Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WW_vhSjkC6O_N4AVDGGC_k_2Wmo.roa
File: WW_vhSjkC6O_N4AVDGGC_k_2Wmo.roa (raw, json)
Hash identifier: /DAdAX4PEUVdcMdboh24BocpbZEByTgbtkcqidmqzLg=
Subject key identifier: 59:6F:EF:85:28:E4:0B:A3:BF:37:80:15:0C:61:82:FE:4F:F6:5A:6A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE1CE00C4BF110727951832E139E5
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WW_vhSjkC6O_N4AVDGGC_k_2Wmo.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210338
IP address blocks: 2a0e:aa07:e02d::/48 maxlen: 48
2a0e:aa07:e400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e1:ce:00:c4:bf:11:07:27:95:18:32:e1:39:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=596fef8528e40ba3bf3780150c6182fe4ff65a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:eb:e3:a0:50:fe:03:da:81:3a:4a:49:6d:
b3:fa:c6:6b:af:c5:e1:72:ef:33:c0:70:14:d2:8f:
27:29:da:ad:89:e5:f9:b6:0c:03:30:93:9f:ff:6e:
e5:3a:2a:5c:bc:87:d5:77:dd:31:d6:9f:30:dc:35:
6e:35:59:16:60:19:98:11:64:15:ef:87:1b:55:25:
cc:7f:74:e6:24:cb:51:6b:9f:30:e2:43:34:19:91:
92:c2:ac:fc:0f:c8:8c:57:5e:f7:17:17:10:cd:f4:
5a:f2:91:42:98:42:ef:ef:2a:c9:45:1c:08:95:61:
0f:53:c9:60:85:59:97:be:5a:51:f0:ed:0d:11:4e:
b5:12:03:16:c5:29:0d:a7:05:0f:90:a2:50:a1:ec:
37:04:80:1f:06:ee:57:7a:e4:40:72:cb:9b:62:7b:
b5:b7:ff:13:35:fa:60:dd:b8:26:52:bd:49:a6:f5:
6f:6d:fa:61:70:d9:b0:75:92:29:9d:87:5d:84:81:
59:9f:e6:5d:0b:42:e0:63:b9:33:42:dd:7a:ed:0f:
65:60:dc:15:c8:91:be:fd:8a:92:cc:cd:15:a2:1c:
72:dd:02:68:a0:60:8a:a5:c8:b6:ae:bd:45:69:cd:
ee:dc:2e:50:50:d7:75:41:d5:13:7d:ea:9e:a8:c1:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:EF:85:28:E4:0B:A3:BF:37:80:15:0C:61:82:FE:4F:F6:5A:6A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/WW_vhSjkC6O_N4AVDGGC_k_2Wmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02d::/48
2a0e:aa07:e400::/44
Signature Algorithm: sha256WithRSAEncryption
56:1f:29:73:41:42:9b:77:82:a7:84:3b:62:51:78:59:66:b6:
81:b1:d6:36:0f:2c:c3:be:c3:9c:60:20:f3:df:bc:53:4f:6f:
38:27:8d:d2:ee:d8:30:6c:0e:f4:34:13:c3:71:9a:0f:08:b1:
3d:b5:5a:8e:2d:cd:ea:92:94:66:a5:fd:f3:b8:7a:a4:bf:90:
52:b6:80:73:e8:cc:e8:fa:3b:4c:be:ef:91:db:92:9c:4d:a1:
16:f7:0d:c4:34:1f:5b:92:4e:db:2e:4e:4d:72:79:b0:3e:4a:
cf:be:1e:fe:81:45:10:d6:41:9d:ac:5d:28:7a:21:0b:a1:4c:
7a:58:b2:1e:5b:50:55:fe:24:d5:f1:60:e2:1a:e2:81:74:bf:
28:2a:fc:82:10:06:ed:50:5f:cd:6f:ee:e8:aa:5b:23:15:3f:
8e:e7:94:01:ba:0d:c9:c8:93:c7:06:30:d9:11:cd:d3:db:0d:
be:7f:bf:76:ee:dd:9c:d4:62:b1:fc:75:51:a8:a8:14:a4:bf:
c9:10:0d:81:5c:b0:77:2f:06:0d:45:e7:bb:ae:97:5d:b5:c5:
bd:ff:d7:ac:f5:ea:34:ba:ce:e6:50:2d:34:49:41:c7:a9:ad:
75:a9:78:cd:3f:4e:1b:41:8d:7c:92:04:b9:5a:80:33:cb:ff:
fd:f6:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:41 2025 by rpki-client