Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WdMi6cepJEs5D0Hhd-SZnoYoIw4.roa
File: WdMi6cepJEs5D0Hhd-SZnoYoIw4.roa (raw, json)
Hash identifier: e86PWf/A6gZ4laYYbmD8JRL0AtG4sZc/6TduJff4wvU=
Subject key identifier: 59:D3:22:E9:C7:A9:24:4B:39:0F:41:E1:77:E4:99:9E:86:28:23:0E
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204A62E06B9B9056C63B1E9B690AE8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WdMi6cepJEs5D0Hhd-SZnoYoIw4.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213126
IP address blocks: 2a0e:8f02:f001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4a:62:e0:6b:9b:90:56:c6:3b:1e:9b:69:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d322e9c7a9244b390f41e177e4999e8628230e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:6b:d8:9f:7e:f2:94:5e:c7:95:d9:b1:15:
f4:49:e2:1a:b7:f3:62:7a:79:43:d8:4b:e7:7c:44:
a8:8a:46:e3:4d:8d:d5:df:0e:97:4e:87:bd:54:c6:
1e:a0:bc:a1:71:e4:3a:cc:6e:6b:12:da:65:f2:8f:
56:84:d9:e3:44:e0:11:a6:51:f4:3d:5c:42:17:f7:
fb:3c:8a:95:df:03:7b:74:08:cb:78:40:30:51:b8:
c9:4c:72:62:ed:7d:8e:44:1b:44:3e:f8:ac:1a:d8:
26:0f:88:5c:1b:21:ad:f5:b7:63:ef:9a:a0:82:24:
14:1a:8a:dc:a2:2b:45:e7:f2:7b:10:03:05:c3:19:
e7:6d:56:69:9b:e8:aa:11:81:41:28:62:a6:3c:ec:
88:8c:f9:ee:99:e0:f9:10:e3:4b:62:ae:04:cb:21:
12:29:88:03:32:b6:eb:e8:8c:91:6a:47:31:12:e9:
0a:12:00:9b:56:07:a3:da:6f:0a:ce:a4:84:f0:43:
54:04:6d:ad:6e:63:7b:87:dd:a5:c2:f8:d0:68:94:
f9:ce:46:08:2f:14:7a:67:5f:c6:b0:f7:9b:c8:dd:
70:ad:96:e3:0d:7c:f4:ed:e2:83:8d:e0:f2:6c:40:
98:e4:1c:50:55:a8:ae:44:5a:b3:49:40:17:f3:18:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:22:E9:C7:A9:24:4B:39:0F:41:E1:77:E4:99:9E:86:28:23:0E
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WdMi6cepJEs5D0Hhd-SZnoYoIw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f001::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d9:71:42:ee:13:51:f3:bd:2a:df:86:6d:a6:7f:1c:e0:6e:
48:38:34:d4:40:2a:96:cc:41:37:c9:f2:dd:27:82:fd:6e:e1:
39:c5:90:dc:f0:5d:6f:dd:a6:2b:11:2d:6d:d7:d4:c3:d1:ea:
8b:27:6d:d5:d1:bc:be:ca:dd:73:39:e7:9d:bd:d3:89:ad:f0:
51:58:28:2c:06:ee:f4:15:99:a8:7c:bc:43:8a:db:09:4d:d8:
c3:1e:30:40:92:40:fe:c3:43:3b:86:1c:f6:7c:c1:09:2e:9e:
1b:13:0b:be:9f:20:8f:36:d2:84:56:ac:fa:49:89:5d:e9:75:
0c:f9:a5:29:9b:8b:07:55:f6:8a:a4:43:20:2b:11:8c:f3:d1:
0b:3e:c1:13:aa:1c:d3:ca:93:ae:15:9b:0f:c6:2c:97:45:da:
bf:3e:6a:30:3f:37:d4:bd:92:af:f1:37:35:60:08:b0:ae:df:
cd:e6:c3:85:e7:bb:aa:41:ca:b6:da:1a:14:0e:b8:4e:6b:2a:
31:c6:eb:18:a5:9d:76:56:ce:5c:25:0f:20:89:8a:8d:e0:41:
cd:5d:f5:2b:3b:5a:4e:18:b7:a2:37:d8:db:a2:f5:23:83:a5:
82:d1:a5:69:22:7c:4e:9f:1f:ee:ba:21:74:7a:65:7d:39:d7:
20:fd:34:3e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIEpi4GubkFbGOx6baQroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWQzMjJlOWM3YTkyNDRiMzkwZjQxZTE3N2U0OTk5ZTg2MjgyMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonNr2J9+8pRex5XZsRX0SeIat/Ni
enlD2EvnfESoikbjTY3V3w6XToe9VMYeoLyhceQ6zG5rEtpl8o9WhNnjROARplH0
PVxCF/f7PIqV3wN7dAjLeEAwUbjJTHJi7X2ORBtEPvisGtgmD4hcGyGt9bdj75qg
giQUGorcoitF5/J7EAMFwxnnbVZpm+iqEYFBKGKmPOyIjPnumeD5EONLYq4EyyES
KYgDMrbr6IyRakcxEukKEgCbVgej2m8KzqSE8ENUBG2tbmN7h92lwvjQaJT5zkYI
LxR6Z1/GsPebyN1wrZbjDXz07eKDjeDybECY5BxQVaiuRFqzSUAX8xgukQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFnTIunHqSRLOQ9B4XfkmZ6GKCMOMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvV2RNaTZjZXBKRXM1RDBIaGQtU1pub1lvSXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCd2XFC7hNR870q34Ztpn8c4G5IODTUQCqWzEE3
yfLdJ4L9buE5xZDc8F1v3aYrES1t19TD0eqLJ23V0by+yt1zOeedvdOJrfBRWCgs
Bu70FZmofLxDitsJTdjDHjBAkkD+w0M7hhz2fMEJLp4bEwu+nyCPNtKEVqz6SYld
6XUM+aUpm4sHVfaKpEMgKxGM89ELPsETqhzTypOuFZsPxiyXRdq/PmowPzfUvZKv
8Tc1YAiwrt/N5sOF57uqQcq22hoUDrhOayoxxusYpZ12Vs5cJQ8giYqN4EHNXfUr
O1pOGLeiN9jbovUjg6WC0aVpInxOnx/uuiF0emV9Odcg/TQ+
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:07 2025 by rpki-client