Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/wGH7RXqHeAFJhSqqiUIKLWLMppk.roa
File: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (raw, json)
Hash identifier: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=
Subject key identifier: C0:61:FB:45:7A:87:78:01:49:85:2A:AA:89:42:0A:2D:62:CC:A6:99
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 019425FD47E084A8ABCC8D4A676C93224240
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/wGH7RXqHeAFJhSqqiUIKLWLMppk.roa
Signing time: Thu 02 Jan 2025 07:49:03 +0000
ROA not before: Thu 02 Jan 2025 07:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214331
IP address blocks: 2a06:b700:1000::/48 maxlen: 48
2a06:b700:1001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:47:e0:84:a8:ab:cc:8d:4a:67:6c:93:22:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c061fb457a87780149852aaa89420a2d62cca699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:74:29:ee:bd:5b:da:d6:66:43:5f:45:6a:
0c:f9:96:77:60:c5:0f:6d:91:7a:0b:2e:3a:1b:b2:
74:c3:bf:e9:a0:0a:dc:aa:6c:80:e5:56:f1:cf:d2:
ab:92:d8:e6:80:c9:f8:72:50:26:77:0a:39:bd:9e:
2d:1e:ad:d8:c0:d1:22:4b:68:26:c7:77:63:ae:47:
25:73:79:69:ab:b8:18:ad:8b:77:6a:41:20:e9:90:
87:51:90:74:27:7a:3d:f6:d0:7a:6e:e8:9a:d0:f4:
53:aa:7a:56:90:d3:d4:45:a4:5b:19:db:5a:b6:94:
d0:64:cd:e6:b1:37:fb:a8:d7:ef:b3:29:c7:a0:75:
9f:a5:4e:b0:9f:10:1f:d7:5f:7c:64:b6:57:27:09:
31:4f:97:40:b9:fd:e7:0b:07:5b:01:41:7b:31:e9:
bd:8a:a4:ad:91:6b:ce:49:88:ef:31:dd:92:76:9c:
f6:04:59:1c:ba:db:8e:80:cb:33:1a:ef:0f:64:dd:
61:80:eb:4a:5b:2b:bc:30:97:3d:53:15:c2:6a:88:
53:00:32:8f:4c:d2:e5:7e:20:a0:3e:66:4c:c4:a6:
72:b9:81:80:fd:74:7f:f7:05:4f:93:9b:38:83:b2:
c4:84:23:c0:f9:b9:99:a7:e2:d1:84:b8:4c:43:0b:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:61:FB:45:7A:87:78:01:49:85:2A:AA:89:42:0A:2D:62:CC:A6:99
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/wGH7RXqHeAFJhSqqiUIKLWLMppk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b700:1000::/47
Signature Algorithm: sha256WithRSAEncryption
40:dc:6e:b1:5e:65:a5:c3:42:32:6e:79:23:e6:3c:ce:b2:7a:
4d:91:de:ee:c9:99:e2:cc:a0:8f:aa:e5:50:90:f3:79:26:1a:
7b:ef:e5:ec:ea:96:a6:6b:23:b1:cc:64:d3:e3:74:10:3e:39:
82:0a:3e:63:77:00:86:05:79:e8:b1:e5:64:36:0d:71:2f:60:
82:38:98:ed:30:3c:b4:a2:95:aa:5c:64:aa:b4:21:92:8d:24:
61:f2:45:6c:af:15:b1:fe:37:2b:77:7d:2e:55:ba:20:c4:c3:
a5:7f:59:68:fd:a6:6d:b1:26:b9:de:86:b8:c1:5a:c3:e1:ee:
fb:04:00:4f:b3:bc:89:da:49:16:d5:a3:0a:9c:64:f6:d6:2f:
4d:8d:e2:fb:13:38:9c:d1:50:41:3b:be:44:b9:58:ff:9a:68:
9e:41:a9:db:93:87:1c:92:c4:7d:c5:f4:82:7f:45:ae:4b:61:
f7:2c:b7:dd:39:03:90:2a:e7:79:39:29:a8:04:b5:ae:c8:bc:
66:2e:b3:04:9b:12:9c:75:99:ef:e1:c0:6b:22:29:e0:67:6d:
c1:25:88:d0:b7:d7:df:90:a8:4a:c9:b6:d5:6d:7f:f3:af:b9:
fc:45:fc:53:e6:d5:28:a5:d0:0b:46:3e:42:69:7e:82:ea:f4:
30:12:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:34 2025 by rpki-client