Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/fAenkccYvoOHEDML32yn807Jw6Q.roa
File: fAenkccYvoOHEDML32yn807Jw6Q.roa (raw, json)
Hash identifier: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=
Subject key identifier: 7C:07:A7:91:C7:18:BE:83:87:10:33:0B:DF:6C:A7:F3:4E:C9:C3:A4
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 01942826F68C864EAE64CB36C32165DE07A2
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/fAenkccYvoOHEDML32yn807Jw6Q.roa
Signing time: Thu 02 Jan 2025 17:53:49 +0000
ROA not before: Thu 02 Jan 2025 17:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201893
IP address blocks: 2.57.132.0/22 maxlen: 22
185.229.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f6:8c:86:4e:ae:64:cb:36:c3:21:65:de:07:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Jan 2 17:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c07a791c718be838710330bdf6ca7f34ec9c3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:11:c5:1c:6d:c1:17:46:25:fc:a7:b3:57:
37:00:65:66:45:1b:1d:e0:2d:ff:7e:36:c1:f3:f1:
8e:9e:9e:72:49:5b:6d:0b:ae:54:ac:64:34:b4:3b:
0a:2b:2d:1e:9e:c3:05:b2:32:50:1f:85:c3:38:14:
d3:5f:f8:e5:64:43:18:85:1c:e7:95:9d:ce:01:35:
a3:a5:bc:da:06:3a:57:43:f5:10:4b:8a:57:64:51:
cf:08:f5:8f:0a:29:8b:8d:de:ad:33:71:f6:d8:78:
27:05:8c:e5:16:14:8d:89:7e:a8:d5:ab:bb:09:a0:
b5:a8:37:08:1a:ec:5a:75:e9:94:19:af:2d:11:69:
22:2c:10:bb:be:28:6d:78:ae:14:da:f9:4f:7d:5b:
d6:ab:15:41:f2:42:d1:a2:7f:8b:60:ea:f5:af:ba:
63:f6:d2:6b:92:43:8e:97:5a:cb:62:5e:30:5c:88:
a9:2d:1e:8a:56:b6:e9:57:fd:17:31:b3:14:c9:57:
aa:19:c6:c4:8e:2b:88:da:df:24:63:db:25:da:23:
77:11:d3:f9:a8:a7:21:38:cb:58:11:67:af:a4:c1:
8e:5e:01:36:75:1d:fa:9d:9b:88:24:25:2f:ed:df:
b4:a3:98:a2:05:cb:a6:7f:4a:7f:76:6d:ad:8f:72:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:A7:91:C7:18:BE:83:87:10:33:0B:DF:6C:A7:F3:4E:C9:C3:A4
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/fAenkccYvoOHEDML32yn807Jw6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.132.0/22
185.229.124.0/22
Signature Algorithm: sha256WithRSAEncryption
52:fb:51:d5:1f:dc:a7:c0:d3:c2:d8:b4:25:07:87:08:6d:16:
e1:57:4c:d5:23:65:b0:54:70:ec:5c:b9:06:02:a8:bb:1d:35:
48:1b:c8:98:5e:73:10:87:07:a0:04:1e:5b:48:d0:e4:9a:dc:
2d:c4:d5:c7:c8:65:66:6d:2e:eb:f6:06:b7:c0:25:1d:d0:cb:
df:00:97:83:06:59:f9:17:26:61:76:79:1a:4e:8f:07:32:d8:
91:75:13:64:1e:6f:b3:14:4d:c5:5e:85:0b:bf:56:b7:18:71:
15:d1:98:f0:f8:34:85:d5:53:30:3c:06:d8:e5:fc:76:84:1b:
17:a1:7a:11:e5:8b:d5:de:93:a3:c0:8a:e5:35:ec:b9:91:a5:
88:7c:74:bb:63:ce:90:9f:49:dc:56:4d:76:98:5f:2d:66:74:
eb:ce:ff:f8:fa:6b:5c:f4:5d:c7:9e:35:c4:80:66:32:1c:87:
ff:58:81:31:d7:a1:39:36:30:d7:4c:a8:1b:2b:cd:2c:76:51:
61:05:97:42:7b:23:60:21:8d:ab:23:96:d1:40:74:ae:f3:4b:
94:ac:89:05:d2:ad:da:6b:67:78:ff:35:f7:59:a9:7c:92:62:
42:d7:3e:b3:3f:14:27:8b:89:ed:11:09:f0:6e:ee:e4:3c:5b:
5a:66:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:22 2025 by rpki-client