Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/wnKhG27ddvv9DbopEcZ0e8BfSyE.roa
File: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (raw, json)
Hash identifier: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=
Subject key identifier: C2:72:A1:1B:6E:DD:76:FB:FD:0D:BA:29:11:C6:74:7B:C0:5F:4B:21
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0194228DCA54E024EDC0D8CCBB86A979B215
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/wnKhG27ddvv9DbopEcZ0e8BfSyE.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142275
IP address blocks: 2a0c:8fc1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ca:54:e0:24:ed:c0:d8:cc:bb:86:a9:79:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c272a11b6edd76fbfd0dba2911c6747bc05f4b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:70:74:ba:90:2c:92:d5:4b:95:a5:a1:83:
4a:a1:97:da:c6:61:e2:a2:29:cc:d7:85:7f:70:e6:
0a:41:93:3f:6d:64:09:4f:80:59:ff:73:4b:3e:2b:
ef:fd:0a:c5:94:24:91:29:e2:0b:ce:54:df:82:e6:
f1:43:fd:95:9e:68:eb:a1:5e:e6:fc:a5:c4:a0:d5:
34:bc:04:7a:12:00:8a:e1:46:ec:c7:0e:31:15:5e:
9e:6b:71:7c:f3:de:bb:2d:cb:d6:04:cc:b3:67:f4:
19:89:9f:aa:c1:43:94:f0:8d:78:71:33:33:46:c4:
79:ac:7e:9f:ed:65:72:45:22:8a:06:92:12:48:a4:
a4:e4:a8:3e:bc:07:b7:96:73:00:15:2d:c6:d3:65:
3b:36:cc:b7:86:7f:0b:9e:fb:d1:8e:9c:43:22:46:
17:21:e2:3e:1f:93:d1:6d:f1:2b:96:f4:0a:6d:41:
b3:3b:a3:4e:84:c2:7e:ca:b9:99:d2:f1:36:aa:70:
ec:4b:bd:8c:4c:a1:ec:ba:c7:8d:da:86:d8:9b:70:
57:c2:00:63:0d:71:39:74:20:75:d8:87:8b:60:ee:
92:bf:b0:7a:44:f7:99:a8:94:1e:55:c6:69:a4:6b:
53:ab:f5:86:31:57:11:35:f5:5a:2c:2b:ee:ee:76:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:A1:1B:6E:DD:76:FB:FD:0D:BA:29:11:C6:74:7B:C0:5F:4B:21
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/wnKhG27ddvv9DbopEcZ0e8BfSyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8fc1::/32
Signature Algorithm: sha256WithRSAEncryption
92:05:ad:92:11:08:d2:b8:7d:d7:15:7b:2f:61:e1:31:8c:86:
f5:67:5d:82:74:89:49:81:8d:ed:b6:26:9a:0d:fc:87:f7:39:
9c:29:cd:49:fc:9d:30:88:cd:7f:79:0e:21:ce:ee:e6:50:54:
b8:5b:de:17:d1:2e:c3:60:78:2f:92:23:8f:7d:40:4e:e1:12:
38:5f:0d:36:fe:43:c7:a4:bc:3f:3d:84:fc:57:2b:60:f9:a9:
c0:0f:1e:4d:e1:1b:d0:d3:ff:38:f5:68:a3:37:de:fb:51:62:
29:0d:3c:ce:26:de:4b:39:0d:b9:1c:5d:55:ea:d5:3c:0d:6c:
ec:a0:35:80:c9:4e:fd:c7:4a:ba:a6:b2:ad:db:87:50:05:b3:
ff:85:37:90:73:c8:e7:ac:a1:25:5d:4e:e0:59:68:dc:7b:ef:
57:c8:25:3f:22:59:45:69:64:ec:23:ef:bd:ae:e0:40:ca:16:
e5:04:6b:ac:e9:ba:db:54:ff:86:db:6e:d3:76:28:90:40:42:
4c:ef:cb:67:81:80:d7:bd:b1:ed:d6:34:14:39:47:ca:8c:ed:
b5:62:52:30:d8:00:36:84:cc:63:52:28:b1:e2:9f:12:e7:6c:
df:b3:87:50:ae:a1:5d:e2:f0:08:31:a9:8c:96:3d:ad:91:ee:
9f:f6:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:59 2025 by rpki-client