Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2gXRDnpc8lM8r4OeOI8glTe5FHg.roa
File: 2gXRDnpc8lM8r4OeOI8glTe5FHg.roa (raw, json)
Hash identifier: NKkTSFND/HdNiLIdav2HOjQrcDT0sm23gJIMEWvwyOs=
Subject key identifier: DA:05:D1:0E:7A:5C:F2:53:3C:AF:83:9E:38:8F:20:95:37:B9:14:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824659752D2A9D0025B725E1BE72421
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2gXRDnpc8lM8r4OeOI8glTe5FHg.roa
Signing time: Thu 02 Jan 2025 17:51:01 +0000
ROA not before: Thu 02 Jan 2025 17:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21738
IP address blocks: 2.59.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:65:97:52:d2:a9:d0:02:5b:72:5e:1b:e7:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da05d10e7a5cf2533caf839e388f209537b91478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:02:2e:28:f7:a6:5c:3c:8f:18:ca:fc:58:
b8:3c:1b:0e:15:d6:bb:f1:07:f0:40:70:8d:7c:93:
c3:36:e5:43:5a:ce:2f:e0:92:b2:8d:eb:81:1f:91:
4c:48:a7:34:3a:91:0e:08:08:6d:b3:6e:ba:7b:9d:
c6:d7:97:41:9c:69:8c:2b:01:ae:60:99:42:0d:34:
6a:75:5a:15:18:00:c3:20:25:0d:cd:05:93:b8:8c:
61:0b:1b:da:1c:db:3b:0e:fe:ef:cf:11:67:c2:a7:
91:43:22:e3:f4:82:85:e9:5e:88:bb:0c:00:88:13:
3f:2e:ed:91:87:0b:42:b4:ed:38:54:3f:75:7a:dd:
8a:3d:4d:37:00:e0:91:81:89:7a:32:33:7e:81:38:
d5:85:1d:8d:e8:c5:43:43:6c:74:94:2e:29:04:e4:
36:35:a9:37:cb:7f:af:a4:de:86:3e:44:92:fe:ab:
05:59:fb:f6:d7:f3:d4:d0:c1:a1:2f:fe:15:b9:32:
72:71:dc:35:e3:75:dd:88:8c:7f:ae:3e:13:e9:c7:
16:df:55:c1:a2:3d:79:5e:7b:6d:39:02:6b:08:66:
07:ce:58:22:c6:4b:72:1a:a4:36:35:44:88:99:3a:
0a:f7:33:02:39:86:41:fe:ba:79:09:7a:94:98:28:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:D1:0E:7A:5C:F2:53:3C:AF:83:9E:38:8F:20:95:37:B9:14:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2gXRDnpc8lM8r4OeOI8glTe5FHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:72:04:ad:1f:53:8d:3e:22:8a:c0:6a:ff:35:80:7a:30:75:
f9:6a:bb:df:28:55:a8:fe:41:a6:a6:a6:4e:56:92:36:dd:59:
4d:7c:6a:dd:31:4a:f2:9a:0c:2c:3d:74:0b:0e:ae:9e:2e:83:
9f:69:ee:8c:98:77:9d:9c:f2:ce:04:46:48:1b:f3:ea:27:66:
4f:99:20:0d:82:2c:e9:fd:40:07:15:f2:54:54:60:91:e2:f6:
26:bd:82:0a:dd:aa:55:35:9f:9e:10:51:63:77:a5:00:52:57:
2a:07:97:78:07:87:25:05:15:63:56:c5:22:89:18:b1:96:92:
a5:22:5c:5b:58:22:04:86:b9:af:03:28:39:3f:43:de:bc:8f:
8e:56:d3:ab:c7:03:6f:49:da:dd:08:cc:46:a3:a9:cb:b1:66:
01:23:be:9b:d2:e3:2d:e1:0e:55:d8:57:7e:ed:45:d3:67:43:
0c:4d:d7:e6:a2:a9:13:91:5f:c3:89:37:73:27:36:7a:72:01:
17:29:ea:9d:04:c2:fd:e2:69:a9:22:7f:7d:8e:77:81:35:fa:
28:16:b1:d0:89:9f:20:b0:a5:cb:5c:24:fa:f5:a4:9e:6c:49:
4b:27:cf:11:50:71:08:4a:9c:ce:0c:54:d4:06:e9:c3:9f:1d:
c3:12:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:36 2025 by rpki-client