Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa
File: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (raw, json)
Hash identifier: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=
Subject key identifier: 66:04:81:DE:1B:DB:A9:A9:AD:3E:E6:93:3E:90:FB:C3:51:43:B3:94
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195683C9F393B36BEDB7EDE78C157795D17
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa
Signing time: Wed 05 Mar 2025 21:35:58 +0000
ROA not before: Wed 05 Mar 2025 21:35:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209709
IP address blocks: 2a0f:9bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:3c:9f:39:3b:36:be:db:7e:de:78:c1:57:79:5d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 5 21:35:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660481de1bdba9a9ad3ee6933e90fbc35143b394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:77:6f:d0:2b:24:c6:f2:f7:4f:f8:26:35:
d9:28:b7:81:62:80:21:7f:62:35:6d:40:a6:d0:b0:
7e:a2:f8:35:16:65:fe:1f:85:a6:e7:2c:e4:de:4a:
16:4b:8d:08:ff:99:c4:ea:91:c2:0a:f9:84:dd:8b:
e7:39:b6:39:ef:4d:e0:93:bc:28:58:50:ea:66:5d:
83:0d:0a:49:d0:cc:f9:63:20:7e:45:b3:f4:c3:29:
bf:02:99:83:ec:82:30:48:d0:b8:73:85:22:b1:66:
a9:ca:c9:d1:f1:10:a0:0c:d8:9b:50:bc:10:cc:bc:
ab:ef:00:8a:98:de:a7:5b:f3:36:a9:7e:17:1f:7d:
d7:c3:f8:b0:70:d5:a7:93:fc:cd:5e:46:10:45:58:
61:7c:9d:19:f2:f0:43:21:9e:e0:77:80:c9:e4:0f:
cb:cc:54:7e:b9:41:36:f2:88:13:a9:f2:04:1e:ee:
5c:3e:08:4d:d2:25:c6:ea:7b:ee:ae:24:32:82:ba:
e9:34:a6:d4:8d:58:41:9b:6f:87:5d:a6:44:b9:36:
30:d6:5c:4a:bb:6d:6a:35:37:6d:03:8e:c3:91:92:
58:73:0d:42:6e:e4:88:0e:dd:c6:70:48:da:57:7c:
6b:8a:27:55:a5:94:71:27:bd:b7:29:6c:d9:68:78:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:81:DE:1B:DB:A9:A9:AD:3E:E6:93:3E:90:FB:C3:51:43:B3:94
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9bc0::/29
Signature Algorithm: sha256WithRSAEncryption
75:93:20:f1:32:8d:c5:9b:03:f1:65:83:0c:51:2c:bf:be:16:
4d:51:5e:5e:1e:79:cc:f3:6f:dd:d0:17:43:11:31:51:98:1e:
d0:3f:34:35:2e:d0:73:da:47:c1:ed:03:f8:d7:7a:35:1a:9a:
e3:d5:23:b7:0d:1a:f4:81:66:55:11:64:0e:fd:fd:c3:9d:00:
68:06:e7:d2:b7:a4:de:f7:e2:b3:b1:6e:08:ce:c4:90:1e:20:
4d:85:43:40:24:04:a7:e4:e1:84:4d:a7:4e:fc:2d:f4:ec:a2:
b7:c5:db:a8:37:63:7c:34:6d:88:f3:a4:7b:35:f9:e5:7e:67:
fd:4a:cb:3e:a8:89:e1:ca:c8:cf:ec:a5:10:76:fc:19:5d:bf:
ae:14:19:e4:ab:42:5c:e9:58:eb:1c:96:6f:f0:ab:a9:27:b7:
58:d3:a7:b9:b6:64:82:55:bd:04:9b:35:85:cd:cc:ea:41:28:
00:49:b0:7d:66:5a:b4:75:a8:09:ea:4d:de:c7:64:07:69:7b:
5c:36:c7:4d:24:d4:e3:05:c8:f1:83:31:27:e3:74:f0:d8:44:
0a:fb:d5:d3:3d:28:dc:2b:c6:33:41:c9:a3:f9:95:e2:d3:71:
3d:00:f2:b1:22:eb:58:c0:b1:54:a9:bc:80:85:db:56:34:5a:
6f:8a:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:17:25 2025 by rpki-client