Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/WCDr0C7BpS_ig7DZMYGJWIavE9c.roa
File: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (raw, json)
Hash identifier: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=
Subject key identifier: 58:20:EB:D0:2E:C1:A5:2F:E2:83:B0:D9:31:81:89:58:86:AF:13:D7
Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial: 019423D70A412F300F3E35B51134623D0CDF
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/WCDr0C7BpS_ig7DZMYGJWIavE9c.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35506
IP address blocks: 2a10:d000::/29 maxlen: 29
2a10:d000:3::/48 maxlen: 48
2a10:d000:14::/48 maxlen: 48
2a10:d000:1c::/48 maxlen: 48
2a10:d001::/36 maxlen: 36
2a10:d001::/38 maxlen: 38
2a10:d001:1000::/36 maxlen: 36
2a10:d001:1000::/38 maxlen: 38
2a10:d001:1800::/38 maxlen: 38
2a10:d001:2000::/36 maxlen: 36
2a10:d001:2000::/38 maxlen: 38
2a10:d001:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0a:41:2f:30:0f:3e:35:b5:11:34:62:3d:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5820ebd02ec1a52fe283b0d93181895886af13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:ae:d6:15:5a:90:4f:86:53:e1:4b:15:69:
5b:20:c1:ed:2b:0c:74:8a:30:41:70:55:52:13:c4:
1d:78:94:be:fc:2e:e5:88:3b:11:1e:49:32:5f:89:
30:bf:dc:bb:38:33:80:42:f7:5d:fb:d3:6c:7b:f7:
13:34:42:9d:5b:fe:9e:fb:b9:9f:58:11:64:5d:43:
5d:47:cb:c6:26:91:a5:74:73:c5:07:73:1a:72:f3:
43:71:4c:b5:64:57:8f:fd:dc:58:d0:52:28:1c:2b:
5a:d8:5c:eb:60:eb:50:96:49:5b:ae:7b:91:3d:39:
f9:55:cf:fd:52:3f:8a:a6:dd:9d:87:f7:7f:cd:73:
cd:44:ef:b1:b8:0b:50:4c:7d:16:0f:7a:57:6b:98:
bd:ca:62:ef:c6:a5:1e:31:6d:36:b8:53:51:db:a0:
7d:91:69:4c:07:ae:be:10:b1:24:ab:7d:1c:ed:da:
06:6c:bd:09:02:da:b2:ff:d0:d5:bd:93:a3:98:60:
b3:1b:ca:c6:6e:f0:f5:e6:aa:2c:e1:3c:b1:e4:a3:
a5:d5:b9:61:a9:bc:49:11:7c:e5:ac:ba:ba:a2:5d:
7b:ee:a0:a3:26:f6:24:91:63:de:3c:56:28:3a:9c:
e4:3f:45:57:7c:db:11:7e:37:4d:3d:c3:f1:73:a5:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:EB:D0:2E:C1:A5:2F:E2:83:B0:D9:31:81:89:58:86:AF:13:D7
X509v3 Authority Key Identifier:
keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/WCDr0C7BpS_ig7DZMYGJWIavE9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:d000::/29
Signature Algorithm: sha256WithRSAEncryption
1a:e2:da:62:9a:63:0f:5d:f6:8e:88:e7:3f:47:62:26:82:9b:
8c:17:88:61:30:1e:d7:0f:a5:87:fb:81:7a:65:02:9f:ce:95:
b0:4d:96:cf:23:93:9e:59:5e:83:5f:91:66:b9:15:dd:58:0b:
c2:f7:cb:ff:3e:e0:79:9f:84:33:b7:0e:86:99:9d:a5:7b:32:
28:2f:8f:76:b1:5b:3b:42:0e:ff:5d:06:de:94:88:47:35:e7:
ba:6d:46:b2:3f:d3:78:f4:77:6d:fc:88:99:88:0b:0a:80:34:
a2:92:7b:a4:3a:c8:5f:26:3c:40:cb:ce:f6:4b:fe:04:c4:e4:
8d:58:48:3e:ed:12:57:90:03:7b:2c:c1:89:f8:f4:60:8a:e2:
50:85:9d:66:6d:85:63:68:25:6b:da:45:f7:27:2e:26:4c:6d:
a1:ab:9d:d1:7e:80:3a:d2:1b:6f:91:b0:e0:23:04:02:c9:6c:
26:42:be:78:cb:b3:59:a0:18:41:5b:04:1b:43:53:ff:50:15:
4a:1c:9d:05:4d:0c:b3:08:f3:de:d2:d1:40:6f:66:92:6a:cf:
2a:87:f3:46:31:5e:a6:7f:44:05:2a:93:93:9c:13:42:02:8a:
ad:9e:1d:3b:f9:1e:f2:c9:11:07:af:33:0d:dc:f2:c3:06:aa:
f7:43:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:04 2025 by rpki-client