Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9fsRc_BMbpYOg3HPrunqRbDandU.roa
File: 9fsRc_BMbpYOg3HPrunqRbDandU.roa (raw, json)
Hash identifier: hkwBhq+hT9NHPOwlCpFk+QSmRgol1ZMkbmDm8IdLgcI=
Subject key identifier: F5:FB:11:73:F0:4C:6E:96:0E:83:71:CF:AE:E9:EA:45:B0:DA:9D:D5
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019624F999556EF11D761208627008BF301A
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9fsRc_BMbpYOg3HPrunqRbDandU.roa
Signing time: Fri 11 Apr 2025 13:10:59 +0000
ROA not before: Fri 11 Apr 2025 13:10:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:8440::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a13:5040::/29 maxlen: 29
2a13:cdc0::/29 maxlen: 29
2a13:d140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:f9:99:55:6e:f1:1d:76:12:08:62:70:08:bf:30:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 11 13:10:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fb1173f04c6e960e8371cfaee9ea45b0da9dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:3d:1d:e2:4d:d2:e5:14:19:71:83:2a:44:
3a:53:89:84:81:dc:cc:8c:a4:3e:87:7c:1a:75:e0:
5e:f9:18:47:bb:95:02:6a:84:9c:51:7c:12:29:92:
e6:d5:39:15:83:3f:e1:19:e0:cb:36:82:0b:35:b0:
9d:98:58:a0:60:5e:8c:22:51:cf:6a:75:77:13:78:
07:b0:37:89:22:af:a1:24:22:c5:78:31:95:26:57:
a9:a4:02:1c:9e:52:ce:da:9d:54:c8:fa:7e:e0:cf:
36:31:36:d3:43:c3:06:cc:af:ed:b5:17:9a:b2:48:
85:33:1d:29:0c:0e:63:c1:57:50:0f:b1:cf:43:d4:
69:db:11:36:5e:cb:b5:db:5b:e9:c2:06:45:2a:0b:
b4:fc:04:20:aa:ac:5e:b9:13:e8:56:bd:58:e4:d4:
84:66:57:37:92:37:cd:cd:36:46:76:72:8a:81:2b:
67:76:fa:2f:eb:62:dc:86:8d:92:1e:f1:72:32:37:
21:f9:55:f8:36:5b:4e:0b:a7:da:d3:c0:27:47:d1:
eb:57:5b:27:ef:fc:98:57:e2:2f:6f:1d:84:f7:0a:
57:38:dc:35:6f:60:ba:c5:2a:59:13:19:56:55:46:
96:5d:87:c2:50:44:fd:56:77:88:3d:2f:d3:fa:44:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:11:73:F0:4C:6E:96:0E:83:71:CF:AE:E9:EA:45:B0:DA:9D:D5
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9fsRc_BMbpYOg3HPrunqRbDandU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8440::/29
2a0b:b480::/29
2a13:5040::/29
2a13:cdc0::/29
2a13:d140::/29
Signature Algorithm: sha256WithRSAEncryption
84:59:f9:32:76:35:ba:f7:7a:50:bc:8e:51:a8:ac:64:b6:80:
b0:0f:73:7c:2c:97:c0:45:b3:81:d5:56:42:ca:58:87:ce:7b:
4d:13:d1:93:c3:4f:cb:49:91:c2:a0:53:8a:94:22:a8:54:3c:
61:31:b5:55:80:b6:aa:86:ea:ba:77:c5:16:a3:1e:d8:5d:f9:
9b:21:a8:b7:7f:09:31:14:f3:be:eb:5e:13:3a:16:ca:23:8f:
84:93:1b:42:63:7b:04:4e:58:38:cb:c9:76:d2:d1:b1:90:04:
95:c3:25:24:13:7e:5e:17:78:ed:9d:f9:2a:f0:60:1b:a7:2b:
c8:dc:c1:a9:d9:00:16:70:f9:02:33:55:d6:f0:29:e5:f0:c9:
b1:b9:49:f6:b1:6a:b9:26:e8:88:94:d6:b9:05:ca:4c:ac:da:
58:bd:3e:5e:90:23:ba:f0:ac:e6:e2:2c:ea:3f:b2:3a:07:7a:
bf:f9:13:f1:f0:8f:42:93:f9:60:81:d2:f9:96:16:0a:79:94:
65:e2:8e:c2:30:85:ea:0d:ae:77:e2:11:51:78:c4:d2:84:a3:
94:40:61:90:54:c4:8b:d3:e6:ee:1c:ec:34:d0:c9:c4:37:7d:
c1:e3:67:1b:17:0f:68:6a:9d:7c:5b:e3:eb:e8:30:53:61:cc:
bc:a8:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net