Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/wsdt-kUXWti-OP24yDWApFGxIJE.roa
File: wsdt-kUXWti-OP24yDWApFGxIJE.roa (raw, json)
Hash identifier: +uBMDu3zR3mTsh/xwPXZ8O/6AVs4sqfUzvpvUBwq7oo=
Subject key identifier: C2:C7:6D:FA:45:17:5A:D8:BE:38:FD:B8:C8:35:80:A4:51:B1:20:91
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019717E3CEE37CB86AA63AE2CEF2E0FF2FAC
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/wsdt-kUXWti-OP24yDWApFGxIJE.roa
Signing time: Wed 28 May 2025 17:14:54 +0000
ROA not before: Wed 28 May 2025 17:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:4386::/32 maxlen: 32
2a09:a206::/32 maxlen: 32
2a0c:9483::/32 maxlen: 32
2a0d:f845::/32 maxlen: 32
2a0f:1801::/32 maxlen: 32
2a0f:1802::/32 maxlen: 32
2a0f:9d01::/32 maxlen: 32
2a12:38c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:e3:ce:e3:7c:b8:6a:a6:3a:e2:ce:f2:e0:ff:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 28 17:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c76dfa45175ad8be38fdb8c83580a451b12091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:d0:5d:32:19:5b:4a:a2:dd:90:81:67:f4:
04:f5:1e:f8:f6:1f:d5:ac:2a:d1:60:89:30:99:90:
c3:b5:9e:2d:09:c7:69:f2:ba:1d:78:40:ef:6f:a4:
3e:4e:b8:87:7b:8f:9a:90:ed:14:41:cb:7a:4b:a2:
ae:fb:da:d4:c6:3f:dc:67:14:40:28:c0:b3:00:25:
02:2e:c9:2c:d3:3f:32:66:c3:d7:3b:98:eb:aa:9a:
13:dd:61:df:1e:7b:9f:71:60:52:23:24:4a:fe:dd:
1d:e5:25:91:de:24:bf:a2:76:88:38:7d:47:5a:cf:
78:15:b8:b9:a3:64:29:7d:a8:92:da:56:54:a2:14:
4a:75:87:44:23:b6:eb:ec:a3:d7:40:c2:fa:0a:6f:
93:02:1b:fb:2a:83:c3:2a:9a:58:48:6c:6a:71:fa:
8f:b7:84:d4:86:c4:08:82:17:c3:20:f8:4f:07:b8:
68:4f:7b:a7:3e:06:1b:32:7a:c9:8f:e0:ec:60:f1:
5f:9c:2c:68:3d:87:24:7c:58:98:4a:3b:7e:3f:86:
0e:cf:b8:d9:85:f6:2d:cc:f2:73:7e:26:09:84:2b:
05:a9:9c:75:d8:02:e3:a8:6f:96:1a:b0:5b:e7:3c:
a4:63:d4:d6:e1:e6:30:97:27:59:28:fe:0e:b5:49:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:6D:FA:45:17:5A:D8:BE:38:FD:B8:C8:35:80:A4:51:B1:20:91
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/wsdt-kUXWti-OP24yDWApFGxIJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4386::/32
2a09:a206::/32
2a0c:9483::/32
2a0d:f845::/32
2a0f:1801::-2a0f:1802:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:9d01::/32
2a12:38c4::/32
Signature Algorithm: sha256WithRSAEncryption
31:d2:e3:eb:fb:b6:e0:ed:e4:8a:d2:95:1f:5a:4c:2f:fc:92:
c4:0f:7b:79:6c:1c:70:23:4f:3d:45:26:84:35:e9:fb:63:6a:
a3:ef:ef:cb:78:36:4b:90:db:49:93:74:62:64:ad:a5:25:c5:
77:a3:73:6a:6f:41:9c:6d:3d:c1:63:6a:66:5b:e8:d8:97:f9:
85:40:11:9a:07:5b:79:61:6f:61:96:a8:f1:8f:53:f2:11:dd:
90:99:fb:89:17:10:29:3b:02:e7:e0:e0:64:b0:0f:d9:97:6a:
9c:0b:2d:e4:4c:df:f8:74:d6:83:3f:08:19:f4:63:8d:8e:cf:
7f:4f:fb:d4:90:f8:07:13:00:f0:3e:19:94:19:1d:fb:49:45:
b8:5c:40:7b:d1:25:17:8b:88:3f:95:ce:ee:8c:43:13:fa:c9:
ff:fa:1e:13:aa:4d:0e:3c:72:df:5e:17:91:0c:ff:dd:84:2d:
96:a8:23:3e:49:c2:3d:81:5e:d6:c5:b2:5d:a2:b4:d4:88:87:
09:80:20:06:b5:1e:4a:f5:72:56:f0:01:6c:79:55:3c:6a:3d:
cc:d0:5c:ed:d5:e1:c3:7d:dc:68:7f:f0:73:3d:1e:f6:bd:af:
88:2a:b9:40:ba:c1:ab:30:3f:33:27:cb:1e:14:13:86:1c:4a:
34:c2:7a:6a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZcX487jfLhqpjrizvLg/y+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwNTI4MTcxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM3NmRmYTQ1MTc1YWQ4YmUzOGZkYjhjODM1ODBhNDUxYjEyMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsfQXTIZW0qi3ZCBZ/QE9R749h/V
rCrRYIkwmZDDtZ4tCcdp8rodeEDvb6Q+TriHe4+akO0UQct6S6Ku+9rUxj/cZxRA
KMCzACUCLsks0z8yZsPXO5jrqpoT3WHfHnufcWBSIyRK/t0d5SWR3iS/onaIOH1H
Ws94Fbi5o2QpfaiS2lZUohRKdYdEI7br7KPXQML6Cm+TAhv7KoPDKppYSGxqcfqP
t4TUhsQIghfDIPhPB7hoT3unPgYbMnrJj+DsYPFfnCxoPYckfFiYSjt+P4YOz7jZ
hfYtzPJzfiYJhCsFqZx12ALjqG+WGrBb5zykY9TW4eYwlydZKP4OtUmoLQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFMLHbfpFF1rYvjj9uMg1gKRRsSCRMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvd3NkdC1rVVhXdGktT1AyNHlEV0FwRkd4SUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAAjA6AwUAKgZDhgMF
ACoJogYDBQAqDJSDAwUAKg34RTAOAwUAKg8YAQMFACoPGAIDBQAqD50BAwUAKhI4
xDANBgkqhkiG9w0BAQsFAAOCAQEAMdLj6/u24O3kitKVH1pML/ySxA97eWwccCNP
PUUmhDXp+2Nqo+/vy3g2S5DbSZN0YmStpSXFd6Nzam9BnG09wWNqZlvo2Jf5hUAR
mgdbeWFvYZao8Y9T8hHdkJn7iRcQKTsC5+DgZLAP2ZdqnAst5Ezf+HTWgz8IGfRj
jY7Pf0/71JD4BxMA8D4ZlBkd+0lFuFxAe9ElF4uIP5XO7oxDE/rJ//oeE6pNDjxy
314XkQz/3YQtlqgjPknCPYFe1sWyXaK01IiHCYAgBrUeSvVyVvABbHlVPGo9zNBc
7dXhw33caH/wcz0e9r2viCq5QLrBqzA/MyfLHhQThhxKNMJ6ag==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:21 2025 by rpki-client