Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/7auTlPRETRxcXk782_NChYijzmw.roa
File: 7auTlPRETRxcXk782_NChYijzmw.roa (raw, json)
Hash identifier: F+8y6oP0A0jc2woNB3astWD44+RmkWJPxqBkh/5OKlY=
Subject key identifier: ED:AB:93:94:F4:44:4D:1C:5C:5E:4E:FC:DB:F3:42:85:88:A3:CE:6C
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019598AB7B4A3515E0F752F0D73DEBE83561
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/7auTlPRETRxcXk782_NChYijzmw.roa
Signing time: Sat 15 Mar 2025 07:18:49 +0000
ROA not before: Sat 15 Mar 2025 07:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215420
IP address blocks: 2a10:a9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:ab:7b:4a:35:15:e0:f7:52:f0:d7:3d:eb:e8:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 15 07:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edab9394f4444d1c5c5e4efcdbf3428588a3ce6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:fb:7c:21:14:f1:7e:fb:d9:29:9c:5d:fb:
71:04:1e:ee:eb:a2:17:7c:b2:7b:4e:eb:f6:3e:1d:
9a:88:08:58:75:8f:09:fe:fe:e6:d3:aa:bb:58:4a:
09:a1:43:26:59:70:9e:38:00:fd:77:1c:28:f8:02:
5c:f8:2e:7c:db:50:54:0d:94:95:d5:8e:af:90:9a:
02:dd:3e:c7:4c:94:d0:c2:bc:9c:c1:b6:fb:f2:a8:
3a:29:f0:76:3f:49:51:4d:b1:2f:20:3b:9f:65:2e:
cd:a6:8f:2e:5d:90:ad:57:e9:1a:90:5f:5c:01:1c:
b4:b0:f7:a9:64:52:30:a4:6a:5a:28:42:80:95:92:
91:a2:a3:41:c8:df:3a:79:fe:67:48:bb:4f:94:2b:
64:85:78:0a:fb:2f:cd:30:5e:0a:f9:e2:dd:29:59:
fb:ac:6a:b0:94:59:7b:9d:07:2d:15:97:b6:3d:1a:
0e:a3:95:c5:ea:f6:a1:2b:b1:19:a7:91:e1:e6:82:
9e:d0:e4:30:21:34:80:26:61:af:df:0c:ab:f2:0d:
43:42:8c:9f:54:a6:04:8b:c9:eb:76:c8:90:d7:38:
d5:ec:e2:ce:1e:75:7c:b3:64:76:49:dd:5f:82:ab:
7c:53:76:e2:9e:46:67:da:ae:89:1e:5a:c7:16:1f:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:93:94:F4:44:4D:1C:5C:5E:4E:FC:DB:F3:42:85:88:A3:CE:6C
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/7auTlPRETRxcXk782_NChYijzmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
c9:95:3a:03:ce:fa:30:73:69:df:3d:c1:11:2f:f7:32:92:c0:
0d:6a:9f:d5:5e:ff:ba:14:06:a3:d7:4c:94:96:4c:1d:d7:e9:
43:1a:e4:bb:e9:20:32:b5:06:26:81:d1:2d:d8:be:2d:71:56:
34:9c:b7:9c:16:e6:2f:92:29:b4:ca:1f:9f:d8:19:10:93:02:
b5:b1:75:ac:52:3a:de:9f:be:1e:87:22:fb:4b:21:bd:ef:8b:
ca:b2:1f:11:51:9a:54:5d:20:98:c1:eb:df:59:10:78:c8:af:
9f:90:97:17:0b:37:02:c0:67:33:0a:3e:5c:80:49:3e:be:4d:
21:b6:c8:ea:a4:21:24:1e:54:cf:0e:30:02:25:2c:08:27:11:
72:69:9a:6b:65:f8:61:62:46:9e:7e:35:bf:7a:60:9b:dd:0f:
bb:d5:27:f8:05:4f:4b:da:a6:89:01:95:3e:6a:98:83:4b:d3:
84:c1:66:d2:17:50:16:e5:90:1c:da:15:4c:9b:28:ef:93:fc:
a7:43:30:0f:09:fa:de:c0:d1:9d:8d:bf:1b:41:a3:a7:a6:47:
1c:40:6c:e2:f2:a3:93:db:db:e5:0a:fd:00:28:b0:53:89:1e:
0f:35:e1:c9:3b:67:15:00:cd:9e:7f:f4:9a:9f:42:d6:70:bd:
67:48:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net