Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa
File: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (raw, json)
Hash identifier: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=
Subject key identifier: C3:DB:76:0A:20:19:9B:2E:72:58:D6:4E:5A:A4:9B:D4:C1:64:C5:61
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01941FFA3B5223D6F2DB2A0502677D5A459B
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198149
IP address blocks: 2a13:1c47:caf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3b:52:23:d6:f2:db:2a:05:02:67:7d:5a:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3db760a20199b2e7258d64e5aa49bd4c164c561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:a2:dd:d7:f2:81:4b:bd:99:d6:8c:e2:5f:
47:3d:5f:74:85:c4:77:85:61:64:f7:dd:ef:82:1b:
a3:38:91:04:6d:68:73:dc:f7:4b:27:df:2a:f7:d9:
58:6d:22:00:77:bc:7a:de:67:dc:4f:24:67:6f:f6:
7c:c8:0c:85:f4:fe:63:0c:de:e9:ff:b0:66:3f:66:
fb:d7:7c:32:bb:4a:f6:09:78:12:94:ca:2e:8d:8c:
a0:ab:0c:ef:50:18:0e:2d:31:0d:87:cd:4b:7b:2a:
da:72:66:91:d0:56:11:fc:aa:8d:bc:68:d2:60:76:
39:26:63:1d:4d:63:ac:d5:67:f3:68:aa:c4:cc:ac:
53:92:8f:8f:fe:83:4d:19:14:e3:dc:28:40:12:bd:
6b:a1:9d:0d:68:91:51:3b:0c:07:9f:a8:e7:8e:e2:
4d:a1:1c:09:7a:d8:be:94:90:e4:1d:3e:67:c2:bd:
d5:fe:19:6f:41:28:fe:22:eb:71:46:b1:77:3d:59:
bc:d1:91:9e:15:32:95:1b:ea:a6:26:8d:84:2b:78:
09:be:88:47:9d:e2:14:7f:d1:1f:75:c8:2a:e2:d3:
14:09:b0:dd:7d:06:ee:3e:1e:d5:c4:4c:7a:5b:8c:
0d:9a:26:fc:04:2d:ca:1f:c6:51:bd:16:36:8f:5a:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:76:0A:20:19:9B:2E:72:58:D6:4E:5A:A4:9B:D4:C1:64:C5:61
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:caf0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:8c:5e:fd:ab:69:49:55:d2:18:a3:40:54:e2:cc:74:03:50:
ce:19:95:8c:9f:68:05:ac:e0:8a:6e:0c:c9:ea:8f:98:d5:aa:
ac:ad:de:06:7a:a1:a1:db:41:99:b8:70:ca:85:ea:fc:76:5a:
2d:b6:42:9b:e0:4e:1d:01:bf:5c:b5:07:fa:cc:ea:ba:0b:5c:
a8:8a:7d:54:f7:ee:01:64:71:99:9b:97:65:0f:bb:a2:8c:46:
ec:41:55:e5:75:20:b1:5c:39:91:7d:0c:5d:fd:39:e8:61:53:
d7:f5:25:55:9e:fb:61:b4:6a:c4:74:70:ff:49:24:3c:07:63:
15:71:b2:7b:16:ed:ab:38:c2:bc:f2:db:9e:c1:a2:1c:dc:4c:
21:d2:6c:55:8c:25:ea:c6:b4:9b:61:44:31:c2:2c:27:7f:c7:
39:32:fc:7e:7a:a0:02:73:10:c8:d3:e6:e3:be:35:85:da:fb:
1a:4c:7b:9d:7f:39:e5:d3:3c:54:9b:02:87:e0:4a:61:ba:64:
a0:a9:53:bb:76:1f:18:c5:e9:6a:7e:cb:49:f7:38:70:90:15:
16:56:b4:09:2b:41:81:2c:0a:eb:0c:79:0b:90:7a:40:d7:aa:
8e:a4:ae:51:ea:30:20:aa:0e:82:7a:c3:26:db:16:8e:82:14:
71:40:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:14 2025 by rpki-client