Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/ww5W_AzyvORyhz7R6e4M2kGu004.roa
File: ww5W_AzyvORyhz7R6e4M2kGu004.roa (raw, json)
Hash identifier: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=
Subject key identifier: C3:0E:56:FC:0C:F2:BC:E4:72:87:3E:D1:E9:EE:0C:DA:41:AE:D3:4E
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 01942444A2B3F0A56943CEFB77F0E1B76648
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/ww5W_AzyvORyhz7R6e4M2kGu004.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210612
IP address blocks: 91.246.61.0/24 maxlen: 24
2a11:c040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a2:b3:f0:a5:69:43:ce:fb:77:f0:e1:b7:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30e56fc0cf2bce472873ed1e9ee0cda41aed34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:cf:5e:a6:52:4a:c0:69:9f:50:d3:c5:33:
3f:89:c7:73:66:e9:b7:9a:f5:df:12:6b:1f:27:b7:
c8:8d:36:34:33:24:7a:d5:3d:0a:7d:7f:33:75:a8:
a6:f1:23:ae:e8:f0:13:36:a0:b9:c6:9d:bd:be:5c:
22:63:3f:c5:97:62:02:d7:6c:37:a5:14:f9:97:45:
cd:8a:54:20:05:9a:51:c6:a2:da:72:4c:83:b1:c3:
13:c8:63:5a:67:f7:71:60:22:73:38:31:6c:8e:37:
7d:47:e1:04:61:3e:78:ac:b7:81:11:e8:8b:c2:be:
26:21:6b:50:21:c5:9a:09:0a:93:43:56:3f:5f:1b:
ae:a8:d3:cf:ee:8a:9a:2d:53:1f:7e:ab:bb:41:33:
7b:3b:59:87:43:c0:1d:ae:9d:bb:40:cd:35:53:a2:
6b:a7:93:fa:75:b9:a8:d3:67:9e:62:e4:9a:85:4a:
f7:1e:0a:9c:e0:0c:95:d9:76:44:b4:c1:e5:09:98:
1e:8e:8b:86:f4:21:8b:90:41:02:73:1a:9e:72:0f:
c6:cc:14:70:3b:bd:d5:2a:a8:11:22:6f:55:02:7d:
bd:d1:05:8d:d0:fb:ad:64:15:47:6f:3b:0b:18:27:
2e:87:88:42:6a:40:94:cc:3d:bc:d2:82:85:e1:11:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:56:FC:0C:F2:BC:E4:72:87:3E:D1:E9:EE:0C:DA:41:AE:D3:4E
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/ww5W_AzyvORyhz7R6e4M2kGu004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.61.0/24
IPv6:
2a11:c040::/29
Signature Algorithm: sha256WithRSAEncryption
4b:88:48:5c:4d:54:b0:f0:96:06:03:0d:13:6c:53:be:a5:16:
ea:e2:ff:ac:cd:46:97:61:2e:bf:03:a5:4e:c2:e4:d7:a6:a6:
8a:6d:26:97:07:30:85:b4:3b:97:a1:99:0b:2c:40:b6:7c:d9:
3c:72:ac:75:4c:68:cf:d5:c3:ce:d7:38:7e:57:9d:8f:6d:6e:
7c:d7:b5:2a:79:32:82:46:63:f5:e4:ee:02:50:a2:80:41:02:
62:b0:23:f7:73:6b:bb:81:54:68:b1:4a:14:6d:45:51:cb:c8:
f3:55:23:d1:1d:f3:f2:3a:fe:93:0a:7f:53:36:b3:ec:83:1c:
0e:f4:9e:b2:d2:10:1f:fc:ac:ad:fb:41:98:33:8a:c4:c2:5c:
11:b3:67:d8:fc:84:aa:b6:9a:d8:2e:4a:fc:09:a8:e9:8d:aa:
ab:d0:52:b3:c0:a8:00:ae:18:e5:88:67:fb:63:be:db:16:37:
87:b8:3d:fc:33:16:fb:3e:49:2e:56:b8:7a:49:a7:e3:3c:b2:
87:5f:2b:88:cd:f7:c2:65:96:19:c5:3c:02:ce:f7:5a:7b:b5:
f3:f4:de:65:7b:a1:eb:c1:41:81:6f:9f:44:b4:63:d4:f0:cb:
eb:c5:c2:fa:ea:2e:fe:72:45:91:be:42:2e:f0:07:61:de:db:
1e:69:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:44 2025 by rpki-client