Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/wvbzAT4QZZepRUfQ4T7Iln3TOeA.roa
File: wvbzAT4QZZepRUfQ4T7Iln3TOeA.roa (raw, json)
Hash identifier: CXPLC9jAIGl4uvFvse6iFeGoldePjaK1avRNgTMwS+4=
Subject key identifier: C2:F6:F3:01:3E:10:65:97:A9:45:47:D0:E1:3E:C8:96:7D:D3:39:E0
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 01942368EEE2D67B75DCE6A9DC826BA486C5
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/wvbzAT4QZZepRUfQ4T7Iln3TOeA.roa
Signing time: Wed 01 Jan 2025 19:47:46 +0000
ROA not before: Wed 01 Jan 2025 19:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48460
IP address blocks: 2a07:69c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ee:e2:d6:7b:75:dc:e6:a9:dc:82:6b:a4:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f6f3013e106597a94547d0e13ec8967dd339e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:b7:ba:23:ac:7e:ed:55:8f:3a:4b:5c:ed:
1a:12:20:c7:7e:8f:e2:2b:5c:c0:5a:cb:38:c3:4c:
06:cf:21:06:14:31:34:7d:2d:e4:11:95:df:07:fa:
fc:0d:f6:cf:6c:cd:e0:e3:1a:8e:6a:df:c6:12:24:
30:59:1e:fa:04:f9:b2:3a:dc:06:0c:b4:84:42:d5:
44:32:6d:e5:e4:42:80:79:bc:56:b8:a8:30:3e:ad:
fa:a2:b0:46:23:8f:fe:71:e4:68:19:ef:fe:7e:28:
32:21:1b:80:51:ea:d4:56:57:08:54:0d:a2:04:ec:
63:36:60:27:2a:a7:1a:fc:0f:4d:bc:dd:5a:0f:83:
b8:71:57:59:21:ef:d0:b8:7e:2e:6d:b9:3c:f7:2a:
89:96:d0:db:d2:9d:4b:aa:d9:d9:35:31:7f:01:89:
2d:f0:f3:fa:e4:a4:d3:09:ba:ef:db:04:a2:80:e9:
09:3a:ba:71:63:6a:f0:ad:06:d8:a1:ea:78:27:ff:
06:85:50:20:9f:2b:08:e8:47:ec:aa:d0:5f:7e:c8:
08:de:b2:b5:c7:88:ee:f6:68:08:3c:cf:ae:9a:ea:
36:da:b3:65:a2:a6:ef:5f:b2:97:81:3a:d9:27:ef:
ce:5e:ee:6e:42:d8:d3:87:e5:b1:98:bf:ab:48:0c:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:F3:01:3E:10:65:97:A9:45:47:D0:E1:3E:C8:96:7D:D3:39:E0
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/wvbzAT4QZZepRUfQ4T7Iln3TOeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:27:13:41:39:c7:ba:d5:9f:21:37:79:57:18:9a:68:ab:6e:
86:87:f2:3e:9d:82:1d:dc:24:44:f7:08:3b:97:19:d6:0c:4c:
c5:6b:c7:3d:1d:55:af:ef:67:c2:59:c4:bf:59:15:7d:e5:a9:
38:c2:05:84:72:78:91:51:38:0b:1a:7c:9f:46:21:b3:fe:9b:
2c:29:ae:d9:06:bd:5b:47:1e:3d:61:65:ab:96:5b:75:69:17:
aa:2b:9e:3d:18:c2:4a:09:d3:7b:a7:43:cf:18:aa:58:e7:00:
46:76:c4:36:d9:10:fb:d7:6f:f8:71:75:7f:6f:ce:62:3f:14:
b1:94:45:3c:38:e7:a2:bb:7b:39:08:c9:37:17:cb:8c:f1:75:
14:1d:e6:8d:88:04:eb:6c:f4:95:dc:e8:1f:ba:b8:fa:15:6d:
0a:e0:d8:1c:5c:e2:0c:ae:fd:8e:0e:4d:7f:64:0c:74:15:c3:
19:0f:79:96:28:ec:a7:8b:09:53:32:ed:d3:b1:d3:7e:fc:4f:
ee:1e:7b:e6:0d:93:8b:6e:7f:3c:3d:21:4a:b7:da:bb:2e:18:
53:69:e1:46:9f:7e:f7:c0:28:fa:3a:7b:15:56:be:98:24:e4:
19:86:1c:ff:71:fd:52:54:86:b2:8e:4f:27:76:01:4a:ff:5d:
5d:f5:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:42 2025 by rpki-client