Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/C5VrgkpR7BHkGYBxJu0N38DecAw.roa
File: C5VrgkpR7BHkGYBxJu0N38DecAw.roa (raw, json)
Hash identifier: tn3iDPLbuK+YDsaCHYiE4d6zImOOupgmoVvqbn+APiI=
Subject key identifier: 0B:95:6B:82:4A:51:EC:11:E4:19:80:71:26:ED:0D:DF:C0:DE:70:0C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D6123ECDE454B92AACEE2DEDA53696
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/C5VrgkpR7BHkGYBxJu0N38DecAw.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39107
IP address blocks: 86.104.125.0/24 maxlen: 24
2001:7f8:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:12:3e:cd:e4:54:b9:2a:ac:ee:2d:ed:a5:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b956b824a51ec11e419807126ed0ddfc0de700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:71:19:dd:66:cc:39:98:80:a6:9d:b3:e6:
77:29:f4:22:a9:91:b9:7c:13:76:18:d3:a6:99:8a:
11:f6:4d:a4:7e:af:c7:9e:d1:98:fc:d7:8c:70:f3:
57:f8:d1:13:16:59:93:0d:ff:21:dc:92:5c:66:aa:
48:dc:61:4b:da:09:dd:e4:ed:10:39:57:c6:f7:45:
17:54:c3:9c:9c:b6:38:8e:85:33:ae:c7:25:ab:0a:
e1:79:ca:2d:48:a0:13:d3:6b:f7:bc:df:69:26:c2:
7c:bb:93:20:11:ce:1f:62:c2:60:0b:3b:79:21:ad:
d6:b3:60:a4:27:35:2a:58:b3:93:01:65:3f:be:c2:
32:f9:05:e7:3e:72:9e:0e:c5:3b:6a:22:f4:31:85:
00:54:c3:83:e8:3a:40:7d:4e:86:58:f1:2e:12:10:
0e:d1:dd:67:71:e2:df:e1:bd:f0:67:24:60:33:6d:
81:26:ca:e7:54:21:b0:e2:4a:a1:72:60:ff:6e:3f:
b2:f6:43:9d:c7:54:42:17:8c:09:a4:b2:00:85:18:
f0:df:74:a7:bd:19:ee:95:72:fd:0c:2f:97:eb:09:
db:f3:c8:aa:5b:e7:90:a9:02:fa:08:04:25:4d:d0:
58:7b:ae:cc:39:dc:48:5a:ae:de:62:dd:51:d9:03:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:6B:82:4A:51:EC:11:E4:19:80:71:26:ED:0D:DF:C0:DE:70:0C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/C5VrgkpR7BHkGYBxJu0N38DecAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.125.0/24
IPv6:
2001:7f8:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:1f:94:b1:d4:e0:3f:d8:0b:64:2b:cf:f8:f0:87:6b:05:55:
10:1c:28:21:52:3f:14:f4:55:6f:ff:43:8e:2a:0c:2e:36:93:
0b:a0:ef:02:fe:24:84:4d:19:4d:d9:c0:24:ef:01:35:1b:91:
f7:a4:5f:36:c8:59:22:66:05:ba:42:75:a5:40:03:0e:a6:f2:
fb:ce:a7:b4:2b:0a:09:18:f9:30:98:b0:95:3e:11:b7:27:cd:
e2:4a:20:23:ef:f9:b4:25:08:55:5e:d5:36:ef:07:49:ec:36:
29:28:f6:d9:20:b6:86:5f:57:20:a7:c9:61:1d:4d:ef:b2:81:
b9:13:eb:c8:66:af:5c:3f:85:c2:19:a7:5b:22:8b:42:64:a4:
26:86:d7:d5:9c:46:b4:14:2d:82:8e:fd:72:f4:2f:33:16:2c:
56:f6:f1:b3:1e:0e:30:8d:e7:cf:3a:63:44:d5:80:27:4f:ef:
8a:fa:d9:62:33:aa:aa:4b:4e:3f:84:bf:c5:8f:0b:2e:6e:5d:
99:8a:9d:d5:c7:5f:7a:5b:92:3c:ad:86:0f:29:a0:78:65:23:
09:cd:0d:ff:bc:85:89:3a:92:d8:5e:71:8c:2e:6d:a3:1b:ed:
52:5b:17:74:ca:e8:9e:4f:38:b1:9d:b9:f5:75:bf:b8:6c:ec:
72:86:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:47:00 2025 by rpki-client