Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/W7RGMkdMK8dyydygqKWrIDXmfZA.roa
File: W7RGMkdMK8dyydygqKWrIDXmfZA.roa (raw, json)
Hash identifier: hKMA4LCXgWq6mCGzKGDVOlXR41+f2MCxkGBWcmeITB4=
Subject key identifier: 5B:B4:46:32:47:4C:2B:C7:72:C9:DC:A0:A8:A5:AB:20:35:E6:7D:90
Certificate issuer: /CN=c2a80723992115cad17775b7a71c0f417d3643a2
Certificate serial: 01856C4A5114F64DBFA579FBABE7A3FD3B33
Authority key identifier: C2:A8:07:23:99:21:15:CA:D1:77:75:B7:A7:1C:0F:41:7D:36:43:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqgHI5khFcrRd3W3pxwPQX02Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/W7RGMkdMK8dyydygqKWrIDXmfZA.roa
Signing time: Sun 01 Jan 2023 07:44:47 +0000
ROA not before: Sun 01 Jan 2023 07:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207908
IP address blocks: 2001:678:d84::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:51:14:f6:4d:bf:a5:79:fb:ab:e7:a3:fd:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a80723992115cad17775b7a71c0f417d3643a2
Validity
Not Before: Jan 1 07:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bb44632474c2bc772c9dca0a8a5ab2035e67d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:94:57:b9:97:77:4d:e6:68:d6:c2:7c:88:
51:0a:34:4b:ad:a1:49:6e:1c:49:a3:1f:f6:cf:63:
71:6a:9b:97:5f:a7:97:9c:12:6b:f7:eb:13:b3:1a:
6a:f6:fc:b4:4f:d1:dc:44:f4:4b:51:01:09:d3:8b:
2a:52:1a:4e:07:9f:09:82:9d:96:ee:c3:0c:a6:b5:
a2:64:a2:d2:f5:8e:2b:d9:23:49:17:02:5f:35:f2:
d1:a3:af:d5:13:ea:f9:cc:1c:32:6a:71:c1:af:6c:
e0:41:45:fa:05:41:7f:41:91:3d:06:5b:39:9b:0d:
93:74:c5:01:df:5f:68:02:a5:79:a8:44:dd:b3:af:
7a:fb:4f:30:0b:5f:e3:ef:69:12:74:b4:ca:77:3f:
60:5b:00:2f:5c:32:91:ac:ac:fe:c1:b1:b1:28:02:
c4:19:a2:d4:2b:8f:17:31:62:e1:f9:d8:fc:0f:e1:
a8:21:3b:27:b7:b0:15:32:27:6c:60:9f:ef:ed:80:
85:d5:b7:cd:e0:41:dc:85:63:76:b4:cf:62:7d:42:
9d:71:c2:bc:c4:54:3c:ed:29:40:4f:10:45:f6:35:
f6:dc:3f:04:e1:77:26:eb:3c:95:6f:fa:26:05:c8:
76:93:02:27:7c:4f:34:8c:a1:1c:48:49:83:d6:43:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:46:32:47:4C:2B:C7:72:C9:DC:A0:A8:A5:AB:20:35:E6:7D:90
X509v3 Authority Key Identifier:
keyid:C2:A8:07:23:99:21:15:CA:D1:77:75:B7:A7:1C:0F:41:7D:36:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqgHI5khFcrRd3W3pxwPQX02Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/W7RGMkdMK8dyydygqKWrIDXmfZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/wqgHI5khFcrRd3W3pxwPQX02Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d84::/48
Signature Algorithm: sha256WithRSAEncryption
37:17:3f:2e:47:44:a7:ae:4c:8c:02:8a:e1:b1:9e:34:f5:52:
f4:ea:4e:bb:a2:11:05:fe:32:f1:56:93:00:28:3a:12:52:5f:
69:c8:66:7f:c1:40:56:2d:ec:1f:95:5c:e1:37:cf:2c:27:2e:
c7:4d:d2:bb:fd:d4:16:fd:47:60:11:f7:a9:bc:ff:fd:92:de:
d9:96:ac:21:a5:6d:9a:72:54:07:22:82:fe:18:65:64:12:75:
f9:27:77:fb:3b:da:80:74:8c:26:bf:c2:52:d3:62:47:e5:f6:
be:e7:04:27:e0:2d:95:7f:f8:70:44:51:b1:fe:59:87:99:4f:
f5:8b:85:0f:4a:b5:6b:29:92:33:ef:b0:2a:23:37:45:d0:41:
fc:54:6f:b4:62:a8:5d:6e:03:c2:85:d6:e0:df:6a:b1:55:0f:
a0:f7:f3:84:05:b8:97:b0:e9:07:e2:e4:08:07:f6:4b:c2:e0:
35:0b:bc:58:07:02:76:a7:b2:b9:8a:49:62:2a:5f:87:7c:fd:
c9:91:1b:5c:27:0f:c0:45:84:78:1c:47:90:de:75:b7:62:37:
48:eb:22:dc:2f:a1:51:df:5f:e0:54:63:5a:4c:09:7e:d2:a3:
e1:64:b0:d4:3c:9e:8e:55:cc:d6:bd:86:1a:16:7d:d7:5a:06:
06:21:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:17 2025 by rpki-client