Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/7akWYjQwsX6a6HhUzkzvmpveN9o.roa
File: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (raw, json)
Hash identifier: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=
Subject key identifier: ED:A9:16:62:34:30:B1:7E:9A:E8:78:54:CE:4C:EF:9A:9B:DE:37:DA
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 019427B51CB88C7C62A4F56037168DE66C40
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/7akWYjQwsX6a6HhUzkzvmpveN9o.roa
Signing time: Thu 02 Jan 2025 15:49:28 +0000
ROA not before: Thu 02 Jan 2025 15:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209189
IP address blocks: 2.57.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1c:b8:8c:7c:62:a4:f5:60:37:16:8d:e6:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Jan 2 15:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda916623430b17e9ae87854ce4cef9a9bde37da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:9d:b8:86:73:69:a2:ee:21:72:90:38:7c:
d0:63:d6:4a:09:65:c3:fb:50:16:fd:cf:d4:1c:7f:
d2:47:b8:ff:bf:da:46:b7:48:7f:d4:bb:6f:50:2a:
27:52:04:be:c4:5c:73:26:55:6b:56:dc:4d:55:be:
c3:61:bf:f3:4f:82:6b:6a:e3:4d:2e:f6:99:67:b9:
9f:33:c7:4b:50:8b:93:3c:95:51:77:21:09:56:ce:
8a:61:f5:54:db:44:92:13:dd:26:ed:1b:88:1b:87:
8c:72:33:2b:97:5e:5e:d6:0c:c0:34:2b:a2:a5:db:
b8:78:b1:29:03:57:17:7c:e6:06:c3:07:08:a5:6a:
36:2b:fd:ac:44:85:90:c5:0b:0b:99:89:e2:67:fc:
25:e1:f4:15:0d:98:97:8b:50:8b:1b:3e:ad:3b:64:
54:8e:b2:da:65:cd:ac:1c:19:55:94:aa:8f:01:ce:
a8:5e:ac:0c:ef:39:5d:0a:2a:e7:7e:8d:98:66:b3:
cc:3e:f9:42:d6:da:da:b7:7e:7f:3d:a7:db:82:97:
68:2d:ab:5e:e3:e4:4d:91:ed:d3:a1:64:b4:f4:f6:
90:06:3d:40:ca:59:70:7d:c9:9d:ef:be:42:3f:d4:
fe:70:17:da:50:a4:70:fa:8a:6e:47:02:e6:22:f2:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:16:62:34:30:B1:7E:9A:E8:78:54:CE:4C:EF:9A:9B:DE:37:DA
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/7akWYjQwsX6a6HhUzkzvmpveN9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.188.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:7d:38:66:42:69:33:cc:cb:ff:5b:00:ad:15:35:fb:fc:e0:
14:cd:5c:e6:2f:80:c7:b2:8c:1e:b8:ea:88:5e:d6:16:96:b5:
d0:d0:0b:dd:8e:61:83:fe:af:54:03:25:23:18:59:75:68:7b:
74:b2:17:ed:6c:3b:86:59:71:cd:7b:b0:96:67:43:6d:bd:f3:
1d:3c:20:a4:c1:6d:cf:49:e0:fa:9d:4b:a1:6b:1d:c0:36:b8:
15:01:2c:59:5c:35:3e:13:8d:31:cf:03:b7:38:93:5e:83:ec:
84:2e:14:81:82:5f:a7:33:87:af:fc:53:f1:64:62:f3:7d:9e:
42:40:55:34:66:31:41:ff:2b:35:7f:b4:d0:ad:23:5c:90:f8:
9e:1a:94:e8:4a:ee:5d:3e:ab:38:bb:5d:ef:1c:c5:bd:61:f4:
7b:27:ca:56:69:36:63:71:0e:e8:6d:52:ed:91:2d:89:f4:a0:
ec:79:10:fe:7d:b8:09:8c:fd:2e:b7:e3:de:69:39:f2:8e:b1:
3a:ac:5a:94:3d:2d:ee:25:40:6a:23:e1:eb:ea:aa:31:d2:53:
0f:7d:6f:fc:1d:79:cd:71:43:c5:cf:8b:24:1c:fc:26:42:c2:
2a:91:69:37:92:b1:7b:5b:5e:b4:57:1e:4d:c9:ed:b3:9e:e7:
ed:d8:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:11 2025 by rpki-client