Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/2pQgywUwCUOi3bvSgJgTRF9t6nU.roa
File: 2pQgywUwCUOi3bvSgJgTRF9t6nU.roa (raw, json)
Hash identifier: By+q49dl0sYzpmGJ5fVPcBQIiz13w/HJFboW0FA3p1Q=
Subject key identifier: DA:94:20:CB:05:30:09:43:A2:DD:BB:D2:80:98:13:44:5F:6D:EA:75
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 0194236A1E433AD7A883BC9A2CA09AAF29CF
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/2pQgywUwCUOi3bvSgJgTRF9t6nU.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203462
IP address blocks: 2.57.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1e:43:3a:d7:a8:83:bc:9a:2c:a0:9a:af:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da9420cb05300943a2ddbbd2809813445f6dea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:34:74:0d:ff:18:dc:6c:0d:82:f9:c2:24:
13:50:82:41:80:da:4f:79:12:90:45:a9:05:26:1f:
19:a7:f3:4e:52:dc:81:c9:69:b5:9f:f1:09:b9:18:
c6:d3:7f:45:4a:28:19:ea:82:34:4d:86:b7:d4:74:
3c:ec:ac:d6:b4:67:1f:d6:4d:1d:d3:02:55:a0:ca:
27:87:ce:1c:6a:44:bb:e4:c8:a2:4c:22:5f:82:c0:
fd:62:88:4d:9c:42:17:64:fe:a5:1f:9c:74:9a:7b:
f6:25:92:b5:61:a7:c3:79:4f:65:f3:64:31:d0:ea:
cd:6b:f5:07:fd:14:d2:1c:04:a8:7c:21:2b:60:22:
e9:d0:4c:89:c2:c1:52:19:ef:99:07:8f:98:0f:8b:
da:75:3c:a2:6d:15:72:e7:4f:38:7d:55:6d:86:19:
23:e7:47:78:02:59:58:1f:0f:52:fb:5d:43:27:42:
e0:02:28:1d:d9:d9:5d:7e:78:0a:29:6d:e9:3e:ab:
06:ac:e6:04:75:39:ac:c3:52:d6:6b:68:31:2c:30:
e8:96:e5:e4:46:70:69:2b:ea:1e:52:dd:8d:35:81:
88:fb:80:b1:c6:73:80:76:22:43:c9:e6:c9:9e:70:
98:20:52:6a:ae:54:63:e5:a6:1e:71:ef:89:a9:60:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:94:20:CB:05:30:09:43:A2:DD:BB:D2:80:98:13:44:5F:6D:EA:75
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/2pQgywUwCUOi3bvSgJgTRF9t6nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.84.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:f1:74:0c:09:fe:09:5c:18:a4:e8:17:04:47:5e:32:08:c6:
82:b1:27:c5:e1:24:4e:bc:5a:77:97:e8:0f:83:99:7a:c2:4e:
be:b1:8f:5c:51:bf:7c:92:8c:da:5d:8b:c4:e7:2b:fd:01:a0:
2a:23:0c:e7:06:cd:b0:10:c7:af:0f:e9:f7:c4:38:48:0b:ff:
8c:4f:85:f1:52:6d:b1:9f:7b:02:79:32:75:6a:95:ce:d2:87:
93:e3:45:e6:2d:9e:23:8e:24:e6:d6:11:d4:d8:0e:b5:6e:c6:
48:91:f3:dc:df:ba:7f:79:b5:83:18:2c:e0:9d:99:18:f7:24:
47:d0:b5:53:96:9d:75:a6:2d:a2:e1:65:82:6f:22:6f:02:e0:
23:09:ea:3c:cb:82:a8:20:72:3a:28:8f:a4:7f:b6:51:51:d6:
4f:2e:30:79:00:9e:41:f1:19:5b:48:38:59:9e:43:a4:61:d9:
00:f0:70:ef:f2:63:cd:0b:46:93:b6:86:ce:5d:0a:55:5e:91:
df:3c:d9:48:1e:7c:fb:60:c4:ef:30:13:d6:f7:97:18:4c:ef:
0c:d2:b3:f5:29:8d:ab:d3:32:b6:42:b1:34:3e:0b:fc:8a:06:
26:9a:b5:10:1f:85:d9:fd:58:31:bd:42:6d:57:37:fb:2f:bd:
0a:00:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:32 2025 by rpki-client