Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wmh2ormxaHpKX4FQ4caQ4aBfD4o.roa
File: wmh2ormxaHpKX4FQ4caQ4aBfD4o.roa (raw, json)
Hash identifier: zZRrBAE142VtRVKlbjtRox7pzEmfT2gYwaTZYTSts+A=
Subject key identifier: C2:68:76:A2:B9:B1:68:7A:4A:5F:81:50:E1:C6:90:E1:A0:5F:0F:8A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252208D83344A557C220741AE13D709F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wmh2ormxaHpKX4FQ4caQ4aBfD4o.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202224
IP address blocks: 2a10:2f00:18b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:08:d8:33:44:a5:57:c2:20:74:1a:e1:3d:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26876a2b9b1687a4a5f8150e1c690e1a05f0f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:c5:55:57:5e:dc:44:e5:b0:6e:5f:ed:3f:
75:c4:09:f8:8c:f3:39:b9:03:2f:42:df:38:01:8a:
58:1a:30:28:73:b7:17:d1:ce:c3:63:09:a4:96:fc:
0f:a1:1b:91:0b:6f:1d:93:52:8c:3e:1f:db:ff:9a:
af:ed:a9:d8:04:c4:a5:ee:5d:6f:6c:9f:07:27:aa:
46:95:6e:ac:ac:f0:c1:26:21:71:8f:41:d7:22:7a:
f5:1a:2d:5a:e4:e1:81:6b:9d:ed:f2:ed:0e:7a:71:
1f:d6:4d:4d:ef:70:03:13:95:14:25:67:19:ae:35:
29:dd:5c:8d:8f:eb:70:49:64:d6:69:b5:e6:b6:ed:
f0:88:24:b3:12:35:32:8c:83:57:4a:ef:c1:fb:75:
3c:ab:37:ce:49:5a:c3:cd:04:1f:0c:a8:6f:29:58:
c6:05:10:e3:11:2a:d1:9d:b9:4d:ca:ef:37:bf:db:
4a:60:14:eb:69:0d:ff:36:98:e6:a7:ca:72:56:8f:
ef:a3:3d:70:81:59:e9:1e:54:32:c2:41:cc:ca:51:
ab:96:cb:0f:6e:b7:cb:05:96:e8:ce:03:a7:bf:45:
5b:cb:4e:76:97:8d:f4:19:e5:3b:d5:3d:de:c9:0e:
c3:50:9a:b5:c7:2c:43:af:91:90:1c:ca:81:d3:bf:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:68:76:A2:B9:B1:68:7A:4A:5F:81:50:E1:C6:90:E1:A0:5F:0F:8A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wmh2ormxaHpKX4FQ4caQ4aBfD4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18b::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a7:be:21:92:37:26:0f:15:fd:9f:2c:ed:bb:60:a4:81:7e:
75:f8:f6:eb:56:74:14:ff:15:88:05:fc:c1:cc:c5:a7:7a:8b:
78:2d:3c:f0:01:08:ab:86:37:8b:d9:1f:3f:22:93:6b:e0:16:
43:e4:ca:8e:92:0d:fc:8a:36:bc:bc:21:3f:08:01:8b:34:4f:
4a:02:9d:c6:89:d5:58:4d:b4:6f:95:e4:ad:dc:08:db:06:58:
b1:31:b7:7c:66:61:a6:a8:56:e0:75:be:a7:ee:f5:c5:03:3a:
4f:7b:a8:ab:3b:63:c9:c9:12:1d:e6:ab:cb:87:2a:7b:4e:02:
da:57:5a:6e:21:92:2f:1e:5f:ee:0f:6b:86:8a:45:cc:b5:fd:
50:d3:a8:d0:38:a6:1b:e5:68:a0:a7:3b:22:dd:be:de:61:99:
fd:a0:0b:12:5d:b8:1b:62:9b:7e:85:45:b0:5a:a0:0c:2d:fa:
22:f0:3a:07:aa:d3:f3:29:1f:aa:ac:fd:31:8c:6b:b7:e9:a5:
44:49:bd:80:df:85:67:0d:d1:d6:0c:d9:1f:fb:35:99:63:4c:
fc:6d:bd:4f:cb:b7:a5:ad:17:a9:cb:75:f7:c2:12:2c:21:5d:
e2:2d:b4:4f:55:8f:c0:d5:6b:da:39:37:1f:26:b4:84:e8:1a:
d1:15:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:19 2025 by rpki-client