Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zM1h9OjeMChx3-dhICjxBLaXcu4.roa
File: zM1h9OjeMChx3-dhICjxBLaXcu4.roa (raw, json)
Hash identifier: 3SnqlYFTtMhoAgn+gVVKIfPwwlQfIAsQVtJeSIZ8Lag=
Subject key identifier: CC:CD:61:F4:E8:DE:30:28:71:DF:E7:61:20:28:F1:04:B6:97:72:EE
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195D42A321816040285A1C4135824212A6E
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zM1h9OjeMChx3-dhICjxBLaXcu4.roa
Signing time: Wed 26 Mar 2025 20:34:49 +0000
ROA not before: Wed 26 Mar 2025 20:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60581
IP address blocks: 2a13:be45::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:2a:32:18:16:04:02:85:a1:c4:13:58:24:21:2a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 26 20:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cccd61f4e8de302871dfe7612028f104b69772ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:76:74:c7:49:18:3d:00:15:4a:66:83:e3:
4f:d4:5b:69:a9:98:0e:60:1e:e7:44:42:8e:a0:6a:
10:e6:47:43:e0:d2:95:23:97:f0:5c:7e:63:6a:ac:
85:27:a1:d7:fe:eb:89:ca:f9:06:41:0e:3c:dd:9a:
15:83:49:83:54:d7:fe:fa:14:a8:a9:2c:71:c0:49:
15:7e:22:be:ff:53:84:07:07:32:d4:30:6e:9d:2f:
cd:4e:09:d9:a0:e5:ba:18:3f:11:28:03:99:d0:71:
58:d9:51:42:1f:31:e5:71:ef:8a:dd:9d:6b:71:73:
0d:3a:80:b7:ac:3d:6f:3b:f0:96:4e:cd:ec:4a:4b:
99:01:ab:af:73:83:b0:95:67:f8:d7:ac:05:0d:b1:
10:7c:2a:16:43:92:28:59:86:b3:1e:e1:87:bf:f7:
3c:b4:86:f0:7f:e9:6a:4b:b2:f0:3e:95:88:e6:48:
f6:2d:61:91:cc:73:e4:87:e8:e3:55:a5:06:70:42:
c6:cd:93:db:2f:bb:02:e0:d5:fa:a9:33:94:20:d8:
8c:92:96:4d:d7:0e:46:53:71:d5:ea:0c:4a:89:79:
6d:b7:03:87:a8:a0:3d:8c:09:7d:05:d2:86:1f:5e:
51:0a:f6:1f:7d:6a:2a:24:af:fe:1b:b4:86:ed:c4:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:61:F4:E8:DE:30:28:71:DF:E7:61:20:28:F1:04:B6:97:72:EE
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zM1h9OjeMChx3-dhICjxBLaXcu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:be45::/32
Signature Algorithm: sha256WithRSAEncryption
02:70:ba:35:4e:63:c8:d0:0a:e0:90:d5:7f:79:c2:1d:cd:5e:
52:c8:b1:36:a8:a4:7d:b2:93:13:59:14:7f:b7:68:df:ec:c7:
28:f1:29:92:7a:d5:f8:68:de:fe:8a:36:18:f6:09:67:cb:6b:
49:8d:cf:16:3a:a8:2d:56:df:89:33:fe:5d:ce:39:e2:cf:5d:
46:ed:a3:56:7c:fb:e9:bf:d1:2a:73:e0:ba:a1:a5:8d:1e:55:
c5:5e:67:1a:4e:4b:84:2b:a2:dc:8b:6f:68:06:0f:ce:fe:30:
a5:b2:a1:f2:d7:7b:e8:40:d6:18:37:db:89:1c:ef:ae:3f:9d:
be:5a:02:7f:a8:ff:d1:29:2c:cb:22:90:31:c6:76:7f:23:d2:
39:93:7a:e0:e6:cc:55:1b:ff:9d:3a:aa:ee:2b:89:cb:ae:d7:
5c:2b:ff:21:c4:93:3b:c7:4f:6b:e4:e4:56:e0:f6:55:e7:21:
68:74:1c:f0:e0:4a:89:f7:0f:fd:ae:a4:c1:f1:2e:52:fd:7b:
d7:f6:9c:ed:15:e0:4d:51:18:77:4c:16:0e:78:f6:ea:b8:4a:
a8:4e:19:16:9b:36:83:6b:93:79:ba:cb:13:f1:2d:92:1c:5b:
e1:75:ca:10:dd:71:04:f4:30:c8:f9:17:6f:6f:ee:eb:09:6e:
43:71:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:51:12 2025 by rpki-client