Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wMHo3Yi4kUZz5fNVlfSS-nfo9XY.roa
File: wMHo3Yi4kUZz5fNVlfSS-nfo9XY.roa (raw, json)
Hash identifier: rO6vMotnNGZBpYAnxOKaAMqAZrDmbyRl2D3j4b7U5qI=
Subject key identifier: C0:C1:E8:DD:88:B8:91:46:73:E5:F3:55:95:F4:92:FA:77:E8:F5:76
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194BD8438DDF565BE248B512FF75F843BA8
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wMHo3Yi4kUZz5fNVlfSS-nfo9XY.roa
Signing time: Fri 31 Jan 2025 17:59:06 +0000
ROA not before: Fri 31 Jan 2025 17:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a0e:4bc2::/32 maxlen: 32
2a0e:5644::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:84:38:dd:f5:65:be:24:8b:51:2f:f7:5f:84:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 31 17:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c1e8dd88b8914673e5f35595f492fa77e8f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:38:ae:ec:bb:f7:f9:63:00:2e:dd:89:23:
49:69:68:04:f7:95:38:af:56:85:e0:8d:74:a9:5f:
27:dd:53:66:a9:34:2f:ee:c6:7d:44:f3:2e:03:9a:
8e:55:31:ac:b1:a2:5f:00:e9:bd:b0:a1:6e:a7:ab:
d7:ac:2b:71:ab:06:9d:69:07:b9:da:b8:c8:7c:89:
9a:33:b0:80:13:ac:8c:24:38:a1:9e:18:43:2b:87:
83:4a:0d:cd:46:94:e9:07:12:a3:82:89:83:84:09:
1e:54:cb:f0:e8:5b:b5:f0:74:22:74:36:e0:b7:94:
1a:31:4b:1d:42:9b:02:49:43:e1:ac:9e:f1:2e:f3:
a5:f8:37:9d:b7:2d:c7:57:ce:a9:1c:5d:5d:d7:3f:
6b:87:50:6b:45:4a:c2:90:85:7c:40:7f:bc:f3:05:
12:5c:70:61:51:f0:7b:6a:d6:5c:8c:45:89:25:02:
4c:c4:b8:80:ce:a0:1c:2a:fa:76:54:b1:30:5a:2c:
a0:60:b8:f5:45:09:70:d5:2a:36:a5:78:c9:5b:30:
13:ab:66:49:cf:c8:b4:d4:84:d2:61:52:2c:06:52:
35:b5:41:16:56:c4:be:c2:bd:76:1f:77:20:46:18:
fe:af:cb:f1:49:bd:c5:a9:e2:0c:b1:a4:03:ea:3f:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:E8:DD:88:B8:91:46:73:E5:F3:55:95:F4:92:FA:77:E8:F5:76
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wMHo3Yi4kUZz5fNVlfSS-nfo9XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc2::/32
2a0e:5644::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ac:af:72:be:33:96:47:bc:13:72:08:e5:2f:20:53:6e:5c:
81:2e:85:17:ab:93:1b:12:38:c3:a7:c0:2d:96:26:3b:da:4b:
70:6d:02:55:30:e5:58:33:91:1d:7b:d0:d6:e2:a2:06:35:6d:
9e:52:39:e2:6b:11:36:b4:2d:d8:6d:46:91:56:8f:5c:cd:ea:
4b:36:30:dc:dc:71:84:da:04:3d:d8:b0:89:e3:23:85:44:53:
31:48:10:49:e4:1b:ad:e8:6f:77:92:b2:ab:29:51:55:09:70:
ba:83:bd:6e:3d:86:04:31:c9:98:ca:b4:61:dd:f3:30:35:41:
84:c9:e3:d7:d9:72:02:c9:bb:d0:e6:df:37:b7:c4:a2:4e:c2:
9c:35:11:e1:9e:f8:8c:bf:88:c1:bb:c1:8a:f2:43:04:77:c7:
5f:23:d5:f3:1a:c0:ea:d3:9c:99:ca:b2:ba:27:78:5e:c1:7f:
e4:89:56:76:e0:55:30:34:35:4a:f2:c3:76:95:1a:33:38:20:
2e:32:5f:f3:df:3f:e4:47:2c:79:6f:09:8e:58:5d:6f:20:36:
38:5d:5b:9c:1d:52:e0:77:fa:eb:9d:3a:03:a4:42:43:a5:4a:
18:cd:f3:f5:90:0b:df:1e:e2:b9:2e:bb:ee:77:6b:70:8f:c5:
ca:89:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:56 2025 by rpki-client