Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/wMbP2rODQDC-jcOXAyW7ktyAwFs.roa
File: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (raw, json)
Hash identifier: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=
Subject key identifier: C0:C6:CF:DA:B3:83:40:30:BE:8D:C3:97:03:25:BB:92:DC:80:C0:5B
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA038E3A51B276D1F08C8BA0D70EB8
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/wMbP2rODQDC-jcOXAyW7ktyAwFs.roa
Signing time: Thu 02 Jan 2025 11:50:09 +0000
ROA not before: Thu 02 Jan 2025 11:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 2a03:f85:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:03:8e:3a:51:b2:76:d1:f0:8c:8b:a0:d7:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c6cfdab3834030be8dc3970325bb92dc80c05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:0b:4d:cc:ad:d6:64:b2:32:a4:24:a5:ed:
22:7f:87:11:bd:25:5f:05:51:df:0f:b4:29:c8:01:
85:d6:4f:a8:c4:64:6d:41:90:39:3b:ff:5f:45:d7:
a6:9d:84:af:56:a5:99:b5:0b:90:33:2c:06:8e:b5:
9a:78:70:2e:25:60:ca:30:cf:9c:1f:b0:71:f5:dd:
a9:88:98:b0:2c:1e:eb:c9:fc:5d:8d:c9:f6:2e:7c:
9a:cd:cd:23:e0:c8:c0:38:4d:16:c0:57:5c:ba:8c:
7a:d2:81:76:b7:c1:d6:e1:27:ce:67:f5:28:13:b9:
ff:ab:1c:48:2b:4d:67:84:5f:6d:15:80:f4:f7:52:
af:6a:ec:fa:7c:6e:6f:d0:86:36:f1:db:44:67:c4:
05:cc:c4:0a:20:9d:5d:72:0a:19:e7:a6:7c:b5:ee:
44:c6:96:26:83:85:b2:5b:fc:bb:8e:cb:a4:45:17:
f2:24:13:50:b2:5a:2f:75:cf:93:81:23:bd:a7:3e:
83:f5:18:a7:f5:45:c0:e9:62:bb:d4:20:bd:94:84:
35:1b:ee:2c:d5:dd:71:70:59:c3:f4:dd:6d:6c:19:
1b:ab:8a:ca:2d:13:aa:0e:e5:c7:38:de:70:7f:90:
37:6e:3f:1a:33:72:48:3f:fc:14:4f:bf:11:7c:24:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:CF:DA:B3:83:40:30:BE:8D:C3:97:03:25:BB:92:DC:80:C0:5B
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/wMbP2rODQDC-jcOXAyW7ktyAwFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:2::/48
Signature Algorithm: sha256WithRSAEncryption
14:e5:81:02:8a:68:ea:1b:0e:17:97:92:ad:8c:73:e4:b2:4d:
4d:c4:ec:db:23:d8:49:e8:5e:b0:1b:bd:8e:0b:6b:9a:b0:05:
8a:45:5f:c1:94:36:0e:9a:71:32:34:84:8d:55:59:4b:d2:39:
f0:84:e1:3b:75:26:64:ab:86:1e:1c:83:85:88:6f:5d:1c:aa:
bd:1c:5e:97:db:9f:8d:6f:c6:1b:5b:c2:0e:02:9f:87:b0:25:
cf:58:ee:a7:fe:bf:0c:76:61:d4:5e:43:f5:be:8d:37:aa:a5:
f8:78:ee:aa:47:6a:a7:bb:6d:ee:25:48:97:9c:85:54:bb:5d:
ad:93:00:82:1d:82:fa:c5:c8:58:b5:4a:88:71:6a:a3:60:49:
87:52:0d:19:a3:77:16:d0:35:35:b3:51:5f:8a:95:41:32:e5:
8d:a7:55:6b:76:be:42:a0:f0:81:28:75:0e:0c:54:ad:7c:61:
e9:68:12:8f:40:a7:84:d0:97:d6:d9:e0:25:9d:69:4e:68:8c:
4d:d6:af:2c:55:96:7b:68:a6:5d:34:4f:26:08:a7:05:af:a1:
50:67:3e:b2:56:73:70:da:c7:11:c6:18:66:ff:79:53:99:62:
2a:58:8f:bf:e4:c0:7f:e0:02:42:87:34:17:2f:02:6d:2b:ec:
f7:21:d5:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2gOOOlGydtHwjIug1w64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjUwMTAyMTE1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGM2Y2ZkYWIzODM0MDMwYmU4ZGMzOTcwMzI1YmI5MmRjODBjMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqMLTcyt1mSyMqQkpe0if4cRvSVf
BVHfD7QpyAGF1k+oxGRtQZA5O/9fRdemnYSvVqWZtQuQMywGjrWaeHAuJWDKMM+c
H7Bx9d2piJiwLB7ryfxdjcn2Lnyazc0j4MjAOE0WwFdcuox60oF2t8HW4SfOZ/Uo
E7n/qxxIK01nhF9tFYD091Kvauz6fG5v0IY28dtEZ8QFzMQKIJ1dcgoZ56Z8te5E
xpYmg4WyW/y7jsukRRfyJBNQslovdc+TgSO9pz6D9Rin9UXA6WK71CC9lIQ1G+4s
1d1xcFnD9N1tbBkbq4rKLROqDuXHON5wf5A3bj8aM3JIP/wUT78RfCRPfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMDGz9qzg0Awvo3DlwMlu5LcgMBbMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvd01iUDJyT0RRREMtamNPWEF5VzdrdHlBd0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPhQAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAU5YECimjqGw4Xl5KtjHPksk1NxOzbI9hJ6F6w
G72OC2uasAWKRV/BlDYOmnEyNISNVVlL0jnwhOE7dSZkq4YeHIOFiG9dHKq9HF6X
25+Nb8YbW8IOAp+HsCXPWO6n/r8MdmHUXkP1vo03qqX4eO6qR2qnu23uJUiXnIVU
u12tkwCCHYL6xchYtUqIcWqjYEmHUg0Zo3cW0DU1s1FfipVBMuWNp1Vrdr5CoPCB
KHUODFStfGHpaBKPQKeE0JfW2eAlnWlOaIxN1q8sVZZ7aKZdNE8mCKcFr6FQZz6y
VnNw2scRxhhm/3lTmWIqWI+/5MB/4AJChzQXLwJtK+z3IdWT
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:10:30 2025 by rpki-client