Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa
File: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (raw, json)
Hash identifier: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=
Subject key identifier: 5B:45:49:BE:76:D6:AB:72:77:07:3D:78:5D:52:6B:09:C3:BE:D0:09
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 01942067E2085DA8D42B0947540A4D69B45A
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 2a0c:1100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e2:08:5d:a8:d4:2b:09:47:54:0a:4d:69:b4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4549be76d6ab7277073d785d526b09c3bed009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:ca:b4:d8:bb:7a:0e:07:ea:f4:18:60:18:
67:77:15:4e:68:00:69:93:c7:1c:ea:17:ed:3c:ca:
c5:40:41:77:a3:3e:9b:9f:17:9a:82:68:ff:de:af:
71:7c:2f:39:68:7d:7c:27:e9:fc:0a:e4:c3:76:94:
c3:cd:ae:da:56:0c:eb:d3:8b:9f:22:c2:d2:83:d8:
f8:2b:66:0b:ac:76:ed:25:35:68:ac:d1:40:b8:c2:
4e:1c:b8:8e:6b:0b:9c:14:9c:e2:c2:95:d0:f1:28:
0c:94:29:61:31:d0:53:23:3b:4c:c7:ed:8e:a4:1d:
27:ac:46:3d:6a:a3:c7:69:7a:93:4f:c8:3e:62:f8:
69:e6:d8:64:0b:54:30:e7:43:51:7e:8f:c3:fb:63:
41:48:ca:3e:d2:c3:e1:6c:b7:bd:86:73:af:35:46:
77:ca:bd:eb:91:87:b6:a5:d5:36:30:be:7e:90:71:
cd:0c:49:a7:21:a2:c7:5b:1e:26:12:1f:04:bf:9c:
ee:09:95:ec:67:8f:4d:f9:d6:50:f0:cd:79:52:22:
47:44:99:63:4a:cc:de:ed:2a:1a:be:98:5a:f2:64:
4e:10:47:1d:15:1a:9d:24:e9:51:c1:f4:20:f7:1a:
de:79:77:86:12:49:32:8f:ee:a9:d0:7b:71:bd:44:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:45:49:BE:76:D6:AB:72:77:07:3D:78:5D:52:6B:09:C3:BE:D0:09
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1100::/32
Signature Algorithm: sha256WithRSAEncryption
42:dd:9f:76:cc:92:87:65:2f:d5:35:e5:26:b3:36:0e:f9:65:
92:4c:0e:df:c3:5f:98:ef:79:33:18:85:91:e9:b5:dc:5e:61:
28:b9:87:38:f7:6d:8d:f8:f1:b3:05:ef:32:b5:08:fb:58:54:
32:73:32:1e:1e:88:c0:71:ea:e6:a3:a8:31:d1:2b:b7:c4:b8:
ea:60:e8:60:c0:8f:f9:fc:52:36:25:f3:ae:0f:93:37:7b:4e:
bc:7d:a8:ea:ee:dd:2b:91:c3:57:64:0e:03:6f:20:d5:6e:d8:
3c:73:24:32:f9:da:ec:82:d1:db:8e:c5:4b:8a:aa:df:84:b0:
4f:40:af:ac:da:29:8d:ca:14:c8:dc:0a:5c:30:9e:7b:9e:4c:
55:43:43:1b:28:3e:c9:24:58:b1:62:ba:c4:fe:e6:6b:2d:b8:
c9:ce:92:29:e8:68:af:96:33:ee:fd:ea:6f:dd:fe:47:0f:0f:
93:1c:13:36:a8:d0:f5:dc:6c:a0:e7:95:78:30:93:a0:ba:fc:
06:89:74:d1:22:e0:18:83:bd:41:c7:95:3d:cc:1a:80:f5:80:
f3:48:bf:ac:da:ee:75:be:72:5c:9e:8d:96:1a:a4:37:b6:4e:
27:c9:ed:13:79:5a:1f:e7:75:4f:29:61:a0:38:50:b7:62:dc:
57:51:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:26 2025 by rpki-client