Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/WtTnXLUXMw9Ti7tN0A6F0dOXspU.roa
File: WtTnXLUXMw9Ti7tN0A6F0dOXspU.roa (raw, json)
Hash identifier: L4cFk5sAJVDU2sNbVBUqZDZD30z2LomzPB7O51LX0GQ=
Subject key identifier: 5A:D4:E7:5C:B5:17:33:0F:53:8B:BB:4D:D0:0E:85:D1:D3:97:B2:95
Certificate issuer: /CN=15a03a003b018763507529e60a2783e89ec61727
Certificate serial: 018D380B75C642F770F6EC8690A40E25322F
Authority key identifier: 15:A0:3A:00:3B:01:87:63:50:75:29:E6:0A:27:83:E8:9E:C6:17:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaA6ADsBh2NQdSnmCieD6J7GFyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/WtTnXLUXMw9Ti7tN0A6F0dOXspU.roa
Signing time: Tue 23 Jan 2024 20:38:11 +0000
ROA not before: Tue 23 Jan 2024 20:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 2a07:2487::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:38:0b:75:c6:42:f7:70:f6:ec:86:90:a4:0e:25:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a03a003b018763507529e60a2783e89ec61727
Validity
Not Before: Jan 23 20:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad4e75cb517330f538bbb4dd00e85d1d397b295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:f5:6e:af:7c:96:5c:d6:68:24:95:24:1a:
d7:9b:b9:34:84:ee:07:42:45:35:6b:5f:4f:ff:2f:
ae:8b:48:df:ed:5c:81:a8:34:b4:b4:85:d5:db:f4:
e4:e6:04:38:94:42:b6:76:ad:d0:33:eb:5f:4a:59:
0a:cc:17:dc:9c:85:13:72:72:ea:6b:73:6a:f3:48:
4a:04:a3:57:54:44:7e:a7:11:ed:0d:19:40:16:5d:
6e:75:a8:47:60:1e:92:84:08:a8:7f:7b:bb:ee:e9:
08:81:90:97:44:eb:a0:27:39:2a:55:21:ba:fb:47:
4f:d3:a5:54:b1:fe:27:86:49:51:0c:93:6e:e6:fe:
74:c7:57:e5:5e:a9:61:5c:b1:3a:ce:00:b7:48:65:
d4:57:e6:cf:4f:c5:38:2d:87:0f:12:2b:21:11:23:
e3:34:81:53:27:5d:90:0f:b3:dc:26:32:a5:b2:8a:
19:3b:3a:1f:c5:91:a9:97:15:e6:b2:af:5c:65:78:
f9:d4:2c:c4:55:06:4b:89:25:f1:64:27:2c:73:19:
55:78:fa:22:fb:97:af:93:88:74:4a:ac:95:83:98:
e9:51:26:ff:d2:39:20:0b:46:cd:56:78:73:88:e2:
a9:b7:e2:60:f0:09:91:1e:a0:ca:26:1b:99:59:65:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:E7:5C:B5:17:33:0F:53:8B:BB:4D:D0:0E:85:D1:D3:97:B2:95
X509v3 Authority Key Identifier:
keyid:15:A0:3A:00:3B:01:87:63:50:75:29:E6:0A:27:83:E8:9E:C6:17:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaA6ADsBh2NQdSnmCieD6J7GFyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/WtTnXLUXMw9Ti7tN0A6F0dOXspU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/FaA6ADsBh2NQdSnmCieD6J7GFyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2487::/32
Signature Algorithm: sha256WithRSAEncryption
