Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/RKoPonX_BOcHd1xDFHURgtGXtu8.roa
File: RKoPonX_BOcHd1xDFHURgtGXtu8.roa (raw, json)
Hash identifier: y0VCzPGRizqq7mHMYvwsL9x+9rIkdED1zzjjzSDmx2c=
Subject key identifier: 44:AA:0F:A2:75:FF:04:E7:07:77:5C:43:14:75:11:82:D1:97:B6:EF
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 0194178D888C21DF0EB065E38FD94640A953
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/RKoPonX_BOcHd1xDFHURgtGXtu8.roa
Signing time: Mon 30 Dec 2024 12:32:19 +0000
ROA not before: Mon 30 Dec 2024 12:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 2.58.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:8d:88:8c:21:df:0e:b0:65:e3:8f:d9:46:40:a9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Dec 30 12:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44aa0fa275ff04e707775c4314751182d197b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:bf:5d:7d:43:b0:1a:5d:cb:cc:ab:5c:45:
92:ed:1d:6c:81:07:70:f0:03:3c:0b:be:99:7b:3f:
f3:05:3c:5a:41:9a:63:15:71:a1:d6:03:52:40:fe:
f3:cd:d0:f0:43:f1:37:90:6e:c6:ad:e2:4f:f5:3e:
9a:27:61:92:a1:fd:4f:95:b3:08:32:21:bc:fa:79:
8b:6f:cd:be:f6:5e:68:ae:a8:71:6e:b8:33:cc:f3:
2a:5c:b2:cb:8a:e4:68:38:3f:64:ec:58:46:55:ea:
f6:b0:e8:9a:d5:06:17:b1:47:ab:ca:8a:2c:9c:49:
09:47:4e:80:15:b4:c8:2c:9d:ea:82:44:5b:38:8b:
ea:e8:dd:40:68:b5:2e:86:0e:8c:41:87:77:56:c1:
be:2c:a0:ad:d4:a9:35:af:1a:9d:63:3a:a1:ae:7d:
2e:b1:cb:7e:5e:d7:61:8f:9b:a0:71:16:ce:8a:d2:
1e:bf:64:a2:ae:bc:7f:10:b0:09:2d:87:2a:0e:71:
f4:9b:b6:1b:d5:ed:89:8e:c0:f4:36:86:77:02:44:
81:73:a2:ae:b8:b9:62:b7:a7:0d:2e:59:ed:d0:7c:
f1:79:d8:1e:b1:71:9c:96:7e:7e:8e:92:0f:54:d5:
22:b0:6d:2e:fa:8e:40:b8:84:0b:7e:8d:f1:77:91:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:0F:A2:75:FF:04:E7:07:77:5C:43:14:75:11:82:D1:97:B6:EF
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/RKoPonX_BOcHd1xDFHURgtGXtu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.115.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ef:92:43:72:12:53:32:eb:4e:b1:9e:05:28:08:c4:03:3a:
37:32:de:ec:92:48:6d:d1:1f:df:69:5b:83:3c:da:5d:32:6d:
1f:94:41:26:9b:63:23:9c:e0:eb:6d:e6:58:47:da:30:d1:e8:
45:36:99:a1:54:29:5c:9c:67:c3:01:2f:de:bf:bc:b8:44:47:
08:3d:6f:2b:8d:65:99:4d:3c:d7:ff:73:24:7a:ba:b2:c2:d7:
6c:5b:fd:40:3a:30:36:4a:24:43:f1:2f:86:aa:5e:25:cd:e1:
58:73:2f:d9:05:3b:c0:a8:91:35:0b:e2:a3:08:0c:0c:e7:e4:
72:09:a9:e7:d1:99:a4:46:d1:6d:ab:10:a3:d8:d8:a1:1e:89:
04:ec:90:23:73:95:05:52:64:de:a4:e8:6c:10:da:b0:de:22:
ab:69:13:6b:3f:51:8d:a6:36:d1:08:e9:06:4d:18:9d:dc:cd:
11:d8:98:57:90:1a:c3:f3:ff:84:0a:84:79:39:8d:5c:c4:2d:
a3:2e:ad:7b:dc:60:fc:ed:7f:ff:74:b4:3e:44:b4:5a:a1:65:
74:c0:51:a1:41:08:34:99:de:46:bb:5d:91:c4:ca:f4:86:bf:
33:26:a7:16:dc:f9:43:d4:a8:83:6c:24:9b:de:7e:88:b0:61:
48:5c:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:54 2025 by rpki-client