Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zNJlYJNqv8vhs5MR6Mz5oc2UxwI.roa
File: zNJlYJNqv8vhs5MR6Mz5oc2UxwI.roa (raw, json)
Hash identifier: DBK2JAyeplWfShFBC+yjr7uKf9EJ717KowC2n35dJq8=
Subject key identifier: CC:D2:65:60:93:6A:BF:CB:E1:B3:93:11:E8:CC:F9:A1:CD:94:C7:02
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01949EB2345A3EF862715FF5F1C12CA1B4C9
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zNJlYJNqv8vhs5MR6Mz5oc2UxwI.roa
Signing time: Sat 25 Jan 2025 18:21:06 +0000
ROA not before: Sat 25 Jan 2025 18:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401626
IP address blocks: 2a07:f240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9e:b2:34:5a:3e:f8:62:71:5f:f5:f1:c1:2c:a1:b4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 25 18:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd26560936abfcbe1b39311e8ccf9a1cd94c702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:1a:49:ff:40:69:f7:72:3e:99:d4:88:d6:
b6:55:c0:8a:0c:2c:78:25:74:96:73:c8:19:e2:df:
3a:fa:64:1b:d0:15:3d:07:c0:78:0e:66:d2:c2:57:
4b:f2:b4:10:86:70:ad:95:7e:f5:ab:91:78:54:bb:
b9:98:fc:c5:99:bb:b7:f9:82:e2:b9:04:2a:36:27:
0e:9a:fa:48:bc:53:55:92:c1:fa:42:37:45:3d:6f:
7b:0d:53:c3:48:f2:d9:2b:99:ec:ca:e2:b8:77:f4:
18:37:ad:94:79:63:93:c1:c8:00:7c:8f:25:65:b1:
98:b4:75:a9:06:3e:83:1e:18:68:4d:dc:37:e0:82:
ac:73:49:aa:18:ac:57:22:df:c8:69:30:66:85:84:
49:22:4d:cb:99:46:61:eb:be:62:5a:79:f6:53:f6:
6b:d6:03:f1:89:2b:b7:e1:04:5f:c6:50:29:6b:3e:
0c:11:65:44:fd:06:49:4c:32:73:8d:20:ea:74:0e:
65:1c:19:c7:79:7b:6c:2e:cf:4e:35:1e:f6:99:3a:
be:c5:d1:ca:37:c6:05:d5:d4:90:39:67:77:09:ba:
fb:2f:de:d1:83:48:76:56:87:9a:79:8f:7d:9a:64:
4a:e4:3d:81:bd:a7:a2:cd:68:20:b8:77:42:e5:2d:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:65:60:93:6A:BF:CB:E1:B3:93:11:E8:CC:F9:A1:CD:94:C7:02
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/zNJlYJNqv8vhs5MR6Mz5oc2UxwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
Signature Algorithm: sha256WithRSAEncryption
a8:57:8c:1f:d0:44:c0:41:4f:3e:c4:3b:0e:82:5e:39:55:b3:
86:f0:9c:c9:9e:e7:c7:3b:14:f6:73:be:b6:c3:85:de:2a:e9:
1f:b4:8b:55:5f:b0:be:f2:98:bd:61:4b:1a:b4:4b:28:3d:d0:
8b:14:2d:00:a5:af:fa:f3:68:86:86:2e:e4:83:10:7f:fc:f7:
3f:01:56:3a:a7:0c:51:6d:1e:5b:b0:aa:fe:6f:8d:b7:ac:de:
67:b0:56:6b:eb:f5:85:b3:99:c0:28:4f:dd:e0:17:e8:58:46:
12:36:7b:a0:1c:b9:0b:02:e7:9e:10:ba:76:0c:72:22:23:85:
0b:28:cf:dc:62:b5:5e:e4:7b:02:a2:35:d1:2e:2f:ea:b2:7a:
5a:09:26:25:04:65:e8:7e:cd:12:4a:94:90:69:64:3a:80:78:
7c:d3:ad:8c:55:d0:54:12:96:5d:9c:44:c1:84:c3:5e:9b:f5:
a3:ac:d3:ee:d9:d8:a0:00:c5:b9:84:82:42:46:21:7a:af:9d:
06:a3:f8:06:ec:a8:79:1d:3a:ed:dc:6b:7b:57:ee:63:1e:06:
0f:08:35:cd:55:09:5e:0e:58:9a:f6:99:45:92:e0:c4:ec:d2:
34:10:ae:5c:02:b1:a3:69:c2:49:fa:3a:f8:3a:1f:fa:be:90:
b2:4b:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 20:21:07 2025 by rpki-client