Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WUc3z2fQG10QytnsTqMuyjZqpZ4.roa
File: WUc3z2fQG10QytnsTqMuyjZqpZ4.roa (raw, json)
Hash identifier: Wwt4rctqwMhiP8X/knzqOzWEWNDCRo1B0DZHFzh3Ox4=
Subject key identifier: 59:47:37:CF:67:D0:1B:5D:10:CA:D9:EC:4E:A3:2E:CA:36:6A:A5:9E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAB96762F2C82AC9399DB748A4ED00
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WUc3z2fQG10QytnsTqMuyjZqpZ4.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215932
IP address blocks: 2a0c:b641:b50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b9:67:62:f2:c8:2a:c9:39:9d:b7:48:a4:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=594737cf67d01b5d10cad9ec4ea32eca366aa59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:e7:b9:b9:e3:74:6f:bc:52:13:11:f0:70:
68:b1:69:38:e2:29:32:3a:53:2a:b8:53:1b:08:10:
e7:e3:d3:98:da:f1:2d:3b:b0:82:bd:75:e5:c5:b9:
0f:be:ee:3f:c9:9a:bc:c1:a6:13:b9:d0:f6:ed:05:
f9:d2:ae:bd:74:cf:bb:85:f0:4a:3d:7a:42:86:4f:
74:56:44:24:7d:29:37:2a:54:99:b9:69:4f:d9:e3:
c3:af:32:33:3b:56:51:81:e9:47:02:85:7c:08:c0:
a7:c2:8f:82:64:00:64:ce:be:e7:13:ca:40:5a:0b:
4a:a1:77:4f:d8:81:64:35:7c:b7:5f:98:1f:3b:ef:
12:a5:e8:d6:5b:8c:56:89:53:bd:aa:98:8a:17:44:
18:f8:86:2b:63:be:80:38:f0:62:b7:33:a1:80:57:
2b:97:09:b3:6f:cd:e1:3d:69:e9:16:81:20:d7:76:
e8:ea:d9:4b:d6:d3:3b:9e:26:47:5e:6d:35:36:d8:
5b:48:96:fd:17:ac:cf:de:d3:6f:18:1e:83:62:a7:
1e:bc:5e:e3:b6:3c:35:a1:60:04:c3:f8:08:55:7e:
19:01:e7:a4:e9:f9:4d:f7:2f:81:09:78:f1:7f:ff:
e1:08:d3:39:5a:0f:21:64:6c:18:25:3a:0c:f6:a7:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:37:CF:67:D0:1B:5D:10:CA:D9:EC:4E:A3:2E:CA:36:6A:A5:9E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WUc3z2fQG10QytnsTqMuyjZqpZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b50::/44
Signature Algorithm: sha256WithRSAEncryption
89:6b:22:95:ed:bf:0c:5d:78:3f:d0:9b:82:65:b6:47:64:eb:
31:90:99:de:32:7a:1e:b7:5d:51:2b:09:ac:dc:f7:2d:3a:d4:
0e:41:5d:29:bf:b6:74:9c:39:4a:c5:69:fc:b4:d5:79:b8:a0:
ac:a5:b0:1c:66:e9:4d:23:a3:09:d9:0b:3c:99:24:91:99:a9:
54:cd:5b:d6:2d:fb:8a:6a:89:e5:c7:e8:74:90:80:54:47:3f:
97:27:12:fa:f2:a6:36:ed:d9:ad:1d:d2:50:b7:99:7a:51:95:
38:bb:ab:16:39:6f:43:46:0c:2c:37:ab:c7:aa:f3:a7:ca:ef:
f3:27:71:93:41:60:0a:55:00:13:aa:75:a1:99:a5:31:2a:66:
c5:b4:c3:0f:6e:71:73:ca:60:43:36:3d:01:e0:70:3d:7f:a6:
ef:37:b4:b4:c4:24:94:0f:e3:b2:53:cd:ca:75:e6:b7:fc:03:
ca:a1:46:6f:fb:2f:73:91:0b:04:3f:0f:46:c0:75:bd:aa:53:
97:41:9a:c7:30:90:95:51:ca:69:1a:16:f0:55:18:05:8b:87:
db:04:7f:7b:80:fe:ec:15:2e:e0:e3:dc:5e:70:8d:0e:b0:ad:
2b:d8:e9:57:d2:5a:7b:0a:b0:3a:9b:6a:6f:ca:f4:66:9f:18:
8d:32:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:40:18 2025 by rpki-client