Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/WkM1k4qAimxGoAXfYc3XtjG5aS4.roa
File: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (raw, json)
Hash identifier: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=
Subject key identifier: 5A:43:35:93:8A:80:8A:6C:46:A0:05:DF:61:CD:D7:B6:31:B9:69:2E
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 01941FFA7143A529C3A6D1E5E4D179A43ED0
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/WkM1k4qAimxGoAXfYc3XtjG5aS4.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205116
IP address blocks: 212.6.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:71:43:a5:29:c3:a6:d1:e5:e4:d1:79:a4:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4335938a808a6c46a005df61cdd7b631b9692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:97:2e:2e:8a:df:3a:1c:56:7f:95:43:3d:
15:a1:af:26:e7:6b:d7:d0:aa:9a:ea:b7:fe:be:5c:
82:fc:d8:29:1b:8f:d3:22:39:99:a5:db:1b:55:94:
11:05:0c:7b:a2:4e:fc:1f:6c:db:26:b0:9f:19:6a:
98:d4:33:44:b7:8a:e5:48:22:83:6a:c9:85:a6:40:
95:8b:f1:2e:f1:79:d0:e0:36:ab:bd:3c:e7:f1:bf:
8c:32:8b:20:eb:0a:37:d4:6c:6b:89:7e:d0:7c:3f:
75:db:df:ca:b8:88:3d:1e:77:86:ac:e8:58:68:c9:
fa:f7:da:09:96:73:bb:21:41:d9:fe:f4:f3:e2:30:
c7:a9:b1:8f:9c:2a:52:f1:aa:7e:58:32:71:31:ec:
1f:b8:68:83:5a:32:d0:ea:e3:4b:3b:b1:cc:9a:96:
52:0f:59:bc:ca:b0:fa:38:b6:33:fe:c0:21:34:9f:
af:59:66:81:73:a2:21:72:be:3e:39:8e:26:fe:c2:
39:e9:75:3b:ce:66:46:6f:24:f6:bd:cb:e8:1a:0c:
38:3f:dd:24:07:75:9a:70:d5:bb:03:cc:2d:e7:36:
2f:75:35:76:ff:c3:9e:2c:1b:61:a2:f7:fd:03:46:
1c:01:cd:20:77:61:9c:a9:69:b1:a0:ac:af:9a:8f:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:35:93:8A:80:8A:6C:46:A0:05:DF:61:CD:D7:B6:31:B9:69:2E
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/WkM1k4qAimxGoAXfYc3XtjG5aS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bd:03:10:d7:b6:93:ff:a3:51:b2:ff:89:4d:2c:52:37:30:
36:fc:25:e6:7f:7d:73:74:f0:5f:ef:0b:03:f4:34:ae:56:f1:
26:53:85:79:5b:7d:5f:9f:04:d1:39:67:85:0c:27:8b:da:74:
4f:af:8d:78:ad:12:f8:86:9e:c9:f1:fb:bf:1e:10:76:ba:38:
5a:c6:73:71:e9:e3:9a:f9:47:5e:ba:83:5d:97:44:fc:a1:18:
7d:fd:be:6a:4c:d0:13:b5:e6:0e:c4:24:4b:3d:f2:94:f9:13:
ca:2c:99:a1:49:f8:91:55:ac:0f:c3:42:11:7a:3c:a8:60:88:
e6:47:a8:bb:30:5c:2f:96:fb:44:19:4f:3d:73:4c:e4:2a:46:
59:2a:44:53:50:20:db:b2:55:1c:d1:63:8a:59:c5:28:48:8b:
82:bd:2e:e2:c1:d1:35:b0:a2:0b:da:4f:1a:3b:86:e3:19:5d:
1c:4e:e3:be:0c:42:57:7d:e6:21:3f:a0:3d:81:37:90:bb:ab:
d9:fc:ac:68:4c:6e:a8:9b:5a:bc:fd:cc:d8:8d:63:72:18:c6:
fe:6c:eb:6e:8a:df:bd:a0:dd:a8:e9:de:0f:74:74:15:39:14:
9b:9d:2c:04:73:10:bf:f9:ad:a9:31:6b:bb:eb:bc:c3:4e:a3:
55:f9:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:54 2025 by rpki-client