41:20:f9:f4:6c:81:f3:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a866812e13738044d2aa549f6d697a36f99b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:41:9a:7b:4c:fb:51:19:1a:c1:45:69:f3:
45:b7:fb:29:98:f7:16:75:27:28:45:65:10:aa:0c:
06:5c:7c:5f:83:73:b1:20:72:a8:c9:a0:fc:27:fa:
6b:6b:6d:b8:77:51:b2:c6:26:ec:f5:95:f9:77:b8:
10:44:23:2c:8c:db:2e:65:66:bb:dc:d6:b9:b5:bc:
cb:c9:4a:e0:d8:09:5d:74:2c:c4:34:33:1c:f0:d7:
e9:33:35:85:74:23:fe:05:74:49:ce:91:cf:b8:57:
10:d2:02:e8:88:d2:73:0f:12:c6:4d:d1:c1:2e:3b:
b6:40:72:b6:61:76:d1:ce:01:8a:da:08:21:e8:21:
24:0d:cf:1f:28:25:33:5a:04:75:44:0f:65:2b:1a:
7f:0b:ae:5e:db:d4:ad:77:10:e5:17:e6:87:ce:a3:
e9:65:80:58:6b:0a:ea:8b:71:79:60:8c:26:74:b6:
f3:13:91:d8:d8:e9:e5:1f:5b:e4:40:4c:c5:b1:cd:
2e:4d:ac:78:0c:16:b2:09:43:46:34:c7:2d:39:56:
ba:65:49:51:3e:4b:0b:f9:bb:35:e9:ac:48:8b:0d:
1e:e1:37:d7:ad:1e:c8:98:c4:78:74:29:51:18:7d:
7d:c1:3f:cd:c4:42:45:ee:36:5d:2d:5b:cb:ce:ad:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:68:12:E1:37:38:04:4D:2A:A5:49:F6:D6:97:A3:6F:99:B7:C3
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4020:6::/48
Signature Algorithm: sha256WithRSAEncryption
98:6e:59:6a:81:e1:93:f2:14:85:b7:02:e1:f8:b0:33:35:b4:
38:3f:ba:0e:b1:80:fe:a1:ea:92:be:fd:92:e0:06:76:66:86:
e6:76:01:8f:a3:e9:8b:70:99:98:d8:be:8b:c6:09:73:01:b9:
f4:e0:3d:55:c5:ff:5a:4d:71:de:0f:fa:b1:d1:23:3f:90:e8:
02:f3:82:ef:ea:82:5e:c1:33:c1:4f:07:db:79:82:4e:4f:c0:
02:45:b4:f3:62:ee:23:c0:8e:f6:24:24:30:76:b4:6f:e7:46:
24:9f:00:9d:a8:61:65:e7:51:b8:3a:fe:ee:e8:cd:14:4c:b7:
d5:38:77:8c:83:52:6b:a1:0c:c9:41:9c:90:d4:47:34:da:fd:
bb:a0:bd:f3:a4:01:92:dc:e4:d5:e3:59:d2:fa:dd:a8:a9:ed:
d9:65:a3:d2:22:74:62:fa:7a:0a:e8:5a:9c:ab:d8:a0:4e:56:
c8:b2:1c:dc:6f:cc:d7:34:5a:6a:b0:87:3c:f8:66:a5:d8:16:
63:52:8a:77:65:7b:51:eb:03:a4:d3:31:6f:e5:c5:7b:c7:e8:
08:91:47:ea:b0:8c:fd:29:32:e1:68:fe:42:52:3f:13:07:e6:
73:8a:ac:35:e4:84:18:32:0d:36:c2:38:44:f1:dc:64:07:d0:
2d:4c:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:52:12 2025 by rpki-client