Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/RfiogXB75ZZcw60YgsMcLXMGreQ.roa
File: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (raw, json)
Hash identifier: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=
Subject key identifier: 45:F8:A8:81:70:7B:E5:96:5C:C3:AD:18:82:C3:1C:2D:73:06:AD:E4
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 019425220DF634FB2519AC284A18709C054D
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/RfiogXB75ZZcw60YgsMcLXMGreQ.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62077
IP address blocks: 2.57.212.0/24 maxlen: 24
2.57.213.0/24 maxlen: 24
185.33.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0d:f6:34:fb:25:19:ac:28:4a:18:70:9c:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f8a881707be5965cc3ad1882c31c2d7306ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:df:d8:7e:5b:0b:90:ea:16:06:ee:20:90:
48:bb:95:68:c1:29:c5:60:8d:d9:b2:2a:7c:a1:51:
40:bf:5a:6f:f6:53:0c:b5:21:0a:ce:81:42:17:61:
06:03:db:c5:0d:2e:79:40:64:ca:9c:00:c5:44:30:
06:4d:99:9b:b4:c7:63:7d:43:5f:31:ff:80:8f:17:
5f:34:26:f7:f8:50:66:79:aa:1c:5b:71:ce:a0:97:
7c:3e:e0:b0:66:82:c3:7b:41:b1:7e:b7:c8:e8:34:
70:e9:c5:f5:8c:1c:02:2f:d6:dd:90:a7:5e:88:ac:
3d:e2:c8:21:66:42:74:b4:48:b7:58:85:3c:49:e2:
4c:3d:9e:0b:4d:fe:b4:3c:bc:92:10:ac:1d:e4:2c:
8c:84:e3:5d:36:c0:11:66:62:3a:e2:90:ca:f7:49:
9e:bb:89:4d:89:78:db:a8:17:e4:63:0f:a5:59:6e:
a9:c9:7e:c0:a9:0c:6c:4a:5b:43:b8:d4:0c:4c:c6:
07:0e:63:33:56:f9:0a:fd:38:37:f8:c5:f8:14:4c:
50:88:9d:2e:31:16:08:f0:01:ca:b2:5a:6f:fe:b0:
e8:8d:67:80:9d:48:10:0d:c0:15:41:ec:7b:55:ee:
18:8d:dc:53:31:ae:54:10:0e:93:a6:3a:b9:a3:bd:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:A8:81:70:7B:E5:96:5C:C3:AD:18:82:C3:1C:2D:73:06:AD:E4
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/RfiogXB75ZZcw60YgsMcLXMGreQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.212.0/23
185.33.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:04:f2:df:0c:33:76:94:de:6b:2b:60:a6:35:57:23:22:57:
24:62:90:d1:02:d9:6d:ee:b8:b8:52:e0:56:69:13:01:bd:82:
9b:17:20:fe:58:21:1a:86:61:b2:6f:0d:c1:e8:21:3d:74:31:
d2:a5:b9:8d:9f:f5:7a:a4:cc:66:a9:d5:21:e0:d2:dd:be:95:
10:dc:f1:20:a3:f4:55:c5:cc:4e:79:62:2c:99:2a:d7:fe:61:
03:7a:36:08:42:b6:5b:9a:e4:22:2a:51:8e:14:51:6a:e2:ac:
2f:41:fd:8a:a5:59:6b:f2:e8:19:76:60:84:b8:b9:fb:5c:a7:
e3:22:6f:9f:8e:76:d3:5a:0d:9b:59:02:91:3f:bf:ae:3b:69:
b2:f9:7b:a2:47:06:78:80:82:cb:40:44:ce:61:e5:6b:55:4d:
3e:6e:40:41:3d:b7:58:55:d1:4f:c1:ee:60:02:1d:d6:40:42:
dd:78:30:31:86:9b:e4:98:ba:82:41:78:19:50:e2:07:6a:7c:
3d:aa:64:eb:44:67:c0:19:42:ae:f8:7f:6a:8b:90:5e:00:1e:
35:fd:80:d1:0a:b1:e5:68:2c:86:c6:94:dc:86:fe:70:08:76:
72:17:14:8e:5e:5b:e3:2d:6f:7b:01:55:2e:27:cc:4d:26:53:
0b:06:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:37 2025 by rpki-client