Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa
File: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (raw, json)
Hash identifier: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=
Subject key identifier: 5A:E3:23:97:E5:68:1B:EA:BD:98:E7:CA:96:8C:F2:A1:4D:E2:E5:97
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019424B3941C7A70E4B137EC477EBAC33E8C
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 2a0f:ca80:de0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:1c:7a:70:e4:b1:37:ec:47:7e:ba:c3:3e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae32397e5681beabd98e7ca968cf2a14de2e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:a9:35:4a:88:4a:ed:bb:e5:7f:eb:8b:30:
8c:9a:3d:0a:69:f1:0d:4b:c6:df:22:9f:41:7c:f9:
c8:e9:f8:75:8c:9d:fc:a4:1c:3e:6a:be:c8:1a:12:
16:f1:ae:26:5b:08:ef:87:87:9d:79:54:66:ec:3a:
89:e3:6b:89:53:01:f8:48:d1:e4:ff:dd:3e:a2:31:
da:e9:27:1c:77:25:5f:4c:26:6e:4a:fd:ca:ba:79:
83:ed:75:43:94:52:ce:22:a8:e8:2c:f0:04:5c:ff:
6e:2c:3a:a7:68:ee:cd:a3:5a:e5:ef:33:40:00:c0:
45:63:66:12:5d:29:55:5d:9a:bc:18:27:e6:1a:94:
47:19:70:8b:e1:75:f7:88:06:78:ce:d7:29:4b:57:
30:55:0c:b5:60:54:16:5b:03:48:aa:f1:c5:c0:e2:
27:3f:95:54:a5:5b:37:0d:08:d2:e8:a3:d7:52:9a:
4f:9b:3b:7f:fe:83:48:69:4b:a3:68:06:82:69:d7:
de:bc:24:af:5d:a6:0f:1c:1e:76:fc:d2:40:25:63:
2c:69:21:be:60:a2:c9:63:77:78:af:f8:72:c8:e6:
28:43:6f:7a:bf:93:f3:7e:a8:22:96:cb:34:f7:03:
0c:5d:f9:10:52:b6:81:b6:75:7a:b2:ac:40:40:0d:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:23:97:E5:68:1B:EA:BD:98:E7:CA:96:8C:F2:A1:4D:E2:E5:97
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca80:de0::/44
Signature Algorithm: sha256WithRSAEncryption
84:df:41:6c:6e:50:71:2b:62:38:c2:39:23:cb:35:07:75:20:
a8:2a:d8:86:3d:20:28:db:92:8f:16:4c:70:31:63:d1:7a:6a:
7b:d9:7b:40:38:fa:5a:dd:98:d2:de:57:5c:21:98:11:fc:e5:
1b:e2:31:39:df:6b:2c:0d:69:3b:13:70:11:06:08:ec:ee:58:
10:1f:c1:9e:f2:36:ac:ea:00:e5:17:06:70:00:2c:27:29:8a:
a3:26:91:90:00:c0:e4:9b:e7:a8:97:08:3c:f7:8d:19:40:a3:
ce:be:54:32:73:ed:e2:34:a3:ef:18:56:d9:b0:64:03:fe:60:
78:91:76:a5:b4:50:98:1f:d8:cb:8a:6e:84:a7:20:3c:8d:38:
40:09:8f:60:ef:e6:f2:d8:d7:47:ad:02:bb:ae:54:1c:9d:8e:
42:e1:2a:6e:24:34:cc:15:ec:fd:af:e5:47:d8:c6:19:90:9e:
be:37:d0:5a:0a:61:0b:04:f7:56:07:7a:1d:1d:b2:ce:64:33:
4f:53:3e:f6:64:e9:b9:c9:93:6f:1d:17:93:63:8b:06:99:6e:
47:bc:ae:68:a4:9d:22:53:0d:41:6f:3c:12:f3:79:52:10:a5:
08:00:4c:2d:e8:d3:12:ab:14:93:05:2a:59:42:77:f8:e5:16:
9a:00:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:52:17 2025 by rpki-client