Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/z58icxsnW3D1G-Tg8oJfAEu4K30.roa
File: z58icxsnW3D1G-Tg8oJfAEu4K30.roa (raw, json)
Hash identifier: 2xl+ZWAT8+7LeSxTlZeMXeVfz1ij8cub6sBtbC4Yv/k=
Subject key identifier: CF:9F:22:73:1B:27:5B:70:F5:1B:E4:E0:F2:82:5F:00:4B:B8:2B:7D
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 019426D98D2C2F9E157CF797DEDF5408A33A
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/z58icxsnW3D1G-Tg8oJfAEu4K30.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204091
IP address blocks: 2a13:3700::/44 maxlen: 44
2a13:3700:10::/44 maxlen: 44
2a13:3700:20::/44 maxlen: 44
2a13:3700:30::/44 maxlen: 44
2a13:3700:40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8d:2c:2f:9e:15:7c:f7:97:de:df:54:08:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf9f22731b275b70f51be4e0f2825f004bb82b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:5a:b8:62:58:91:12:f4:98:38:bd:df:d8:
22:7a:73:89:22:01:8d:6b:3b:44:c6:4a:8d:3d:77:
ee:93:e7:b9:f5:6f:c0:ba:01:b8:d7:c9:d5:8a:c2:
8e:97:ed:27:74:5e:11:a9:43:cb:eb:76:1c:28:25:
d6:8c:04:e1:8c:7a:ea:9c:be:90:73:c7:59:86:26:
60:61:66:34:23:c1:3d:7a:5c:11:e9:90:40:2f:fe:
c8:18:37:29:91:f3:ca:28:be:cd:4c:7f:01:36:bf:
88:32:c0:8f:cf:83:20:26:1b:94:b3:d4:54:97:c1:
24:e9:e9:97:9c:27:0c:27:84:88:64:d1:43:52:c5:
27:1c:a8:5a:aa:d0:a5:2e:b3:b5:f6:da:b8:00:7a:
bf:12:01:cf:3b:64:d4:9c:80:a7:9d:b6:7b:42:b9:
2f:ce:c6:40:d3:db:a8:72:b9:ec:19:f6:46:58:80:
f6:92:4f:50:73:c4:6f:29:e0:1a:d5:b9:64:51:ee:
a3:1a:c5:96:98:1d:cc:d5:66:3f:7f:4e:82:c6:dd:
19:7b:08:b9:be:b5:aa:e4:fb:2d:48:56:09:71:f9:
da:4b:2f:b6:b0:ba:bf:92:98:a1:87:c3:94:88:58:
83:41:0e:e8:38:f5:0b:2c:4c:fb:29:14:6e:19:a6:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:22:73:1B:27:5B:70:F5:1B:E4:E0:F2:82:5F:00:4B:B8:2B:7D
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/z58icxsnW3D1G-Tg8oJfAEu4K30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3700::-2a13:3700:4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a1:b4:1b:da:26:00:c9:9e:53:c5:6c:52:a8:f3:77:d0:f6:ed:
6d:37:3a:24:cb:2a:40:da:e5:0b:98:8d:9f:0b:0e:c9:58:92:
b3:52:48:27:8e:65:ca:11:eb:2b:f5:c1:23:67:77:52:34:d0:
28:c4:eb:5f:fa:a6:bb:63:5d:2c:3e:51:73:7d:8b:83:11:32:
fa:a3:34:d2:6a:3e:7d:51:ed:0d:e9:4b:02:28:b7:56:05:47:
62:96:85:13:ed:78:3b:04:74:65:1b:d2:9a:77:f4:0c:15:a2:
25:8f:ab:10:16:da:66:60:14:e0:64:e3:b8:f0:c4:5e:f0:f3:
49:78:79:9b:fd:0b:d3:3e:70:b2:26:03:be:a7:15:e7:1c:45:
88:f0:ac:a6:15:95:f2:38:f1:60:cc:31:82:11:a0:4b:4a:03:
15:31:9c:d7:a7:38:c9:e7:ea:8b:36:d7:4a:5c:b2:69:b4:31:
94:01:20:2f:46:59:3e:3e:3e:d0:96:0b:71:85:90:31:f0:b5:
fe:93:b1:a3:07:53:bd:84:52:29:91:52:bb:63:61:6e:a1:e1:
67:58:d5:02:70:03:27:36:93:d0:ad:59:1e:d3:39:bf:25:4c:
04:db:f0:af:80:80:18:a1:a2:64:92:99:9c:ba:bc:d8:68:ab:
bc:22:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:45:49 2025 by rpki-client