Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa
File: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (raw, json)
Hash identifier: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=
Subject key identifier: 48:A2:EC:DD:25:09:E9:08:4D:6D:52:6B:8D:85:72:61:FF:35:68:47
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019425FCC48A6F70B5C2F2D27FD10C00E344
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa
Signing time: Thu 02 Jan 2025 07:48:29 +0000
ROA not before: Thu 02 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209200
IP address blocks: 2.57.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c4:8a:6f:70:b5:c2:f2:d2:7f:d1:0c:00:e3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jan 2 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48a2ecdd2509e9084d6d526b8d857261ff356847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:33:7a:11:d4:8b:75:d5:61:00:cf:f5:0e:
92:cb:be:74:9d:d1:2f:03:f1:4a:82:2b:da:f2:23:
5c:98:f3:cb:58:0b:30:76:18:25:69:e6:85:5d:9a:
fb:0b:45:7a:cd:21:87:06:b2:7a:03:23:fe:9a:b1:
c1:8b:5e:f7:7d:06:49:a9:19:e1:23:f1:9e:56:e4:
41:bd:0e:01:96:84:d9:d3:8d:b7:2f:50:26:dd:a3:
69:fc:75:f9:0f:57:96:39:5e:03:bf:15:dd:28:98:
79:27:1c:4b:2e:9d:70:2b:7a:61:5a:5d:d3:3a:48:
7f:3f:79:2d:85:10:5c:2a:a8:79:3f:1b:c9:1b:97:
81:86:c8:b8:0e:9c:4c:f1:20:84:36:11:78:81:0f:
4e:19:f9:19:ec:2a:cc:32:e1:c9:1c:fb:bc:06:e5:
88:02:7b:93:b8:3d:33:82:81:a3:b4:95:e8:89:d8:
b0:4d:e3:9e:d3:e6:a1:58:aa:82:35:8d:80:81:a0:
ba:40:d0:8b:b2:4b:be:e2:f1:44:7a:0b:f4:cb:58:
a3:06:02:a6:4e:cb:77:11:e6:9b:56:d4:0c:b3:5a:
03:2d:9e:ef:16:5e:38:17:4a:f7:8e:5c:1c:84:d0:
1c:5e:1b:8f:5c:29:db:94:c5:da:b4:23:c8:cd:31:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:EC:DD:25:09:E9:08:4D:6D:52:6B:8D:85:72:61:FF:35:68:47
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:af:4d:5a:f6:98:04:81:e0:02:77:f8:5c:98:58:c8:a4:87:
b6:e6:78:99:f4:c2:84:94:23:cf:ce:89:36:e8:cb:22:43:70:
8d:0a:6d:75:3b:90:e5:19:66:ab:83:cc:34:cc:b8:c5:bc:59:
18:ba:96:e6:b1:d1:b8:10:f9:9e:6e:aa:d7:1e:4d:50:be:03:
7b:e6:3f:4e:2d:bb:4b:b3:fa:e2:c4:c4:b0:20:46:24:8f:d8:
c9:99:ba:bb:5e:90:a8:67:06:d4:c8:a7:c3:3d:19:16:3d:1f:
31:91:ef:1e:c7:5f:24:85:db:a0:fb:02:d6:af:53:e3:f8:dc:
48:ad:55:82:05:c8:c1:fd:94:b4:0d:58:f1:d8:04:76:8f:2e:
6b:28:05:19:5f:01:ca:25:63:f6:9e:59:10:43:42:f4:98:be:
ee:49:3e:16:3b:49:db:e1:2d:36:23:c1:c2:bb:f2:f2:59:57:
16:64:00:11:ba:b3:75:99:a6:d3:7f:20:3b:d9:7f:63:33:69:
2f:33:f5:70:f5:8e:9c:06:30:9c:5c:f8:b4:45:32:fa:dc:02:
1c:c4:a2:d4:a0:a5:9d:79:3f:d0:27:75:98:80:69:61:4d:65:
95:fb:fe:de:cd:a7:7c:8a:36:2f:b4:7c:6b:f0:93:7b:5e:aa:
ea:0c:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:31 2025 by rpki-client