Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/O49MqYveFwFxlkpzE3acuCCtZr0.roa
File: O49MqYveFwFxlkpzE3acuCCtZr0.roa (raw, json)
Hash identifier: YUu3sNGPmNlXjpfrsmo0LHZail+U9EXlZogDbonTJRY=
Subject key identifier: 3B:8F:4C:A9:8B:DE:17:01:71:96:4A:73:13:76:9C:B8:20:AD:66:BD
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 0195A4CCF3A0807BBE79AE2C3E4E8E87229A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/O49MqYveFwFxlkpzE3acuCCtZr0.roa
Signing time: Mon 17 Mar 2025 15:50:49 +0000
ROA not before: Mon 17 Mar 2025 15:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 2a14:c380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:cc:f3:a0:80:7b:be:79:ae:2c:3e:4e:8e:87:22:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Mar 17 15:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b8f4ca98bde170171964a7313769cb820ad66bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:81:1d:e9:32:bd:4d:78:6f:89:2e:50:ea:
bb:43:9c:25:0b:b5:c7:b1:00:d8:28:e2:4e:ec:eb:
6c:5e:81:16:09:ac:c9:17:f1:7b:8e:fb:43:d4:6c:
eb:85:b6:07:7c:be:9c:23:fe:3e:c8:b8:bf:1f:23:
23:35:ab:c2:ea:6a:b9:6d:06:a8:94:47:12:fa:8d:
aa:a5:4f:fe:cc:73:4f:bc:8b:ae:cc:a6:7a:57:6a:
a7:00:e7:32:03:e4:18:36:64:06:b7:66:f7:5e:25:
c3:51:06:4d:74:ed:05:b8:12:c7:d5:8e:c5:0b:53:
0e:9d:20:14:a6:b1:84:ad:91:88:56:45:c1:70:53:
97:36:bd:90:41:51:3e:57:ad:38:08:ae:7c:48:92:
b8:6f:55:6a:29:2c:b4:3f:3f:68:fb:fa:db:bd:b0:
77:75:03:bf:52:1c:4a:d5:4f:b7:bb:69:c7:72:b5:
0f:cb:5d:b4:3c:15:79:8d:94:49:0e:7f:a2:af:96:
6b:d2:d4:a3:74:98:f1:e5:e3:bd:67:48:59:71:dc:
cf:9e:69:b8:0e:75:6b:30:f4:97:63:6a:db:a5:56:
a6:21:f9:a0:37:ab:18:fc:03:b6:d1:49:11:6c:98:
46:8e:f8:25:e8:54:85:38:c7:5e:10:c4:fb:99:ee:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:4C:A9:8B:DE:17:01:71:96:4A:73:13:76:9C:B8:20:AD:66:BD
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/O49MqYveFwFxlkpzE3acuCCtZr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380::/29
Signature Algorithm: sha256WithRSAEncryption
15:c4:37:09:5a:6a:7e:b0:f3:31:67:86:84:69:fb:b0:09:b0:
67:84:9f:9d:9b:10:39:44:ef:a4:99:03:fc:3f:27:62:9c:08:
af:1c:c3:f5:d0:52:e8:56:5a:71:1c:f8:b5:f2:b3:71:29:a4:
9e:ab:02:8c:b0:7a:87:25:5b:91:b9:fd:91:e9:15:ec:0f:4f:
3b:6f:90:14:43:b8:ac:e8:cf:41:78:94:a7:43:54:c0:24:8b:
82:9f:e1:c9:b1:cc:2a:b7:67:ad:a1:7c:90:b1:64:ae:58:1e:
11:ef:05:b9:02:59:17:e2:68:07:47:e4:84:5c:05:4f:00:82:
40:68:7d:0c:d7:1f:d3:bc:6e:16:81:2f:07:53:7d:16:ad:be:
2a:bc:1c:0c:d2:54:37:84:60:1c:29:a9:6d:7e:35:13:4a:0a:
a3:77:b2:d2:3e:6a:9e:3f:a0:c5:da:56:79:31:71:46:3b:7e:
3e:96:22:89:d9:6b:a4:e8:48:26:9d:a4:6e:68:6e:db:57:89:
af:50:e2:20:3f:91:71:4e:75:29:ae:76:4b:bb:f4:ed:36:1c:
89:fd:8a:8e:1b:b2:14:67:1b:29:e7:b2:97:02:44:29:0d:ef:
7c:d5:aa:bc:b6:6b:2d:ae:bf:ed:bc:70:94:94:2d:e9:e5:1b:
f7:29:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:47 2025 by rpki-client