Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wnq5_B3FKxgMsj8ChYUVkMih2X0.roa
File: wnq5_B3FKxgMsj8ChYUVkMih2X0.roa (raw, json)
Hash identifier: zvMF139JNO7ngQUrbhuvfLntYNodALAWNMV6oU53JG4=
Subject key identifier: C2:7A:B9:FC:1D:C5:2B:18:0C:B2:3F:02:85:85:15:90:C8:A1:D9:7D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E727D60BFB60C913D72F2F14485C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wnq5_B3FKxgMsj8ChYUVkMih2X0.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141445
IP address blocks: 2a0e:b107:12c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e7:27:d6:0b:fb:60:c9:13:d7:2f:2f:14:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c27ab9fc1dc52b180cb23f0285851590c8a1d97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:67:4e:20:30:a6:a3:b8:c1:97:50:a4:f8:
94:48:48:83:25:b5:f5:6e:95:a0:5a:e3:10:82:7b:
0c:b9:cb:94:ed:5b:6e:9c:58:5c:f8:04:b0:f7:ba:
71:46:22:82:dd:9a:b1:e8:ee:48:36:6a:da:dc:cf:
63:1c:24:b2:eb:3e:5b:47:2d:c0:ac:3f:6c:95:f7:
43:8a:c2:da:ef:5d:da:10:06:f7:5d:61:d7:07:3b:
1e:18:7b:df:4e:3f:64:4b:92:e2:f3:d3:41:ac:ce:
89:5b:67:42:d7:9f:9e:6a:5d:68:89:58:86:d2:89:
e5:04:8b:95:50:6e:b4:37:18:49:98:5c:ec:92:75:
2b:33:57:ea:44:c2:6a:97:d6:ff:ce:40:d5:0f:6a:
31:b0:e1:fe:f9:53:41:54:d3:49:7d:d3:cb:56:7b:
37:35:60:eb:e9:38:02:48:2f:d1:be:25:74:fc:77:
cb:a7:6f:ba:e7:14:23:24:e1:e9:20:cb:01:17:fa:
f0:a7:21:26:3a:63:11:13:51:0a:f0:de:a6:ed:12:
e5:e9:0f:08:db:8c:e9:0e:75:60:62:20:ff:26:c4:
f8:ff:82:b6:35:dd:4a:2e:f8:01:7a:a1:09:f0:91:
d7:c2:12:83:c1:58:0a:46:c8:55:f2:37:4e:36:74:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:B9:FC:1D:C5:2B:18:0C:B2:3F:02:85:85:15:90:C8:A1:D9:7D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wnq5_B3FKxgMsj8ChYUVkMih2X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12c0::/44
Signature Algorithm: sha256WithRSAEncryption
3e:b8:6c:50:d4:c6:fd:cd:e1:fb:c1:89:d1:db:c4:9e:d7:99:
fb:41:90:a3:6f:22:22:ba:15:7b:3e:42:d8:16:13:0e:ac:73:
77:b3:af:48:81:bf:80:ee:fb:22:87:4b:cc:1a:84:7a:f9:5f:
d8:f3:0b:ed:8f:91:68:dd:43:b6:ab:28:09:4e:24:03:78:0e:
93:9b:2b:f9:ef:43:ed:8f:03:88:36:1f:2f:82:85:4d:cd:55:
12:e8:41:b0:50:a2:82:25:88:58:b7:9c:50:49:fb:11:fc:53:
fd:42:24:3b:45:7e:44:a8:c2:ee:ae:64:93:f2:81:62:f3:45:
d1:4c:8a:b2:b9:5d:a3:36:c8:7c:82:85:80:4b:03:bd:89:63:
3a:19:16:ee:10:d8:da:ab:aa:fb:09:a4:b1:a0:97:53:84:3e:
bb:19:1a:e5:1e:79:31:81:e2:82:2f:2e:0b:74:2c:5e:76:82:
f1:4d:fc:cf:ce:30:d1:35:1c:c6:6d:fe:1e:87:84:5e:5a:80:
ff:e4:71:bd:7d:c7:1d:db:f0:73:90:06:92:31:45:18:95:e4:
61:a5:bc:e8:22:46:c9:79:d0:13:d7:82:1c:25:94:c7:35:bb:
31:d9:62:01:f7:35:ca:a3:f2:8e:fb:3e:68:ac:2d:03:54:8b:
45:43:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:11 2025 by rpki-client