Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WpysBLGD7uj7E46Wca4cUSO3gjo.roa
File: WpysBLGD7uj7E46Wca4cUSO3gjo.roa (raw, json)
Hash identifier: bCpnjVYwxrV/2h5n3XtyojmIX15G5jGWaHwCNpEIoIw=
Subject key identifier: 5A:9C:AC:04:B1:83:EE:E8:FB:13:8E:96:71:AE:1C:51:23:B7:82:3A
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018D6A6E65BCCD25026D0450805E34A84CB9
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WpysBLGD7uj7E46Wca4cUSO3gjo.roa
Signing time: Fri 02 Feb 2024 15:27:16 +0000
ROA not before: Fri 02 Feb 2024 15:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a13:93c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:6e:65:bc:cd:25:02:6d:04:50:80:5e:34:a8:4c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 2 15:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a9cac04b183eee8fb138e9671ae1c5123b7823a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:5b:41:c5:4f:d1:9d:15:ea:9f:0b:46:ff:
ce:17:f2:b9:3a:25:ce:f5:53:fe:59:11:b8:82:09:
d3:83:de:f5:20:d0:00:c3:7b:f5:0f:42:e6:f0:96:
37:fa:59:03:d2:8c:56:ba:11:d5:18:af:3c:3f:10:
38:59:b2:55:35:2e:90:e7:69:bd:e7:29:2c:29:e9:
06:e6:10:8f:fc:d2:21:16:4a:1f:45:9e:82:e7:2e:
d1:d1:0d:cf:09:f5:38:e5:86:cd:02:aa:6a:e8:2a:
9c:ab:77:18:a4:b2:ee:1f:d0:bf:10:c7:d8:b0:4d:
7a:50:c4:92:8a:1b:1b:61:9f:58:aa:5c:4b:71:e6:
0f:70:c9:33:7c:45:2f:fe:02:06:95:63:aa:54:8b:
76:32:3d:89:46:70:e7:1c:03:b1:86:29:77:d8:3d:
38:95:81:d6:53:f5:f7:a7:77:ef:31:94:ea:0e:c3:
f6:eb:c6:03:99:c1:48:cf:41:32:5b:2e:b8:62:4e:
ee:8a:d2:5d:16:23:38:24:9a:8c:ce:5b:82:9d:bd:
e5:a1:48:0a:ca:77:e1:1b:fc:fa:78:00:a7:79:d7:
19:2f:92:8b:f1:70:92:c6:6e:df:0b:48:b5:1c:48:
c7:5e:ef:bf:5f:61:f0:16:bc:87:87:26:72:91:15:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:AC:04:B1:83:EE:E8:FB:13:8E:96:71:AE:1C:51:23:B7:82:3A
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WpysBLGD7uj7E46Wca4cUSO3gjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:42:16:30:22:cf:66:9c:09:bd:76:23:f0:42:49:89:5d:a4:
68:a1:c1:6a:27:93:f8:87:74:07:80:78:92:5e:f3:03:37:85:
01:e0:db:a5:26:42:58:a4:14:61:fa:7b:00:f8:d5:8a:ab:19:
fe:a8:9c:26:45:8e:5c:cf:df:d2:44:38:ab:fd:9e:42:09:7f:
8b:aa:6f:2f:05:74:1b:57:9a:db:75:5b:39:08:ef:5d:fd:11:
60:dd:5c:e7:e3:e9:3d:91:77:ce:b5:9c:de:fd:43:af:17:67:
6a:5f:f3:38:f4:1b:a5:11:5d:ae:0d:41:e4:bc:14:75:29:a4:
7d:f9:00:7d:a9:d1:d3:9d:1f:99:87:ac:e6:b8:61:12:5e:01:
d2:6b:f4:8d:3e:73:29:e1:25:ce:e0:55:86:49:d1:45:be:e4:
3f:7f:03:94:e6:4e:70:ca:25:ff:64:e2:ee:5c:ef:a5:0e:54:
e1:11:73:d7:fe:78:e3:e5:0b:01:db:ed:40:77:ec:00:41:23:
72:34:c4:b0:b7:9b:d5:da:57:ea:3f:16:e9:61:af:e7:be:b5:
87:f6:1f:ba:58:ef:08:cc:6b:7a:af:99:6c:38:88:50:95:79:
55:7a:4d:66:86:4f:cc:36:19:31:41:5a:d2:d7:70:2a:d1:0f:
5b:e9:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:16 2025 by rpki-client