Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WZWo5teMW38zQdJz-ZbPMbjbKSI.roa
File: WZWo5teMW38zQdJz-ZbPMbjbKSI.roa (raw, json)
Hash identifier: FXblBlS3s58r4mSCM13aV06LpgPOFRcXR7Ez1Yeqq3w=
Subject key identifier: 59:95:A8:E6:D7:8C:5B:7F:33:41:D2:73:F9:96:CF:31:B8:DB:29:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194B7B0D41FB21BDEBBD35306C84F724542
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WZWo5teMW38zQdJz-ZbPMbjbKSI.roa
Signing time: Thu 30 Jan 2025 14:50:06 +0000
ROA not before: Thu 30 Jan 2025 14:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:18c0::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:29c0::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:b0:d4:1f:b2:1b:de:bb:d3:53:06:c8:4f:72:45:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 30 14:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5995a8e6d78c5b7f3341d273f996cf31b8db2922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:c1:51:24:bf:2a:16:58:fe:e5:3b:0d:0d:
09:17:0b:91:15:e8:81:a9:1b:1e:6b:99:66:1d:de:
d3:1a:fd:e0:5a:07:0d:af:26:02:c5:52:6d:8b:18:
e3:50:92:c5:3c:7b:0b:68:31:85:a5:c8:5c:0a:09:
7c:7d:7f:cb:e4:71:7a:f2:84:37:b6:ad:6b:7c:02:
41:14:38:cd:69:a0:af:b5:ab:d4:69:b9:0b:48:fd:
18:3a:e8:00:dd:aa:1d:03:42:dc:4e:86:45:03:6e:
45:bc:56:03:18:9f:12:1f:d8:b5:02:12:c2:8a:c0:
7c:cd:d3:c9:fe:cc:0e:45:57:50:88:37:38:1d:44:
f8:86:a9:11:48:6c:c7:c4:eb:11:f0:d8:70:99:6f:
b0:ea:15:b0:fd:8b:4f:d7:66:48:1a:3b:f9:02:f0:
e0:b7:12:fc:25:ce:65:70:1a:b0:5f:a0:fb:f7:9e:
02:08:4a:be:3a:6f:4f:65:c0:64:d8:42:67:94:a7:
67:f6:6f:10:4b:a6:aa:19:f4:05:2d:56:2b:d6:b3:
bb:b7:ad:f3:d4:12:24:48:f1:76:49:1f:73:8a:1e:
65:69:96:a1:23:79:c5:44:0d:c2:61:4e:b2:58:32:
7c:28:d1:32:3c:af:45:fc:ef:92:98:d4:f1:4c:e0:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:A8:E6:D7:8C:5B:7F:33:41:D2:73:F9:96:CF:31:B8:DB:29:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WZWo5teMW38zQdJz-ZbPMbjbKSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:18c0::/29
2a0f:1fc0::/29
2a0f:29c0::/29
2a11:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
11:06:3a:ec:0b:c3:c5:82:81:f4:97:93:79:d5:4f:96:b6:e6:
87:b9:79:9b:34:96:f2:91:d4:6d:f9:f6:b5:76:7a:ba:dd:71:
81:58:9e:e2:74:47:81:66:b8:d5:8e:36:de:e3:b9:3c:db:96:
3e:1e:1e:1f:74:08:a6:78:b7:a4:a6:f5:9e:9f:75:b6:8f:60:
0c:ee:7d:b7:90:ca:83:cb:fb:6f:f9:dc:70:e3:04:19:f4:44:
b9:c2:5a:b3:2c:0d:ce:bc:19:1a:ca:e1:32:e7:eb:49:d4:1d:
5a:da:9a:4f:16:2f:a5:20:5c:d1:0e:f2:4e:48:85:88:6d:9c:
bb:0f:d6:2e:21:9a:70:85:94:b4:f8:e4:9f:32:f6:13:13:71:
91:66:d9:e3:9e:59:5b:5b:40:a8:b1:1f:bf:2d:55:72:e4:90:
67:dd:5f:35:87:e5:f5:59:89:45:e6:ed:7b:1f:37:16:62:78:
86:c9:5e:cd:e7:d1:be:07:e9:e8:ee:ec:7a:67:f5:11:66:13:
69:1a:b5:8e:4f:8e:c1:b4:80:d1:9f:2d:e9:c4:95:f5:ee:89:
87:7e:3d:8a:b5:54:c5:28:da:c5:7b:e8:1a:61:f0:7b:ae:94:
3a:fe:3c:1b:72:d6:16:d4:1f:54:1b:f8:98:03:7f:b9:94:78:
f9:19:98:9d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZS3sNQfshveu9NTBshPckVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTMwMTQ1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTk1YThlNmQ3OGM1YjdmMzM0MWQyNzNmOTk2Y2YzMWI4ZGIyOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR7BUSS/KhZY/uU7DQ0JFwuRFeiB
qRsea5lmHd7TGv3gWgcNryYCxVJtixjjUJLFPHsLaDGFpchcCgl8fX/L5HF68oQ3
tq1rfAJBFDjNaaCvtavUabkLSP0YOugA3aodA0LcToZFA25FvFYDGJ8SH9i1AhLC
isB8zdPJ/swORVdQiDc4HUT4hqkRSGzHxOsR8NhwmW+w6hWw/YtP12ZIGjv5AvDg
txL8Jc5lcBqwX6D7954CCEq+Om9PZcBk2EJnlKdn9m8QS6aqGfQFLVYr1rO7t63z
1BIkSPF2SR9zih5laZahI3nFRA3CYU6yWDJ8KNEyPK9F/O+SmNTxTOAkZQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFmVqObXjFt/M0HSc/mWzzG42ykiMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvV1pXbzV0ZU1XMzh6UWRKei1aYlBNYmpiS1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKg8YwAMF
AyoPH8ADBQMqDynAAwUDKhE/gDANBgkqhkiG9w0BAQsFAAOCAQEAEQY67AvDxYKB
9JeTedVPlrbmh7l5mzSW8pHUbfn2tXZ6ut1xgVie4nRHgWa41Y423uO5PNuWPh4e
H3QIpni3pKb1np91to9gDO59t5DKg8v7b/nccOMEGfREucJasywNzrwZGsrhMufr
SdQdWtqaTxYvpSBc0Q7yTkiFiG2cuw/WLiGacIWUtPjknzL2ExNxkWbZ455ZW1tA
qLEfvy1VcuSQZ91fNYfl9VmJRebtex83FmJ4hslezefRvgfp6O7semf1EWYTaRq1
jk+OwbSA0Z8t6cSV9e6Jh349irVUxSjaxXvoGmHwe66UOv48G3LWFtQfVBv4mAN/
uZR4+RmYnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:55 2025 by rpki-client