Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/wkr3-E_-aqAccu5Xsw4WQFstKqc.roa
File: wkr3-E_-aqAccu5Xsw4WQFstKqc.roa (raw, json)
Hash identifier: Ail0xJvQX43faYT+R1FOFCGtCYp7xWL/Q1iaLeJmFoI=
Subject key identifier: C2:4A:F7:F8:4F:FE:6A:A0:1C:72:EE:57:B3:0E:16:40:5B:2D:2A:A7
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7D6FC0710A7490AE6EDFA870A5C7
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/wkr3-E_-aqAccu5Xsw4WQFstKqc.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208749
IP address blocks: 2a01:e901:108::/48 maxlen: 48
2a01:e901:118::/48 maxlen: 48
2a01:e901:128::/48 maxlen: 48
2a01:e901:138::/48 maxlen: 48
2a01:e901:148::/48 maxlen: 48
2a01:e901:158::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:6f:c0:71:0a:74:90:ae:6e:df:a8:70:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c24af7f84ffe6aa01c72ee57b30e16405b2d2aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:8e:2b:a5:8b:37:56:79:5e:59:53:20:3a:
57:df:f8:63:3a:c8:00:45:8b:97:1b:ef:09:7b:0d:
6d:16:8a:4e:88:72:e5:56:dc:c1:92:49:e0:e5:9e:
61:59:e8:bd:b6:25:0f:cd:08:d4:51:a7:32:57:c6:
5a:d4:87:02:13:31:90:91:98:76:fa:58:0c:db:54:
86:3c:5b:79:69:0e:70:43:8b:8b:39:c1:18:f1:39:
99:9e:81:88:da:f4:90:3d:14:7d:d0:b4:ce:dc:2a:
b0:27:6d:f8:18:da:ef:1c:4d:d8:d0:17:b2:2f:19:
1b:67:35:c6:a8:3d:69:ef:bb:70:07:52:87:b3:d8:
fe:39:43:5e:f8:f8:76:ce:9a:ce:b9:73:11:f8:3b:
cb:03:3a:80:c0:7c:bc:86:ff:3f:ee:46:bc:08:79:
27:31:5e:3b:60:e2:d6:df:60:b3:84:ff:66:b0:28:
a1:3a:8a:58:33:88:60:d3:6e:de:b4:10:68:48:4f:
91:58:62:85:ad:4e:08:12:6e:df:73:3a:73:b7:ca:
f0:f5:1e:b2:ea:eb:ee:b4:d6:07:2a:88:f7:67:cd:
69:06:39:43:18:d5:02:b7:52:5b:10:ef:5b:a1:d7:
88:58:7d:a6:1f:60:38:04:53:1d:a1:1a:31:75:90:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:F7:F8:4F:FE:6A:A0:1C:72:EE:57:B3:0E:16:40:5B:2D:2A:A7
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/wkr3-E_-aqAccu5Xsw4WQFstKqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:108::/48
2a01:e901:118::/48
2a01:e901:128::/48
2a01:e901:138::/48
2a01:e901:148::/48
2a01:e901:158::/48
Signature Algorithm: sha256WithRSAEncryption
3b:74:97:fc:f8:4c:61:2b:90:ac:8f:3f:83:17:a9:b9:ac:bf:
09:64:78:0f:26:81:15:92:3b:81:e5:9e:41:63:e1:43:06:d0:
fd:05:bc:75:bd:ab:ad:c7:28:26:8a:c8:c6:4f:f0:d3:97:2c:
ba:f9:a5:4a:6d:88:d8:d6:e4:cf:17:58:2a:17:70:16:4c:7d:
1e:0e:9e:6c:26:e7:3e:10:69:34:17:0f:7e:c1:41:4d:71:2a:
29:e2:eb:4a:b5:9f:13:0f:9a:d5:e1:b8:c8:7b:af:44:fe:74:
43:15:aa:85:5e:2a:1a:82:0e:61:24:e2:61:fc:ed:3e:76:57:
c1:70:9e:99:12:73:96:1b:8c:f2:60:11:40:bd:25:46:2a:0d:
8b:f2:4c:89:9d:9b:e7:91:9d:0f:46:7a:e2:d0:11:2c:41:3f:
2b:48:61:3d:1d:51:04:7d:b3:08:08:1c:2c:bf:ca:23:a6:c4:
ec:27:64:62:84:d5:23:10:8d:f3:44:31:f7:4b:b2:92:b3:ab:
8c:78:d3:42:c2:c6:e1:58:45:85:2e:75:63:58:6b:72:21:d3:
c7:18:81:fd:65:2e:3c:2b:e0:1d:40:3a:4d:9b:f9:f6:35:af:
14:ca:42:8d:d6:9d:9a:63:9f:02:ae:c9:7e:4f:a7:77:72:34:
4c:9a:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:35:17 2025 by rpki-client