Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/WD2WAelgJ5doM0olwH4QC5097Ik.roa
File: WD2WAelgJ5doM0olwH4QC5097Ik.roa (raw, json)
Hash identifier: EqJyN6qPfFOf1e0s7sfgmd3qDHJMxU3mccWG3aBdTxU=
Subject key identifier: 58:3D:96:01:E9:60:27:97:68:33:4A:25:C0:7E:10:0B:9D:3D:EC:89
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0197CC5BDF7868751F5F9CB3CDDB57EABD71
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/WD2WAelgJ5doM0olwH4QC5097Ik.roa
Signing time: Wed 02 Jul 2025 18:17:42 +0000
ROA not before: Wed 02 Jul 2025 18:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a0a:bbc4::/32 maxlen: 32
2a12:3140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:5b:df:78:68:75:1f:5f:9c:b3:cd:db:57:ea:bd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jul 2 18:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583d9601e960279768334a25c07e100b9d3dec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:66:77:6e:8e:12:c3:e9:d4:d2:98:6c:61:
ef:ca:aa:fc:25:aa:d9:f5:18:23:1d:ec:c3:f6:0a:
33:bf:54:76:58:c1:e6:20:c0:da:be:66:64:61:78:
25:89:4f:5f:f7:9b:0f:9c:5b:37:d8:70:32:b9:15:
86:b7:5d:a7:76:3b:d7:b9:1b:a5:67:bf:e5:a4:c7:
8d:94:d1:2e:55:15:b9:3e:c7:12:dd:fe:cc:29:2c:
02:03:42:7c:d5:7f:d3:b4:ee:6a:e4:74:cf:46:c3:
ef:ac:77:80:b7:8e:65:5e:a7:5a:63:33:c2:5f:06:
83:e4:a0:96:7c:b4:ae:36:20:48:a8:a9:86:43:ac:
24:c4:c8:5d:81:92:8d:1d:20:fa:d6:45:91:19:c4:
c2:59:34:fb:ed:93:70:19:c1:dd:70:4c:c4:db:b2:
92:25:16:89:a7:24:62:7d:42:26:ce:1d:d0:3f:19:
32:e5:d3:ce:1d:11:9c:0c:3f:8e:f6:31:80:96:43:
38:6c:98:55:09:e0:1d:ab:a2:1d:93:1a:73:4f:66:
83:fb:c5:5f:6e:88:32:35:5b:80:1f:a4:30:f4:c3:
3e:10:a7:74:1b:51:f7:2e:24:60:6a:b0:c9:d4:a4:
a3:80:62:82:45:8f:1a:ad:b8:de:a4:6d:ba:0a:52:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:96:01:E9:60:27:97:68:33:4A:25:C0:7E:10:0B:9D:3D:EC:89
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/WD2WAelgJ5doM0olwH4QC5097Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:bbc4::/32
2a12:3140::/32
Signature Algorithm: sha256WithRSAEncryption
7c:b6:af:e2:43:cd:ef:cd:22:5b:fa:19:f6:3b:72:3e:ac:54:
61:92:5a:96:71:f3:98:47:e0:97:f2:6a:01:55:9c:50:a5:20:
99:f0:41:95:38:41:fc:cb:b2:09:b4:c5:e4:1e:06:a0:ad:26:
70:6a:69:9b:93:71:4b:c5:10:7d:6c:36:f7:b8:94:69:5d:b9:
e9:9f:af:1c:07:b5:33:2d:52:5f:3e:cd:a0:83:f3:4e:94:40:
33:b4:9b:1b:a4:e9:60:49:75:5f:75:2d:4d:0e:63:47:09:fd:
25:69:09:8d:e9:68:88:f9:7f:7c:3d:80:be:05:1b:2c:0f:69:
13:2e:09:3a:b9:3a:13:b4:52:ee:67:2c:b3:f5:7f:b7:17:ab:
ec:2e:64:b7:8e:1f:a6:78:ac:6b:3e:5f:4b:dd:6a:6f:b2:4d:
f0:b0:bc:1c:1c:8c:4f:be:28:b3:e6:de:2e:0e:f4:37:1f:6f:
dc:1d:ad:7e:cd:3f:42:ac:a2:88:da:1b:7e:f5:93:23:7e:25:
49:4a:88:95:6a:86:07:b5:e4:fe:ac:67:a3:71:69:5b:c1:d8:
18:43:ca:9d:2f:7b:20:86:7e:dc:56:3d:8e:c2:69:98:47:b4:
68:4f:df:bf:dd:00:bf:7b:48:97:30:fa:ad:96:12:68:01:29:
6a:42:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:46:19 2025 by rpki-client