Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/WYTVUSsxI4rZAMg2zgGzRIlXYPQ.roa
File: WYTVUSsxI4rZAMg2zgGzRIlXYPQ.roa (raw, json)
Hash identifier: L9LWgTLljOzuW1wOFpNyjaTrPSd7mMyRBmvb8euqHOo=
Subject key identifier: 59:84:D5:51:2B:31:23:8A:D9:00:C8:36:CE:01:B3:44:89:57:60:F4
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194BD834DC3B715B442A6029D4F6994D878
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/WYTVUSsxI4rZAMg2zgGzRIlXYPQ.roa
Signing time: Fri 31 Jan 2025 17:58:06 +0000
ROA not before: Fri 31 Jan 2025 17:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0e:5902::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:83:4d:c3:b7:15:b4:42:a6:02:9d:4f:69:94:d8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 31 17:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5984d5512b31238ad900c836ce01b344895760f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:e5:b8:0f:e1:7a:e8:a3:f5:83:1f:54:a2:
2a:12:e7:a7:1a:34:03:c9:90:8e:25:95:22:7c:7a:
aa:ad:a2:58:1a:ea:cb:78:93:45:1b:59:e3:27:77:
6a:a5:16:ca:38:46:29:0e:09:53:0f:d3:f9:53:4b:
d0:de:0d:74:40:78:54:12:0e:e2:25:d6:7d:2f:08:
fe:2f:54:db:8f:61:c5:96:db:d0:55:d4:4f:09:27:
95:43:04:5d:40:bc:ba:34:89:3d:b6:75:6e:bc:3b:
82:1d:c3:09:2b:1e:6b:82:86:51:15:4e:c2:81:cb:
b6:cb:da:b3:69:11:be:ef:47:92:4b:7c:ed:f2:48:
b0:f5:14:8d:ea:33:24:a9:b3:89:85:28:85:43:2c:
0a:6a:0a:f6:a1:8a:f5:7e:d8:c7:86:a5:14:b1:0b:
23:f6:51:eb:90:56:c7:1f:31:32:3a:ce:59:b8:91:
df:50:fc:b6:c8:fa:54:03:d3:bc:53:65:cf:89:b7:
f4:13:b4:55:d0:8b:d5:6a:ef:e2:37:52:ea:55:d8:
6b:d5:a1:e1:1a:b9:fc:3d:95:cb:cf:69:d7:90:d5:
bd:07:67:c7:4c:01:75:e2:57:f8:20:24:e6:50:14:
93:db:33:8e:a5:1d:ec:ac:a8:9f:21:b0:a2:a3:5a:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:D5:51:2B:31:23:8A:D9:00:C8:36:CE:01:B3:44:89:57:60:F4
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/WYTVUSsxI4rZAMg2zgGzRIlXYPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5902::/32
Signature Algorithm: sha256WithRSAEncryption
3a:53:ec:1c:eb:2c:31:11:3a:52:74:4f:21:df:90:fd:5e:6e:
26:03:4e:b4:8b:20:c0:ca:18:65:7b:85:f6:de:95:7f:de:47:
8a:f5:df:87:ad:68:46:d7:1b:91:9d:69:7c:fc:e4:c6:6f:32:
e9:9c:ab:80:39:fc:7f:53:14:32:be:25:f0:a8:e0:0e:70:6f:
cd:61:5c:53:a9:67:48:89:2a:9a:52:41:44:e5:3f:94:47:16:
8d:dd:0a:9b:e3:56:e5:c3:88:47:65:f6:34:ea:30:0b:de:16:
79:50:fe:2a:3b:d9:44:d9:a7:c0:21:1d:03:ed:6c:98:1b:76:
0f:de:7d:dd:08:56:45:7f:bb:b5:7d:f8:b3:0c:e0:e0:ed:0b:
07:c8:50:4a:03:c5:e5:59:c2:53:bd:68:e0:8b:4e:23:30:7d:
d1:18:0b:73:26:9b:1e:64:7d:8f:4a:08:4f:39:2f:1b:74:e3:
71:2c:22:62:2f:f4:09:6f:9f:45:10:14:67:67:8c:4a:f8:f4:
bc:25:fe:e5:ca:bf:28:37:f9:ff:d0:0b:5a:b1:70:10:d9:33:
a3:21:57:ae:8e:42:ae:fb:7a:ae:ea:c4:05:43:09:a7:12:af:
25:e5:a8:2f:cc:94:54:3c:c2:a1:fd:dd:3c:29:22:b1:18:43:
10:71:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:59 2025 by rpki-client