Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/wjDPlyOQgl_KHhtNkGh3vManKm4.roa
File: wjDPlyOQgl_KHhtNkGh3vManKm4.roa (raw, json)
Hash identifier: sbaH510AfrThST4XxjNpUNVnbKuDAFJUpQ4RWnGFer8=
Subject key identifier: C2:30:CF:97:23:90:82:5F:CA:1E:1B:4D:90:68:77:BC:C6:A7:2A:6E
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C4AFF7
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/wjDPlyOQgl_KHhtNkGh3vManKm4.roa
Signing time: Sat 01 Jan 2022 13:07:39 +0000
ROA not before: Sat 01 Jan 2022 13:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41281
IP address blocks: 2a0e:1c80:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12890103 (0xc4aff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c230cf972390825fca1e1b4d906877bcc6a72a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:0c:87:19:61:93:73:87:27:c7:3a:be:a6:
3a:f1:22:dc:40:16:91:38:bf:65:12:ed:d2:a5:f3:
c1:17:bc:74:cf:ea:6f:7c:20:1f:e2:43:00:f1:24:
b3:51:22:1f:15:2a:ec:62:ec:45:f6:74:b0:fc:2a:
30:49:0d:30:33:ad:97:ce:b7:72:91:25:1c:00:63:
59:72:49:aa:62:01:1b:5a:97:4b:5d:51:3d:df:b7:
f6:94:23:d4:e6:f9:98:44:28:ce:df:a5:05:04:49:
c7:57:f5:16:e2:ed:25:e4:cf:d8:3c:98:8a:b2:5f:
79:ca:cb:73:7b:37:93:b9:bc:a7:e8:79:a9:e6:09:
ab:a6:19:0f:80:64:db:bb:07:00:9e:d4:df:09:89:
6b:16:59:b9:53:53:47:9f:ce:30:22:9b:87:2d:e8:
6c:2b:b3:58:e7:b6:f2:1e:c5:53:17:a5:b1:da:df:
fa:8c:9c:c1:bb:e9:a0:51:00:f4:68:66:ff:82:04:
07:67:66:61:53:72:1e:35:fb:e1:63:f8:30:9d:35:
20:4b:16:3e:ac:48:8a:83:24:31:f0:8f:7d:b4:34:
6e:1f:b5:3f:e0:4f:6b:8b:f8:08:3e:85:13:84:c9:
13:29:e8:d1:5b:66:a5:ae:56:a7:cb:1f:40:f3:63:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:CF:97:23:90:82:5F:CA:1E:1B:4D:90:68:77:BC:C6:A7:2A:6E
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/wjDPlyOQgl_KHhtNkGh3vManKm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:9::/48
Signature Algorithm: sha256WithRSAEncryption
10:fa:e2:e9:15:9e:a5:63:c8:5e:e5:bb:c3:54:53:72:70:2b:
60:81:1d:85:03:6f:7c:80:bf:90:8f:1e:34:44:3e:29:a8:bd:
88:59:a4:0a:b7:41:7a:08:81:16:6a:18:22:d1:40:c4:bd:66:
0b:39:7e:0b:53:c5:71:48:67:71:22:29:67:5b:40:ac:ef:3b:
19:bc:5c:87:de:fa:fa:2d:63:f5:07:b4:0d:1c:de:ff:fa:3c:
8c:d1:06:9e:27:3a:4d:ca:16:fa:f1:16:3a:a9:cc:00:fa:ee:
8d:86:b0:85:54:66:0c:5d:43:1d:bd:31:39:d6:c9:81:2e:32:
2d:2c:ed:3e:42:bd:0e:59:b7:9c:70:1f:25:46:7d:97:81:8c:
ca:0e:a4:2f:30:83:1d:b2:a2:4a:b4:22:78:4b:d6:64:f5:cd:
18:d2:69:a8:6b:84:f9:58:09:36:39:98:52:ad:81:51:07:8f:
ae:32:16:0b:f1:ad:66:0b:7e:46:e6:d4:34:f8:d0:de:e9:99:
84:6c:84:61:62:d4:3f:e2:f9:aa:f4:28:06:b3:46:ba:1a:64:
b7:b3:a0:a0:27:7c:cd:69:04:98:f4:c8:74:a8:2d:b0:d3:ee:
26:a1:40:e6:3e:bf:65:b9:88:7d:dc:7e:10:27:0d:d4:12:50:
22:a2:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:06:01 2025 by rpki-client