Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/_67lsUignKt8Nnk8BSoRjTdfgFs.roa
File: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (raw, json)
Hash identifier: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=
Subject key identifier: FF:AE:E5:B1:48:A0:9C:AB:7C:36:79:3C:05:2A:11:8D:37:5F:80:5B
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 0194221F84392263A41CB70B172BBB99D9B6
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/_67lsUignKt8Nnk8BSoRjTdfgFs.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2.58.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:39:22:63:a4:1c:b7:0b:17:2b:bb:99:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffaee5b148a09cab7c36793c052a118d375f805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:18:a1:17:99:16:21:81:b9:b2:60:65:ac:
8b:45:90:90:ba:73:89:39:0d:d3:36:72:e1:67:bf:
80:c1:31:c9:81:ad:3c:4d:92:49:c3:ed:38:1e:77:
04:79:10:57:95:e2:bf:33:b2:fd:fe:3c:c6:1b:ed:
48:95:fe:8e:9d:1f:94:bd:ff:12:37:31:eb:21:a4:
19:4e:77:fe:b3:3b:eb:9a:8b:d7:40:65:5d:b9:d0:
53:65:1a:2a:ed:4b:93:2f:24:c1:0d:a2:cf:1b:f0:
49:8d:cc:02:e5:62:e7:95:99:78:29:f7:20:f8:f1:
4b:06:76:ba:a5:51:f0:b2:34:32:97:03:03:d3:83:
95:4e:ce:1c:0b:e9:fb:c4:1a:c2:6c:47:a0:9e:3c:
3d:19:6f:7a:66:8b:3e:d7:17:a9:4c:42:9d:ae:f9:
12:27:09:d9:ef:b6:9a:67:3d:0d:39:d3:77:91:79:
03:37:ae:11:be:83:6d:1f:73:5d:a7:42:3d:0c:09:
da:1c:91:a7:be:a0:43:7d:8a:91:dc:aa:60:5b:6d:
93:de:62:5d:55:e6:91:f6:23:01:2b:84:56:8a:64:
9d:19:10:17:a9:c3:9f:15:1a:e7:d5:7e:ef:07:9a:
18:aa:9b:19:60:a2:78:ec:d0:c4:87:65:72:e6:45:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:E5:B1:48:A0:9C:AB:7C:36:79:3C:05:2A:11:8D:37:5F:80:5B
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/_67lsUignKt8Nnk8BSoRjTdfgFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.103.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c0:9f:4f:ef:e9:d3:4e:78:a2:84:c8:c7:27:b5:ed:e4:31:
15:6e:e9:c3:eb:81:77:18:c2:5e:a8:d7:eb:c7:a1:49:58:ef:
93:69:9e:54:55:6c:8e:74:2c:b3:2f:fe:2e:41:41:1b:ae:a4:
d5:52:6c:69:7d:f9:08:90:03:96:76:20:78:63:c9:97:70:a0:
4f:32:98:f2:42:61:0b:01:78:01:a4:38:af:42:b1:cc:a7:b7:
30:1b:c3:eb:05:c2:0b:b0:4f:5b:c8:f6:ac:cc:08:f3:10:8a:
da:64:56:0c:44:a3:74:9b:d0:a7:63:5c:4a:13:8a:b3:57:b8:
9e:cd:24:81:6f:3d:67:4f:d5:9f:c4:6a:2e:4c:0a:5e:92:ba:
ff:69:50:ef:25:9e:c0:66:58:42:60:2d:d7:7d:36:ae:f3:2c:
64:f4:2e:38:c5:62:58:22:40:3f:65:01:cd:a3:c0:ca:15:d1:
0f:57:23:b4:b0:0c:fd:55:82:16:08:e9:30:75:4c:ef:3f:d5:
60:89:cb:71:64:94:48:7b:0c:69:a5:2e:59:71:d0:0b:04:eb:
39:f1:a5:93:fa:1e:bc:d4:4a:c2:2b:2d:da:2e:88:40:66:35:
d2:1b:c4:a2:74:23:7b:49:21:cb:fe:84:f3:dc:02:7b:5e:bf:
b6:e8:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:06 2025 by rpki-client