Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/W01UWa1kIUE2JiOxWKYB-naILqY.roa
File: W01UWa1kIUE2JiOxWKYB-naILqY.roa (raw, json)
Hash identifier: CeC/6jOofYQN/OYjoFySmDulXw29mRH/JpGtBUGkS2I=
Subject key identifier: 5B:4D:54:59:AD:64:21:41:36:26:23:B1:58:A6:01:FA:76:88:2E:A6
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 018CC2DAE294553450AE1B76D7549EFEF9F6
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/W01UWa1kIUE2JiOxWKYB-naILqY.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42655
IP address blocks: 2a03:1240:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e2:94:55:34:50:ae:1b:76:d7:54:9e:fe:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b4d5459ad642141362623b158a601fa76882ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:11:21:9c:82:38:b1:37:38:c3:7a:d3:7e:
45:b5:41:d0:cb:cf:ac:d3:45:1b:38:4b:1a:50:27:
9b:65:30:c1:ac:58:80:9c:67:88:25:98:48:3c:6e:
21:c2:28:24:75:5d:e4:70:fc:53:a4:b4:7d:a8:e9:
51:ef:17:d3:52:a1:22:55:ec:c4:63:05:84:55:f2:
ef:30:d3:9c:42:46:03:60:8e:e0:a8:93:32:ff:7e:
74:e1:02:11:ea:1b:96:3a:1a:5a:78:51:25:0a:e1:
f1:29:6c:29:24:95:23:ea:0b:5b:c2:03:8d:b7:63:
39:e0:ff:87:cd:07:ce:52:6f:9e:6b:48:e0:f7:ea:
95:d6:f5:0a:e5:19:89:0a:25:56:6c:f7:99:b4:3e:
67:bc:d8:66:cb:dc:29:ba:6b:65:f5:0c:2f:79:96:
90:42:33:40:52:c1:43:c8:a8:1d:b4:e6:90:a4:d2:
0a:2e:dc:05:e7:9d:f8:93:8d:f8:c1:c9:df:dd:f7:
34:ba:61:ba:57:ee:21:ba:46:b6:b9:6e:62:7f:c3:
24:02:8d:f0:99:3f:4b:aa:dd:24:f6:7e:e1:27:3b:
73:ee:89:6c:49:61:53:4a:a8:a6:bc:1b:e1:65:f7:
b7:95:a4:4d:44:8f:eb:54:ac:65:21:0e:1b:95:11:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:54:59:AD:64:21:41:36:26:23:B1:58:A6:01:FA:76:88:2E:A6
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/W01UWa1kIUE2JiOxWKYB-naILqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1240:1::/48
Signature Algorithm: sha256WithRSAEncryption
3d:6a:72:6c:66:c4:ba:cb:62:38:65:b9:da:16:b2:d2:e0:7f:
69:49:58:35:17:ed:5b:98:95:ea:51:52:11:31:23:9a:12:e4:
a3:08:21:ad:94:f4:87:67:31:13:14:b5:79:30:ea:3d:89:f3:
a3:80:8e:d7:31:fe:aa:15:2b:a1:13:b0:40:cd:06:b4:91:07:
9b:93:c4:0b:e9:2b:a8:5b:bb:87:c1:0f:9a:23:46:0c:fb:be:
33:bf:14:1a:96:ed:0c:9a:67:63:6a:81:f8:04:98:74:59:10:
a8:7a:6f:f5:f9:38:2c:e1:64:b8:0c:63:e2:58:b0:20:a4:25:
c5:66:6a:6f:21:ab:9b:60:fb:ff:68:b4:a7:9f:e0:e4:d0:d9:
9a:24:fb:33:65:58:48:85:ba:f7:9a:3e:38:eb:2a:8c:71:f3:
ea:93:cb:17:60:2d:a4:d4:43:41:54:47:a0:76:7e:5d:2c:f5:
16:7b:f2:0b:5b:2a:41:25:37:30:f8:60:76:a5:97:d7:b6:52:
8b:41:af:68:7b:65:28:5e:65:5d:19:c3:4e:13:cb:3b:c1:f8:
5d:8d:f0:63:d1:f2:db:12:c0:9c:77:d2:ae:c6:56:cf:24:5e:
7a:45:f2:32:7a:51:66:4e:b6:3d:3c:35:fe:72:90:50:eb:09:
b1:80:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:58 2024 by rpki-client on console.sobornost.net