Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/_FNz_oG2zcFLeFpovQJ_R2vg-vc.roa
File: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (raw, json)
Hash identifier: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=
Subject key identifier: FC:53:73:FE:81:B6:CD:C1:4B:78:5A:68:BD:02:7F:47:6B:E0:FA:F7
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019425FC4CB4EE219DC80926BD7EC91E2706
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/_FNz_oG2zcFLeFpovQJ_R2vg-vc.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55532
IP address blocks: 2.58.104.0/24 maxlen: 24
2.58.105.0/24 maxlen: 24
2.58.106.0/24 maxlen: 24
2.58.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4c:b4:ee:21:9d:c8:09:26:bd:7e:c9:1e:27:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc5373fe81b6cdc14b785a68bd027f476be0faf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:12:e5:8a:cf:08:b4:e2:7e:c9:e4:ce:13:
48:16:2f:8e:1a:a9:52:39:6e:68:0f:f3:fe:94:03:
32:6f:34:dc:d7:fb:2e:4e:a5:88:33:67:63:c6:b8:
31:39:cc:e1:7f:ce:0b:c9:a8:c3:b9:79:b8:f9:57:
c1:dc:46:fc:20:ba:73:29:b1:24:5a:a2:3d:69:2e:
7e:1f:23:6c:6c:3c:2d:8a:b0:08:80:93:7b:f7:24:
86:62:d2:26:92:57:57:75:25:06:04:04:18:8d:7a:
cd:a3:a2:82:66:8a:d4:19:db:41:5d:fb:6a:1c:23:
fd:70:f6:f2:df:30:1f:5c:34:47:4d:10:85:1f:9a:
1d:43:54:76:0e:53:2e:c0:6b:15:93:3a:ca:e4:6a:
a8:5c:6f:0d:7d:9a:a3:7d:7c:8d:a1:0f:c6:de:8b:
0f:29:17:eb:56:90:ad:69:c1:92:6a:11:8c:23:79:
c3:ba:bd:08:c3:a4:03:7c:22:ac:30:82:c4:cc:eb:
07:6d:0e:e8:8c:ea:23:f1:ee:e3:2f:da:82:c1:ab:
d3:ee:01:6e:02:b0:1d:47:d2:7e:39:3e:75:ec:db:
f3:8d:51:14:7f:8b:fd:1a:6d:3b:cc:18:d0:cf:15:
9e:75:81:7b:fb:e6:18:45:6c:54:05:87:fd:f4:28:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:73:FE:81:B6:CD:C1:4B:78:5A:68:BD:02:7F:47:6B:E0:FA:F7
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/_FNz_oG2zcFLeFpovQJ_R2vg-vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
09:55:0f:4c:5e:8a:7a:8e:55:48:38:2d:a4:35:ce:a0:63:f4:
03:10:d8:f5:93:04:eb:1f:cc:a0:e8:3a:2e:27:f5:3d:e8:ff:
a1:85:45:02:00:c1:48:55:fa:7e:15:77:c6:0c:f2:b1:8e:18:
6c:3c:32:da:ea:0d:e4:7f:84:5f:a2:4b:9b:81:f6:33:6e:fd:
b7:fb:73:44:e4:1b:df:f9:54:13:47:05:20:e0:79:15:c9:92:
93:10:d0:bd:73:a7:ea:f7:ff:a0:c8:1b:99:98:0b:19:d1:17:
34:43:33:ad:0d:f8:c0:24:87:09:34:ea:f1:75:3f:a3:2e:64:
fb:39:ff:7a:c8:42:5f:64:f8:c0:f0:ff:a4:4b:e9:23:b8:27:
fd:a9:f9:4f:2f:33:03:04:b9:33:ab:e3:25:c3:be:e7:68:c2:
0c:d5:a7:4f:bf:32:59:40:9f:ab:d7:ac:b8:ee:53:63:48:91:
ef:09:77:8e:4b:85:f6:6d:71:90:77:37:53:31:41:9a:a0:9d:
7f:eb:12:7d:b0:44:34:47:f7:23:91:a7:ae:b4:07:51:e4:78:
da:e2:fe:41:df:aa:02:04:4b:34:99:d4:6b:3d:de:2d:c1:81:
b9:cb:3c:b4:e8:c9:48:1c:dd:90:d3:4e:c9:7e:b2:e0:f5:59:
5a:33:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:09 2025 by rpki-client