Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/rb_J-8_h6RbiliPl0Q3Uy01uw4o.roa
File: rb_J-8_h6RbiliPl0Q3Uy01uw4o.roa (raw, json)
Hash identifier: ITUML4K67Ea1/tZVTkocA9J2Y01LiDT/sbO/Jp5FM10=
Subject key identifier: AD:BF:C9:FB:CF:E1:E9:16:E2:96:23:E5:D1:0D:D4:CB:4D:6E:C3:8A
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195D42A32DFD983D2D602F2D7BD333395BD
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/rb_J-8_h6RbiliPl0Q3Uy01uw4o.roa
Signing time: Wed 26 Mar 2025 20:34:50 +0000
ROA not before: Wed 26 Mar 2025 20:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202469
IP address blocks: 2a13:be46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:2a:32:df:d9:83:d2:d6:02:f2:d7:bd:33:33:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 26 20:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adbfc9fbcfe1e916e29623e5d10dd4cb4d6ec38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:02:53:5c:1d:4c:ed:34:21:f3:90:0c:75:
2c:b6:6b:39:93:76:2d:09:3b:a4:ac:e3:0f:a9:63:
0b:11:c1:2f:04:48:5b:89:ec:e1:70:86:33:93:1b:
83:3d:80:ca:d5:07:2e:4a:3d:9f:5d:90:cc:ea:50:
2d:48:cc:97:6e:47:89:0f:f8:de:f8:92:1a:fc:21:
e7:57:bd:40:74:a0:2d:33:42:b2:b8:85:7e:63:a7:
90:c6:4a:20:b1:f8:55:b0:91:a7:fc:98:23:43:e6:
b7:fd:d8:91:46:5d:fb:93:24:34:58:9c:03:41:e5:
58:3f:77:a6:0f:1a:30:52:f8:53:48:20:79:e1:5d:
e5:ad:eb:11:5d:94:b9:f5:ea:3f:7b:25:89:2b:78:
86:01:7a:30:7b:c7:94:c2:55:5a:8e:03:a6:9f:07:
27:6e:8e:8d:7e:e4:5e:2a:0a:0e:c1:e4:37:0a:1f:
77:ba:f3:c6:ce:c5:7d:f3:13:4d:5e:98:4d:5e:c3:
48:95:d3:8d:2f:cf:d2:17:f1:12:bb:83:25:4c:79:
ef:cf:3d:50:23:13:97:a5:30:9b:e9:b0:8c:dd:5a:
ea:0f:f9:f7:e1:bf:26:71:a0:f2:53:75:d4:4a:a7:
4a:89:12:d8:58:f8:cd:d5:fc:46:54:c5:9a:3c:6f:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:C9:FB:CF:E1:E9:16:E2:96:23:E5:D1:0D:D4:CB:4D:6E:C3:8A
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/rb_J-8_h6RbiliPl0Q3Uy01uw4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:be46::/32
Signature Algorithm: sha256WithRSAEncryption
5c:c7:c5:7a:2f:2a:05:65:cd:32:f1:75:9c:76:fd:40:77:37:
81:fa:b5:3d:9e:3b:d3:ed:93:07:aa:b5:54:c8:e2:0c:11:cf:
82:79:82:49:41:e5:50:18:b7:1b:ad:9f:a4:d4:69:3f:7c:03:
01:1f:a6:54:d9:45:5f:9e:99:fb:60:01:bc:84:cc:76:5e:50:
1b:3a:c0:61:73:21:30:a7:e6:af:89:20:e4:a0:95:82:48:2d:
89:37:27:51:02:d1:93:d5:10:03:49:ab:40:96:74:67:3d:06:
06:b5:2b:e2:b6:b0:c1:08:6c:b4:48:95:68:7f:59:f6:61:30:
ef:9e:4d:11:9d:a8:31:b4:0f:d1:bd:61:99:4f:65:c6:f7:f7:
70:76:e0:df:8d:d7:2a:31:a6:71:0e:42:2a:e0:4a:4e:91:5e:
51:98:f2:6c:60:86:a8:1a:22:a2:d1:b2:0b:13:81:c4:43:7b:
e0:2f:95:bb:4b:be:d4:8f:5e:b8:5a:17:5b:b0:3d:f7:a4:51:
b1:12:d6:e4:0c:49:8f:84:57:2d:7a:55:70:fe:90:6d:51:1c:
3c:ed:aa:cb:3b:14:c8:45:52:7b:c5:8f:cc:a6:86:53:04:42:
16:18:fb:31:45:70:d6:14:1b:a8:2e:b6:48:f5:1d:db:f4:cf:
bd:87:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:09 2025 by rpki-client