Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/NNC7tJaGBVx3syUkmDF30itCW_g.roa
File: NNC7tJaGBVx3syUkmDF30itCW_g.roa (raw, json)
Hash identifier: HivK2q7Gci8gSQAradZW2iONMhmJm8FdFYX9H1HYy4M=
Subject key identifier: 34:D0:BB:B4:96:86:05:5C:77:B3:25:24:98:31:77:D2:2B:42:5B:F8
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195106EA966A661611C4C2B622E29B25DE6
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/NNC7tJaGBVx3syUkmDF30itCW_g.roa
Signing time: Sun 16 Feb 2025 20:24:02 +0000
ROA not before: Sun 16 Feb 2025 20:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7203
IP address blocks: 2a10:7ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:6e:a9:66:a6:61:61:1c:4c:2b:62:2e:29:b2:5d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Feb 16 20:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34d0bbb49686055c77b32524983177d22b425bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:b9:4e:b2:10:3b:c2:f6:48:53:1f:67:2c:
8c:d7:26:0e:77:32:cc:32:66:aa:14:31:7d:66:e5:
44:aa:6f:3a:07:9b:96:e7:f2:29:2c:65:9b:79:7c:
0b:65:13:de:00:d5:51:93:80:44:9a:c4:e6:3a:c2:
37:8e:69:f0:a9:b0:26:01:6a:d4:a9:a6:b7:45:45:
3e:64:59:49:7c:a8:20:0b:c2:ef:9e:3d:f7:ac:35:
b6:bc:ec:57:7f:0e:4f:63:a8:42:7a:f5:e4:e4:d6:
59:08:30:6d:c1:c3:11:c5:fc:c2:0f:90:38:02:a9:
6c:e0:ba:f7:a5:16:9f:73:09:7b:0f:ad:e2:33:67:
e6:04:01:b1:14:b7:c8:3f:02:c6:ae:c6:ed:29:c1:
af:fd:0c:ee:d9:78:a4:ea:16:82:0e:dd:d9:c3:05:
b9:46:8a:30:0d:b4:53:c0:87:3c:36:a8:0c:9f:7d:
9c:69:3f:7c:d2:01:b2:5f:aa:17:59:7f:ea:56:fd:
6f:de:f6:94:1f:f0:5d:83:bc:5a:5b:2d:4a:2a:18:
d6:bb:4b:8c:26:cf:2d:fd:fe:9f:8c:be:cb:64:e3:
58:6b:ad:1f:c6:21:0a:40:ef:42:ef:fc:55:a8:43:
e3:92:6d:d4:7f:bf:18:c1:83:50:25:3a:b1:7b:f3:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D0:BB:B4:96:86:05:5C:77:B3:25:24:98:31:77:D2:2B:42:5B:F8
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/NNC7tJaGBVx3syUkmDF30itCW_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:95:f8:d5:17:67:24:41:4c:a1:ae:85:9a:95:ed:1a:4d:d0:
4c:c9:b7:e8:86:02:84:18:26:e8:3c:37:f3:11:16:1c:cc:a0:
b1:94:f5:21:00:e6:3e:ce:c4:52:fb:2e:cf:4b:09:34:e4:91:
fe:dd:0a:81:42:e1:64:d2:20:3a:0a:2c:1c:1c:6e:29:16:11:
16:03:5f:a9:16:4b:e4:31:71:b3:dc:1d:ab:c5:f9:ab:bc:69:
6d:4a:56:1a:2f:bb:f9:54:b7:d4:01:02:8e:83:e3:5d:23:f7:
57:75:98:41:b1:ba:2c:3a:55:28:b4:44:f4:b5:5c:a0:ed:9e:
aa:c9:51:62:53:d4:b0:67:ae:bc:33:c9:2e:0c:c7:f7:9d:8a:
ae:f8:08:17:20:72:cf:02:60:99:cb:00:a7:07:ab:63:17:f2:
f2:00:a8:95:3e:0d:23:e7:5f:9d:9e:d5:8c:2b:93:e2:00:04:
1a:e9:a4:9f:d6:e9:29:a2:7b:e0:ab:9e:ae:dd:8e:14:f1:a3:
23:fb:a4:52:ba:fa:e6:29:0f:a3:c9:01:8c:7a:34:e7:7a:fd:
76:5e:aa:f4:a6:99:1b:7b:5b:f8:76:25:22:47:af:c7:ab:db:
ab:fb:a3:64:3a:3c:2e:19:b3:7e:2a:ee:f7:0a:0c:25:fa:b4:
f6:12:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:19 2025 by rpki-client