Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/WMmVXxLBNxJnZE-IVz74wBzTPGY.roa
File: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (raw, json)
Hash identifier: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=
Subject key identifier: 58:C9:95:5F:12:C1:37:12:67:64:4F:88:57:3E:F8:C0:1C:D3:3C:66
Certificate issuer: /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial: 019424B3C4625E5961327A6451F6983410BC
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/WMmVXxLBNxJnZE-IVz74wBzTPGY.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25596
IP address blocks: 2a02:58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c4:62:5e:59:61:32:7a:64:51:f6:98:34:10:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c9955f12c1371267644f88573ef8c01cd33c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:64:65:d0:bb:fd:d5:d1:22:48:e5:07:aa:
ab:c7:39:b9:2c:c3:de:4b:ea:20:29:3c:cc:8c:91:
9e:e9:5d:8e:63:6f:6e:2a:d5:d0:3f:5c:9c:f5:4c:
d4:9c:ef:03:99:5f:e9:56:e7:6f:41:06:73:11:e2:
9f:02:ee:21:77:f5:e0:8d:ec:e7:de:e5:22:25:c1:
5b:f8:a7:5f:93:75:40:49:c4:6b:25:42:6e:da:1d:
fa:f5:25:5d:bc:02:a2:53:47:ba:87:63:ab:39:e7:
63:b3:81:a8:54:6a:ee:11:18:88:38:4c:f1:61:c4:
1d:01:7e:bd:a1:da:7d:38:44:cb:d9:c6:b1:5b:c8:
76:c2:06:de:86:fa:c0:54:35:45:93:29:8e:d9:13:
7f:3d:40:25:c7:0d:0f:47:78:4b:67:e5:2a:63:1e:
5b:75:a6:bd:29:24:f3:10:9b:87:88:c0:fb:93:fb:
73:82:95:9a:5b:a5:41:98:63:3c:f4:44:8d:49:bf:
df:20:05:0b:af:93:15:61:15:0c:63:62:f5:1d:e6:
f4:ec:6a:69:54:dd:c3:f5:e7:52:87:41:a3:11:ec:
d3:ca:60:14:b6:9e:e3:f8:9c:11:91:65:bf:a4:bd:
60:6a:f7:5c:2b:34:ae:e9:df:d5:0a:d1:4c:aa:f6:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C9:95:5F:12:C1:37:12:67:64:4F:88:57:3E:F8:C0:1C:D3:3C:66
X509v3 Authority Key Identifier:
keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/WMmVXxLBNxJnZE-IVz74wBzTPGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:58::/32
Signature Algorithm: sha256WithRSAEncryption
92:09:a0:78:35:d2:95:a0:73:18:d3:fd:28:80:b8:06:8b:a2:
a3:fb:22:bd:6c:0f:1d:b7:a4:3e:19:e9:1d:d0:fd:4b:02:eb:
b5:ef:83:ab:a0:d8:0f:a0:b3:dc:33:9f:65:15:da:07:de:e7:
48:72:13:63:34:42:cd:ba:0e:0b:5f:48:6f:4d:11:3c:36:c6:
03:c4:d8:b8:77:6b:1d:dd:29:80:89:8d:b3:3e:a8:1f:97:eb:
77:06:70:50:42:31:4d:ce:c2:08:33:33:58:76:71:e4:b6:af:
ed:14:da:59:75:1d:93:d2:29:17:0e:76:40:06:a8:50:5c:b9:
31:bc:af:29:95:d6:79:f5:69:6e:7a:20:21:af:0e:17:93:db:
51:20:22:33:7d:d1:86:a8:3e:79:d0:65:41:93:cb:d9:10:04:
fc:09:71:72:87:c2:29:43:e2:04:fe:61:e2:91:2d:0a:79:91:
3f:70:2b:56:4f:e5:6a:ef:6d:42:45:8a:8c:78:11:f4:49:87:
3c:5b:13:22:05:06:96:cd:fc:dd:48:ea:b3:89:f4:1b:60:8d:
86:77:ec:51:f1:8e:3b:3d:28:94:ae:dc:22:35:68:9c:7d:5a:
5d:0d:1a:4d:64:ff:36:af:fc:8e:a0:90:00:a1:b2:5f:69:42:
76:eb:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:38 2025 by rpki-client