Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/WFuvk7y8ijWBMVOxcabYl2Ki2Zk.roa
File: WFuvk7y8ijWBMVOxcabYl2Ki2Zk.roa (raw, json)
Hash identifier: Y1vQADdFnTt26buVHpJs8/b1wmIjOC6mALpusa/UOmM=
Subject key identifier: 58:5B:AF:93:BC:BC:8A:35:81:31:53:B1:71:A6:D8:97:62:A2:D9:99
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019421B1C7641B61A87B8876C11D10BB70F6
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/WFuvk7y8ijWBMVOxcabYl2Ki2Zk.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59758
IP address blocks: 2a01:3f1:e000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c7:64:1b:61:a8:7b:88:76:c1:1d:10:bb:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=585baf93bcbc8a35813153b171a6d89762a2d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:1f:03:36:89:3c:99:e7:cf:f8:63:84:04:
14:55:9b:fe:03:d3:1a:73:90:46:45:3d:ba:3f:d0:
d5:d5:ad:c0:dc:7f:b3:51:b0:70:06:bc:25:cb:95:
dc:ce:0c:49:e8:ce:eb:2c:8d:0f:c6:c5:c2:03:f5:
06:48:0c:31:6b:60:4a:a6:a2:30:6e:5b:20:a1:78:
6d:07:77:f3:50:ed:09:5d:e7:2e:7f:6a:74:e0:f3:
ac:ca:41:1c:d0:99:c4:b6:e6:a4:89:3a:96:ad:3b:
0c:a9:ee:d5:a7:15:2d:29:01:19:57:a4:53:65:71:
55:45:c3:42:b7:bc:eb:35:a3:c4:68:2e:ec:8d:de:
b3:39:7b:41:8b:10:ac:fa:11:f4:a0:77:a1:22:d3:
78:09:bd:93:1c:11:2f:4f:e8:9f:cc:7a:e8:4f:fd:
e1:31:74:fa:06:5c:aa:7c:5d:1c:83:0b:39:49:e2:
b9:08:a6:20:f4:78:4a:0f:ba:df:60:59:1b:b9:89:
52:26:c5:26:b2:29:13:4b:2e:23:2c:ea:75:e0:6f:
40:45:60:51:94:fe:8b:52:ca:3c:03:3c:3a:fc:db:
62:84:f2:4f:c3:b3:97:ec:9c:72:2a:39:69:81:e7:
d5:3a:df:24:61:8c:fd:8a:4b:a6:4e:a7:ce:6a:f1:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5B:AF:93:BC:BC:8A:35:81:31:53:B1:71:A6:D8:97:62:A2:D9:99
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/WFuvk7y8ijWBMVOxcabYl2Ki2Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:3f1:e000::/38
Signature Algorithm: sha256WithRSAEncryption
1b:57:cc:38:b6:e0:d7:97:b9:f9:24:da:43:36:89:ea:9d:04:
ad:14:00:b9:44:fd:9d:c1:ef:72:23:52:96:2e:90:8b:fa:7c:
95:42:c7:62:6b:b6:d7:3c:ef:67:e0:ba:5a:dd:d9:0d:da:91:
1f:30:28:3c:52:2d:24:99:04:04:e8:1d:76:ff:5f:ab:3f:2c:
21:c7:70:17:0a:27:47:9d:c1:eb:42:3a:ae:f9:c1:56:70:f6:
1a:2f:c7:66:21:dc:cf:dc:3c:0e:49:dd:61:68:16:ca:f0:84:
c2:ed:e5:d6:28:ef:78:b1:f1:96:b5:db:33:62:c6:d9:17:56:
c7:85:49:e3:c9:ca:37:8d:31:ec:15:c8:51:ab:c2:c4:cd:72:
0f:fe:19:49:01:06:06:88:e6:5f:b6:82:f6:20:6d:be:ab:01:
2d:94:2a:65:a2:77:1d:ce:17:e9:44:2e:88:ca:55:ce:a6:25:
b5:70:2e:16:15:4e:8e:36:b7:c3:9c:cd:36:43:24:3f:66:65:
65:10:85:77:1c:bb:a3:79:6b:4d:6e:88:b2:6a:49:22:f6:b1:
21:4b:2a:41:c9:ca:f0:fd:eb:72:c7:4f:cc:29:5b:d3:44:86:
ce:76:25:03:0a:df:db:68:84:af:c5:2e:11:b3:0c:e0:4f:50:
2a:cc:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:38:12 2025 by rpki-client