Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/T16RzfzL3NgSrvlni8f0Ncin41U.roa
File: T16RzfzL3NgSrvlni8f0Ncin41U.roa (raw, json)
Hash identifier: SbiTOB/vQz3mE+DkCRavx9UAJ1TkMud+HCgDnKFWSdc=
Subject key identifier: 4F:5E:91:CD:FC:CB:DC:D8:12:AE:F9:67:8B:C7:F4:35:C8:A7:E3:55
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489EB3E430C77DE687C1050CC76D19
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/T16RzfzL3NgSrvlni8f0Ncin41U.roa
Signing time: Thu 02 Jan 2025 13:50:58 +0000
ROA not before: Thu 02 Jan 2025 13:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213122
IP address blocks: 2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:9e:b3:e4:30:c7:7d:e6:87:c1:05:0c:c7:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5e91cdfccbdcd812aef9678bc7f435c8a7e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:0d:4f:9c:f0:57:53:01:95:d3:4f:86:9c:
c9:58:50:7b:45:3a:db:9f:5c:9c:78:5f:22:62:5d:
18:0f:6b:ff:31:3a:0a:bc:97:ac:74:26:d3:de:a3:
4d:e9:99:89:e7:b7:ba:c7:1f:52:cc:02:09:13:73:
d1:e7:75:53:22:b3:d4:12:f8:cc:aa:87:cd:72:f2:
c3:c6:95:5c:25:4e:2d:a7:6a:5d:64:94:89:91:1c:
c2:91:1d:be:4e:34:9b:2e:d5:6c:e1:ef:1e:14:01:
0d:c0:8b:7d:4a:ea:f6:9a:6b:bf:5b:be:f4:5d:6c:
ca:5d:cd:5d:e5:38:6c:26:86:77:8f:2b:87:91:2f:
32:9d:5d:9f:e9:7b:10:d8:87:f4:34:92:65:bf:b3:
a8:88:e5:d0:40:e4:04:b0:ee:45:a6:93:63:5d:ea:
ba:96:ac:75:d1:5b:64:f8:df:cf:ec:b7:41:d4:82:
dd:3b:e9:e1:10:f1:73:d2:55:b2:83:00:e1:80:64:
cf:4c:4b:74:be:29:2f:f6:49:f0:97:7a:06:72:97:
88:4f:92:05:cb:3b:78:ea:62:ed:95:ee:24:62:b1:
71:69:50:19:21:80:77:e2:2d:f0:3f:d2:9f:55:08:
c3:4b:57:18:1b:e7:a8:b7:12:44:a1:53:07:03:b1:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:91:CD:FC:CB:DC:D8:12:AE:F9:67:8B:C7:F4:35:C8:A7:E3:55
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/T16RzfzL3NgSrvlni8f0Ncin41U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0-2.58.202.255
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3d:3b:6e:e3:ae:75:fa:35:de:c3:dc:9d:09:a5:f9:6e:d9:
62:02:56:a2:d3:93:cd:98:16:a5:12:02:ed:a4:65:e4:b6:ff:
39:03:a1:27:6a:91:0a:2f:1b:65:eb:06:48:6b:3d:fa:d7:b8:
82:2c:c3:2e:10:06:b0:71:f5:83:ee:bc:8d:1b:11:1b:8e:5d:
95:8a:d0:b2:ab:66:2b:fb:3c:d1:61:4a:8a:7d:48:43:d2:d7:
73:2d:aa:61:f6:83:48:2a:72:1f:c9:7e:ab:61:81:13:81:b1:
01:38:22:69:99:c1:48:5d:e3:40:40:fa:2f:4b:ff:06:2c:90:
51:ee:c6:f2:3f:86:15:41:ad:50:86:db:99:23:54:44:52:01:
d7:cf:1c:db:a7:78:08:80:ef:1d:11:3a:36:b2:2e:1a:eb:9f:
48:7f:78:61:a3:b6:fd:75:56:95:5a:0c:54:6d:6e:86:1c:0e:
c8:93:e0:fd:8e:24:7d:86:f1:75:61:0a:e0:ce:e9:21:18:eb:
a4:e2:86:60:ba:a8:80:19:5c:5d:06:63:0b:58:a6:04:cc:5e:
d2:78:e8:f7:57:86:a6:67:7c:a7:8c:3d:d8:14:9a:ea:bb:9d:
d7:5f:8d:19:e9:57:8a:1b:35:31:1d:9d:21:2e:4d:c3:67:da:
af:71:98:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:35 2025 by rpki-client