6c:a0:55:3f:49:bd:c1:68:9c:ec:7d:58:0d:a4:a7:84:d1:1e:
af:c8:3a:e6:b3:c0:f2:93:f1:93:47:bd:23:c8:7a:99:0e:54:
88:d2:ea:c2:00:94:d2:57:f0:f4:c5:b9:75:a5:55:ff:9a:2a:
1a:75:44:17:16:ba:54:60:c3:32:bc:b3:62:ef:3f:03:14:9c:
98:73:9a:1f:ec:ff:65:71:d3:7b:a7:eb:05:c2:1f:53:83:09:
fa:2a:81:44:23:5b:34:a2:28:45:a8:91:32:34:6f:36:bc:72:
4b:7e:c6:0c:b8:3b:99:31:0b:ae:56:ef:c1:15:49:17:06:11:
c5:bf:1c:8e:c7:aa:74:50:b3:dc:b1:8b:8d:18:35:50:21:42:
b7:48:4a:79:6f:68:cc:4c:36:b4:07:a5:67:ac:16:30:1f:3a:
06:8b:7d:2a:dd:95:00:53:f2:d5:f4:53:e3:80:69:d8:c7:e2:
a4:e6:d6:24:e6:fc:b9:dc:62:fc:03:91:c5:46:bc:88:15:68:
e7:11:fe:51:e6:b0:94:13:96:60:0a:c8:ac:04:ec:3d:80:d0:
4c:da:22:a0:42:41:d1:9f:85:22:b9:6f:86:73:1b:fd:a1:61:
63:0a:45:6f:8d:7a:36:3c:a5:10:d2:87:bc:12:e7:e3:3f:9e:
81:7e:8e:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY04C3XGQvdw9uyGkKQOJTIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTAzYTAwM2IwMTg3NjM1MDc1MjllNjBhMjc4M2U4OWVj
NjE3MjcwHhcNMjQwMTIzMjAzODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWQ0ZTc1Y2I1MTczMzBmNTM4YmJiNGRkMDBlODVkMWQzOTdiMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm/1bq98llzWaCSVJBrXm7k0hO4H
QkU1a19P/y+ui0jf7VyBqDS0tIXV2/Tk5gQ4lEK2dq3QM+tfSlkKzBfcnIUTcnLq
a3Nq80hKBKNXVER+pxHtDRlAFl1udahHYB6ShAiof3u77ukIgZCXROugJzkqVSG6
+0dP06VUsf4nhklRDJNu5v50x1flXqlhXLE6zgC3SGXUV+bPT8U4LYcPEishESPj
NIFTJ12QD7PcJjKlsooZOzofxZGplxXmsq9cZXj51CzEVQZLiSXxZCcscxlVePoi
+5evk4h0SqyVg5jpUSb/0jkgC0bNVnhziOKpt+Jg8AmRHqDKJhuZWWUO/wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFrU51y1FzMPU4u7TdAOhdHTl7KVMB8GA1UdIwQY
MBaAFBWgOgA7AYdjUHUp5gong+iexhcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFBNkFEc0JoMk5RZFNubUNpZUQ2SjdHRnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80OTQ4MzQtZjU1OS00MGZmLWFiMWYt
ZjcwM2Y0ZWJhNTUzLzEvV3RUblhMVVhNdzlUaTd0TjBBNkYwZE9Yc3BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80OTQ4MzQtZjU1OS00MGZmLWFiMWYtZjcwM2Y0ZWJhNTUz
LzEvRmFBNkFEc0JoMk5RZFNubUNpZUQ2SjdHRnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgckhzAN
BgkqhkiG9w0BAQsFAAOCAQEAbKBVP0m9wWic7H1YDaSnhNEer8g65rPA8pPxk0e9
I8h6mQ5UiNLqwgCU0lfw9MW5daVV/5oqGnVEFxa6VGDDMryzYu8/AxScmHOaH+z/
ZXHTe6frBcIfU4MJ+iqBRCNbNKIoRaiRMjRvNrxyS37GDLg7mTELrlbvwRVJFwYR
xb8cjseqdFCz3LGLjRg1UCFCt0hKeW9ozEw2tAelZ6wWMB86Bot9Kt2VAFPy1fRT
44Bp2MfipObWJOb8udxi/AORxUa8iBVo5xH+UeawlBOWYArIrATsPYDQTNoioEJB
0Z+FIrlvhnMb/aFhYwpFb416NjylENKHvBLn4z+egX6O4w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:05 2025 by rpki-client