Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M2CQqqzBocAGSD7mWQgO62dLLQI.roa
File: M2CQqqzBocAGSD7mWQgO62dLLQI.roa (raw, json)
Hash identifier: lmQ1T5HtUz5gtqwqidmallurZsmRz4yqbqyN9XinwV0=
Subject key identifier: 33:60:90:AA:AC:C1:A1:C0:06:48:3E:E6:59:08:0E:EB:67:4B:2D:02
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9FFEBA5BE2E6404ABE97CECBF30F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M2CQqqzBocAGSD7mWQgO62dLLQI.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9f:fe:ba:5b:e2:e6:40:4a:be:97:ce:cb:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336090aaacc1a1c006483ee659080eeb674b2d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:f9:52:11:b7:3d:7f:94:82:43:f3:73:72:
48:9f:a9:f7:01:12:3f:f9:15:42:9e:e1:63:c0:2d:
4e:6a:ea:5a:41:ef:0d:0d:33:07:66:3d:8c:4e:59:
94:5c:c8:3f:8a:64:5f:37:5e:19:ec:26:c4:52:95:
35:85:f7:09:df:43:0a:b4:6a:de:58:54:d1:dd:3a:
0b:31:6d:4e:13:54:81:b2:ce:84:09:6f:48:38:8f:
3e:aa:36:ff:47:5b:12:bf:e2:0e:42:fe:4f:36:81:
91:b4:d0:88:11:16:c3:6a:c2:32:17:70:c5:3d:f0:
74:df:96:ab:89:cb:cc:dc:98:2c:6b:a3:02:07:59:
8d:5e:46:4f:be:ef:b9:3e:b1:31:19:9f:79:f5:1f:
da:73:38:64:51:25:d4:98:42:9c:74:5e:a4:5e:2a:
44:4f:21:23:28:5b:44:e3:52:c9:82:51:11:5b:45:
bc:ae:a2:b2:56:a0:a6:73:ee:54:7e:ee:e6:ae:cd:
c1:43:97:89:22:3f:71:1c:c5:69:cb:96:89:ec:10:
4b:bd:1d:c2:5a:78:1c:fd:83:1a:19:cc:55:67:c1:
08:f0:14:0c:ec:f6:d3:70:e7:90:a9:a7:d7:52:4d:
66:8b:83:9b:c9:56:a8:64:98:18:0b:1b:f7:4c:9e:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:60:90:AA:AC:C1:A1:C0:06:48:3E:E6:59:08:0E:EB:67:4B:2D:02
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M2CQqqzBocAGSD7mWQgO62dLLQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:36:13:92:e2:e8:7a:9b:7b:a9:74:67:be:fe:2e:74:d0:3c:
61:62:72:7c:f9:56:93:fa:86:e4:45:ec:98:f8:0a:28:95:9d:
1b:7f:c5:35:94:cb:30:eb:77:5a:06:40:a4:cf:ed:10:3b:f0:
ec:14:59:e1:8d:1a:c4:88:ea:40:2e:67:ad:79:72:7a:70:4b:
f6:db:1b:93:dd:e4:7b:72:df:09:10:56:78:71:ac:63:95:16:
04:92:bd:03:df:a0:9d:f1:2b:88:50:6f:21:a9:33:15:bc:0b:
d1:73:e4:8e:23:5c:87:31:2a:43:e2:fa:07:35:6b:41:bb:f2:
58:4f:d9:8c:7e:d1:a5:34:5b:75:e5:bc:ed:3c:a0:a2:80:47:
85:bb:53:51:07:72:21:f5:fb:fe:ae:45:7c:18:e5:b5:8f:6c:
d1:eb:75:fe:e6:23:cc:65:8e:94:d6:ab:9d:71:85:06:54:39:
e7:78:58:71:13:49:02:2f:7e:e8:d2:28:ca:df:b4:14:82:e5:
79:9e:7c:63:f2:37:f4:5d:f8:dc:bc:40:ca:03:eb:f5:e7:90:
83:07:ef:8e:9b:f6:0b:00:b7:f2:a8:a9:f0:1e:cf:c1:ca:ad:
c5:52:fa:7e:36:d4:bd:42:8f:3e:3f:9b:fd:f1:97:0c:6a:36:
78:a5:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:59 2025 by rpki-client