Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/FjZGrMmLxbb9ytGgYofXj5vEujM.roa
File: FjZGrMmLxbb9ytGgYofXj5vEujM.roa (raw, json)
Hash identifier: kBfv+5FmyqPPeNOTTvyEDc9IM888mkH1dlLnLqeTMNA=
Subject key identifier: 16:36:46:AC:C9:8B:C5:B6:FD:CA:D1:A0:62:87:D7:8F:9B:C4:BA:33
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01951DE7742F459602F621800D2FF52E7EC0
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/FjZGrMmLxbb9ytGgYofXj5vEujM.roa
Signing time: Wed 19 Feb 2025 11:11:02 +0000
ROA not before: Wed 19 Feb 2025 11:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:63c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:e7:74:2f:45:96:02:f6:21:80:0d:2f:f5:2e:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Feb 19 11:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=163646acc98bc5b6fdcad1a06287d78f9bc4ba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:d7:fb:56:e4:37:fb:fd:f4:22:7f:28:bf:
d9:50:1d:41:aa:b2:07:20:a6:47:24:9c:ce:fe:bc:
41:fd:bc:ad:b3:56:f5:ca:07:8a:17:35:a4:e0:92:
2e:b2:6b:a6:63:a8:c9:8d:35:e4:02:90:95:bf:fb:
37:7d:f4:7e:7c:ed:68:9e:65:f6:36:cd:e7:27:37:
b7:54:e2:a0:0c:ae:97:a3:da:ea:2a:74:51:40:11:
6e:88:9a:34:4c:96:57:e9:59:ef:69:f6:92:2d:d0:
7a:21:d7:04:0d:44:d9:86:a7:36:46:1c:4f:b9:df:
49:f3:50:94:3f:89:f3:61:78:16:c1:0d:37:ab:37:
81:15:de:ed:78:59:1a:7f:04:86:d6:ca:d8:23:ad:
be:91:39:93:90:34:f4:5a:0a:7a:b0:45:24:00:f2:
30:bf:b4:c8:5c:bf:99:8f:4c:7f:6d:30:7c:72:14:
e4:39:7c:07:e7:31:63:79:bb:3e:e3:66:c6:e4:7d:
6b:a8:cd:7e:0a:0c:b0:81:9a:62:88:74:c6:67:16:
46:49:b6:ec:1e:b1:07:fa:05:17:0f:ee:ed:2e:7c:
19:28:2d:a7:43:98:d4:49:3d:81:02:55:e1:39:9c:
39:c4:35:08:e8:e1:55:96:04:07:4a:5f:ef:4e:63:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:46:AC:C9:8B:C5:B6:FD:CA:D1:A0:62:87:D7:8F:9B:C4:BA:33
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/FjZGrMmLxbb9ytGgYofXj5vEujM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:c9:35:8e:c6:fd:4b:44:08:9d:e5:a3:33:e8:d6:72:e0:49:
a2:0b:43:6e:a1:54:eb:f9:11:48:87:0f:0e:5c:a1:0e:05:0f:
3b:bd:e4:d8:84:b9:38:67:84:0c:80:44:8e:3c:35:dd:ab:99:
ec:9a:17:c2:a9:c8:37:0c:6f:d6:df:44:3f:14:e2:ac:ed:3d:
06:62:c7:82:00:a4:69:f3:33:1a:64:0d:11:0c:ed:77:5a:5c:
70:12:1e:0f:0d:87:93:4e:bc:b1:aa:a3:2a:0b:12:bc:da:3a:
08:15:b7:e4:c0:25:a2:e5:7e:46:9e:44:68:58:8d:ec:75:40:
22:bc:ac:e0:5d:6a:4d:02:b4:3a:aa:17:8b:6d:94:49:bb:64:
f6:60:42:ab:0e:f3:a5:4b:84:20:9f:e6:f6:e4:18:5e:c9:6f:
25:36:a6:79:98:75:1c:27:dc:48:cc:d8:ed:bf:fd:0c:ad:6e:
da:e4:c9:3d:31:80:74:2c:9e:6b:54:84:c5:c8:5d:05:5a:01:
c2:2a:59:f8:13:4d:27:04:43:4c:fd:76:fb:c9:93:bc:9b:85:
65:ad:c9:c6:a4:62:0b:55:95:e4:38:da:78:9c:64:44:29:3e:
44:be:52:0c:6c:60:c3:31:09:0a:04:41:6d:45:5d:7b:c2:a8:
fc:bf:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:31 2025 by rpki-client