Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa
File: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (raw, json)
Hash identifier: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=
Subject key identifier: F9:70:3A:3B:28:74:9F:B0:E5:06:64:5C:A9:AA:B9:24:FA:1B:44:14
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0195C977B8534099ADD9551FAB686780887C
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa
Signing time: Mon 24 Mar 2025 18:43:41 +0000
ROA not before: Mon 24 Mar 2025 18:43:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203779
IP address blocks: 2.58.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:77:b8:53:40:99:ad:d9:55:1f:ab:68:67:80:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Mar 24 18:43:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9703a3b28749fb0e506645ca9aab924fa1b4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:9b:a1:f5:d6:06:d8:36:d5:75:cd:c2:d5:
34:6b:54:7b:a6:02:01:d1:50:43:c7:0a:4a:fc:1f:
36:a4:b2:2f:6b:97:cc:b5:7b:c8:71:3a:0f:15:67:
56:11:af:a1:f5:39:c9:75:31:5f:a4:7f:9e:02:82:
a3:95:52:b3:27:c0:ce:f3:8d:77:fb:06:ea:25:15:
6a:ec:8a:c5:5d:4e:cb:eb:14:0b:e4:7c:0f:68:56:
7c:69:f0:c0:2c:dc:9c:be:c5:39:f0:c5:55:a1:93:
0e:fc:98:5a:95:05:54:91:1c:2e:5e:9a:08:35:02:
c8:c6:78:84:8b:9d:22:dd:a3:f0:df:00:f5:c6:78:
94:1c:9d:5a:08:9c:8a:f4:46:c6:fc:a2:e4:80:86:
b7:ef:25:b8:76:9f:23:6c:79:70:d3:24:ee:65:3a:
02:57:83:c1:66:43:e8:78:1a:68:5d:2b:5e:57:d1:
b3:06:bc:2d:5a:c5:28:13:d9:14:b6:82:0c:b6:ef:
28:5d:d3:70:35:4d:3a:8c:e3:7c:1f:4f:83:bd:a1:
ab:86:39:cf:05:82:f3:90:31:03:6e:c0:28:bb:d0:
d2:a6:b9:04:44:0d:37:cd:a0:29:38:c3:c1:7e:73:
0a:46:de:ac:f8:67:2d:ed:5c:d6:07:f1:b4:7f:c1:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:3A:3B:28:74:9F:B0:E5:06:64:5C:A9:AA:B9:24:FA:1B:44:14
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.24.0/23
Signature Algorithm: sha256WithRSAEncryption
68:5b:34:6c:0f:5a:23:e3:78:00:c6:ef:46:3f:bc:3e:f4:61:
20:79:19:7f:d9:a8:ec:f7:ba:9c:39:5c:6f:c7:9e:79:06:e4:
50:d0:20:69:97:31:43:41:e1:b5:6b:fc:11:3e:c8:a9:de:7f:
dc:08:6e:68:e8:3f:3f:30:f0:d1:89:bc:2b:45:c6:6e:9b:5b:
b9:7b:92:37:7a:a2:5b:c6:61:df:64:37:12:25:4f:29:f7:e8:
e6:36:c2:41:5c:95:2c:9b:e1:73:a8:f1:b1:e6:72:d6:eb:0c:
97:9a:2d:d7:30:b8:cd:ed:e5:21:84:da:16:a1:bf:2e:94:39:
ac:4b:fa:b4:1c:76:51:27:3f:2c:da:f1:4b:58:59:c1:96:48:
d5:ef:ae:54:e0:82:e4:4e:8a:bc:83:1a:cf:d3:ef:81:61:1e:
93:86:1b:a1:ed:da:12:79:2b:b4:00:fd:ac:01:6e:fc:77:27:
17:7b:bf:4f:6d:8f:10:84:08:e6:da:ad:a7:66:fa:34:0e:cb:
d9:58:2d:51:ef:f6:d8:24:ce:37:2e:ae:6b:2f:dd:20:5d:df:
65:78:d2:a8:a0:08:14:50:49:53:b1:b6:55:36:41:56:dd:ad:
08:84:ed:c2:6b:ed:12:a4:6c:43:a8:79:a7:57:b8:75:28:98:
00:7e:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net