Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa
File: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (raw, json)
Hash identifier: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=
Subject key identifier: 5B:0C:74:CA:6C:67:C1:35:0D:80:6B:68:43:A6:E6:B8:6F:31:8B:C2
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E20152A9B8695D7BF333FDE8A540
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41435
IP address blocks: 2a0d:9880::/32 maxlen: 32
2a0d:9881::/32 maxlen: 32
2a0d:9882::/32 maxlen: 32
2a0d:9883::/32 maxlen: 32
2a0d:9884::/32 maxlen: 32
2a0d:9885::/32 maxlen: 32
2a0d:9886::/32 maxlen: 32
2a0d:9887::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e2:01:52:a9:b8:69:5d:7b:f3:33:fd:e8:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b0c74ca6c67c1350d806b6843a6e6b86f318bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:ca:58:cb:5b:c4:d0:af:c8:1f:8f:3c:88:
ac:43:2e:55:19:93:2e:1f:2a:35:7c:a0:58:67:f2:
d6:4a:ee:92:0e:90:f4:8c:a6:d4:e0:ac:5e:48:ef:
8d:83:6f:43:53:87:a0:50:96:a3:8c:d1:51:ba:ad:
af:af:21:33:16:de:70:67:84:d3:db:0f:fc:51:3b:
eb:38:bd:65:6e:eb:76:31:e2:84:78:e8:59:c8:a5:
b8:7f:73:37:c4:08:75:88:11:37:25:01:58:71:40:
bc:da:ff:fc:24:b8:4a:36:af:cb:7c:e0:d7:12:38:
79:0a:bf:34:a8:46:d7:35:43:0e:7e:5d:8e:08:e1:
48:c3:24:38:6d:dd:04:27:c0:8c:5a:81:54:99:93:
c2:64:36:65:1d:c7:df:35:34:af:55:cb:f4:68:c1:
72:6b:59:cb:6d:11:cf:1b:b7:70:61:8f:53:28:c0:
1e:92:34:bf:3a:90:19:72:ba:20:e8:47:c4:04:e9:
8d:2b:c8:95:23:b3:fb:25:aa:9b:cf:0d:2a:64:13:
90:2f:b6:4b:e4:db:1d:3f:2c:ff:9f:bc:ad:c3:a7:
54:97:f5:7b:60:3b:fa:c0:18:f7:ba:dd:54:6f:96:
6c:05:ef:09:77:56:fd:3b:bc:ef:52:2a:fa:ef:44:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:74:CA:6C:67:C1:35:0D:80:6B:68:43:A6:E6:B8:6F:31:8B:C2
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9880::/29
Signature Algorithm: sha256WithRSAEncryption
44:a9:19:34:46:7d:35:70:f7:05:8b:65:77:52:c6:7d:80:82:
e5:a2:c3:ab:be:2c:d0:46:4e:1d:c7:c2:46:07:92:5b:d4:47:
5d:a5:58:c7:ee:46:ce:c4:cf:d1:2f:1d:02:02:d9:e0:f4:9c:
38:ca:b0:bd:14:49:7c:39:2d:3d:a5:65:22:66:3d:e6:fd:c9:
05:90:18:7f:fb:49:2a:13:cb:41:1c:b3:0f:0f:d3:68:3d:b9:
8b:92:99:66:71:5a:b7:9f:b8:6e:0d:71:0a:cf:3d:1e:7f:5b:
e5:94:ea:89:90:3b:88:54:7d:41:c4:d5:e3:24:7e:be:15:52:
09:dc:2d:88:17:f8:b9:6f:9e:b7:cd:58:fc:3b:21:f6:25:b9:
66:a4:1d:c1:44:bf:80:89:c9:3b:35:40:45:17:25:f9:f8:6e:
1f:41:26:65:f3:ad:01:2d:10:14:ca:15:a6:a0:f7:90:c3:a7:
7c:7b:a8:0a:d0:ea:a2:39:04:bb:e9:37:65:30:9e:87:a9:58:
88:cd:8f:62:7a:3f:2f:50:21:16:fb:dc:fa:57:9a:1c:19:20:
fb:d3:0e:e8:26:fc:6d:61:ac:fd:72:a7:b2:df:64:f3:b2:62:
6f:e5:74:5e:d6:29:2a:b0:f4:62:7e:24:f2:93:f9:1d:d9:fd:
91:3f:80:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQks+IBUqm4aV178zP96KVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwMTAyMDE0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjBjNzRjYTZjNjdjMTM1MGQ4MDZiNjg0M2E2ZTZiODZmMzE4YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/zKWMtbxNCvyB+PPIisQy5VGZMu
Hyo1fKBYZ/LWSu6SDpD0jKbU4KxeSO+Ng29DU4egUJajjNFRuq2vryEzFt5wZ4TT
2w/8UTvrOL1lbut2MeKEeOhZyKW4f3M3xAh1iBE3JQFYcUC82v/8JLhKNq/LfODX
Ejh5Cr80qEbXNUMOfl2OCOFIwyQ4bd0EJ8CMWoFUmZPCZDZlHcffNTSvVcv0aMFy
a1nLbRHPG7dwYY9TKMAekjS/OpAZcrog6EfEBOmNK8iVI7P7Jaqbzw0qZBOQL7ZL
5NsdPyz/n7ytw6dUl/V7YDv6wBj3ut1Ub5ZsBe8Jd1b9O7zvUir670QZDQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFsMdMpsZ8E1DYBraEOm5rhvMYvCMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvV3d4MHlteG53VFVOZ0d0b1E2Ym11Rzh4aThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg2YgDAN
BgkqhkiG9w0BAQsFAAOCAQEARKkZNEZ9NXD3BYtld1LGfYCC5aLDq74s0EZOHcfC
RgeSW9RHXaVYx+5GzsTP0S8dAgLZ4PScOMqwvRRJfDktPaVlImY95v3JBZAYf/tJ
KhPLQRyzDw/TaD25i5KZZnFat5+4bg1xCs89Hn9b5ZTqiZA7iFR9QcTV4yR+vhVS
CdwtiBf4uW+et81Y/Dsh9iW5ZqQdwUS/gInJOzVARRcl+fhuH0EmZfOtAS0QFMoV
pqD3kMOnfHuoCtDqojkEu+k3ZTCeh6lYiM2PYno/L1AhFvvc+leaHBkg+9MO6Cb8
bWGs/XKnst9k87Jib+V0XtYpKrD0Yn4k8pP5Hdn9kT+Aig==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:14 2025 by rpki-client