Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iGEJwdySD9e5MFBYcHHPxHwCIHE.roa
File: iGEJwdySD9e5MFBYcHHPxHwCIHE.roa (raw, json)
Hash identifier: 8fqVY71a5Tx9HJcxM/2FCzr7nHD+PYXb+X6tXu1aF/c=
Subject key identifier: 88:61:09:C1:DC:92:0F:D7:B9:30:50:58:70:71:CF:C4:7C:02:20:71
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194B889CF2AEBC0CD30E745BB2D566DCBFE
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iGEJwdySD9e5MFBYcHHPxHwCIHE.roa
Signing time: Thu 30 Jan 2025 18:47:06 +0000
ROA not before: Thu 30 Jan 2025 18:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207108
IP address blocks: 2a0b:8440::/29 maxlen: 29
2a0b:a4c0::/29 maxlen: 29
2a13:cdc0::/29 maxlen: 29
2a13:d140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:89:cf:2a:eb:c0:cd:30:e7:45:bb:2d:56:6d:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 30 18:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886109c1dc920fd7b93050587071cfc47c022071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:10:a6:04:15:d3:be:10:e2:48:75:98:f7:
57:d9:b0:61:0d:ee:7d:b0:31:96:bf:3b:1d:94:48:
29:4e:f9:34:9c:cf:12:47:1f:7e:27:6c:70:cc:2c:
0e:03:ec:b7:6c:15:98:6b:a9:d3:40:72:34:43:f0:
e6:73:28:b6:06:64:e7:04:de:98:b5:b6:73:15:eb:
44:cb:26:33:cc:6e:c0:1c:6a:4e:31:73:73:3d:82:
e3:4c:67:5a:7d:86:bb:b1:31:3f:82:53:7a:b5:f3:
90:3e:06:50:ed:e3:2d:07:07:3a:1f:3a:4e:62:3c:
6f:b6:fb:a1:7a:bc:02:3c:b3:20:b5:6d:74:ee:58:
4d:da:c7:36:7d:11:a7:b5:f8:5b:b6:32:af:ef:ad:
b9:c7:c0:af:df:2d:23:11:d3:8c:ff:fe:cd:1e:b7:
c5:0c:8f:f6:93:29:82:9c:8c:50:e9:c1:5b:67:87:
40:c8:d2:1a:ce:6d:d3:46:08:da:89:c4:12:25:e0:
f6:9b:cb:01:ab:82:70:99:c1:ff:a1:78:b2:ad:ff:
cf:a5:d3:51:20:10:dc:36:94:37:bd:c6:a1:83:92:
b5:c3:f2:23:ef:2b:55:fd:0e:3a:d9:09:c8:e5:18:
f9:0c:75:b5:50:89:c1:e7:a8:fd:fb:99:55:5d:f6:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:09:C1:DC:92:0F:D7:B9:30:50:58:70:71:CF:C4:7C:02:20:71
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iGEJwdySD9e5MFBYcHHPxHwCIHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8440::/29
2a0b:a4c0::/29
2a13:cdc0::/29
2a13:d140::/29
Signature Algorithm: sha256WithRSAEncryption
b8:ed:a1:ae:9c:7e:c2:46:a7:3c:35:9a:1d:d7:58:3a:ae:e7:
20:ff:75:bd:ba:9a:4b:15:6f:84:7f:a2:b5:40:88:2a:45:34:
11:96:cf:0a:4f:91:62:4c:09:b2:0e:df:ae:65:e4:6e:5c:a7:
f8:ab:82:88:65:fb:f5:58:34:62:7d:af:49:1d:e5:1c:0a:c9:
8e:3a:5b:1e:37:89:a0:1a:33:71:5c:89:36:e9:b2:75:7b:a8:
80:85:48:2c:18:69:ce:1b:6a:53:8e:30:7a:9e:1f:10:0f:83:
d4:fd:3e:63:4b:cb:5e:ac:12:65:4a:40:4f:c9:c0:e4:08:e8:
37:d6:7f:fc:8d:49:fb:d7:f6:c9:f6:f0:6a:8f:fd:ba:c9:fa:
28:46:2e:b5:a9:f3:75:6f:22:a3:d3:00:b1:14:33:81:6b:8c:
45:d6:f1:56:54:0e:cd:c7:99:ee:63:47:8d:8b:c4:16:43:93:
56:95:3a:00:c6:57:3c:50:88:dc:8a:d3:98:01:e9:cb:02:fd:
2a:91:62:32:76:6c:f2:d3:92:f5:f5:b7:b0:35:2d:0f:cd:96:
28:ad:ea:f1:27:0b:ac:60:a3:f1:e7:f9:e1:7f:43:f3:e2:8a:
95:68:1d:84:18:c9:1c:73:01:7d:16:bb:46:bd:6d:22:8e:84:
27:a7:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:23 2025 by rpki-client