Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WGGSezAjdzTrOBrGQJgoCEhb3-I.roa
File: WGGSezAjdzTrOBrGQJgoCEhb3-I.roa (raw, json)
Hash identifier: 9MSW/l+BsyZyymxDwyJKCvr0KrKHrqDeHUcE3fHa4/U=
Subject key identifier: 58:61:92:7B:30:23:77:34:EB:38:1A:C6:40:98:28:08:48:5B:DF:E2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBFFFC94432A36C0E23D4CC0DCE87A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WGGSezAjdzTrOBrGQJgoCEhb3-I.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216362
IP address blocks: 2a0c:9a40:8cd0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ff:fc:94:43:2a:36:c0:e2:3d:4c:c0:dc:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5861927b30237734eb381ac640982808485bdfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:57:32:a7:14:5d:8b:34:be:33:68:b5:71:
b7:08:65:a1:42:1d:27:a3:0c:9d:a2:32:15:d3:37:
85:5a:fc:66:48:37:4d:28:2d:01:c7:d0:9c:4e:b8:
d1:5c:55:af:d3:0d:16:9b:bd:68:c5:1b:30:dc:fb:
be:df:a7:e1:c6:a1:a7:dc:1a:1e:bf:5a:1e:98:94:
03:e5:b7:73:d9:79:2f:c9:ef:46:10:f7:b6:e8:57:
f1:58:fd:43:90:da:bb:c8:b0:75:dd:a1:ca:36:e9:
30:35:9e:20:ba:61:46:3d:71:20:78:16:31:b5:9b:
50:c5:42:32:6a:c9:fe:8a:9a:09:cd:06:bf:33:49:
6f:55:5e:e0:dd:1b:3c:e0:aa:49:c8:82:1a:0c:28:
26:12:13:d1:52:34:48:ed:50:f3:1e:8c:b8:a7:2c:
45:66:e1:c9:df:b1:9a:87:a4:d6:01:1d:5b:fd:6c:
f0:c6:f0:dd:3b:fd:3c:92:16:6c:d8:45:92:5b:dd:
f7:cf:c9:17:4d:e5:49:a0:cc:d7:9e:c7:84:62:8c:
98:c9:ff:ab:23:3f:a7:26:e0:2f:1a:3b:79:e4:4b:
29:12:74:df:b1:0a:5f:9c:da:ae:18:57:a7:3a:f8:
e0:89:46:65:6d:b4:30:cf:81:44:92:2a:2d:2b:89:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:92:7B:30:23:77:34:EB:38:1A:C6:40:98:28:08:48:5B:DF:E2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WGGSezAjdzTrOBrGQJgoCEhb3-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8cd0::/48
Signature Algorithm: sha256WithRSAEncryption
76:59:da:05:b8:a8:08:69:0a:13:5a:9d:02:dd:18:32:aa:02:
de:f5:f0:1b:b2:52:77:5e:c7:b6:4e:c5:8b:96:c5:7e:15:35:
81:b8:9f:7c:41:78:d4:d8:95:88:af:65:7f:6b:ae:bc:de:0d:
82:bb:bc:dc:68:5e:88:f8:dc:ba:ea:ab:71:ab:58:85:ee:4b:
26:6b:cf:48:5c:fd:3f:f1:62:9c:e3:72:ad:ea:db:5c:8d:e9:
81:16:5e:9a:7e:c7:0c:89:d1:ba:81:59:7d:f8:bb:19:f4:89:
92:b2:52:04:f6:61:26:7d:31:45:ae:7f:d3:7b:cb:c5:b7:42:
82:ea:82:07:f8:8c:81:85:35:fc:95:c5:f7:33:4d:4f:ef:9d:
e3:69:2d:6d:b1:f1:ac:f1:3a:64:4f:c8:82:21:7e:32:83:c1:
71:fc:88:54:94:24:2e:92:eb:eb:37:4a:8d:f3:0f:79:7e:38:
bd:6c:4c:ff:98:22:02:fb:a3:c5:c4:45:bb:84:f0:d1:7a:c6:
d7:e0:63:73:72:e6:ad:7f:dc:3c:6c:8b:c9:f2:59:fe:7c:ab:
f4:c9:69:4f:50:cb:d2:19:9e:d8:95:88:c8:f5:0f:35:bb:82:
a2:2d:c8:6c:36:2d:e5:5c:6d:dc:51:7f:5d:2f:a9:0b:19:1a:
ef:ea:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:46 2025 by rpki-client