Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/sd0jlwypX7mTRSVDcmbA2KcPRVw.roa
File: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (raw, json)
Hash identifier: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=
Subject key identifier: B1:DD:23:97:0C:A9:5F:B9:93:45:25:43:72:66:C0:D8:A7:0F:45:5C
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019420D64EB9DB6BE03C07BFF7934C262692
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/sd0jlwypX7mTRSVDcmbA2KcPRVw.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 2.59.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4e:b9:db:6b:e0:3c:07:bf:f7:93:4c:26:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1dd23970ca95fb9934525437266c0d8a70f455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:76:de:a4:66:38:a5:23:f8:59:81:b0:f8:
a3:d4:e9:7b:cb:3f:ca:95:67:7b:5c:ea:23:f5:ff:
79:0e:f7:4b:9a:be:b8:b0:a1:79:3b:68:a2:15:1b:
86:a7:a3:33:aa:4e:e5:73:17:0f:a3:0d:81:13:5c:
5d:7e:a4:fe:bb:cf:d9:4c:23:c3:37:3d:c0:79:9c:
1c:26:25:51:9c:24:73:e0:5f:1f:53:d7:66:21:38:
8d:a5:ca:d1:bc:58:ba:56:f3:be:95:25:0e:53:bf:
c2:82:fb:91:80:a3:0d:98:db:e7:fd:2a:37:66:b7:
82:d5:ad:f3:76:bb:c9:e5:37:d6:c3:70:14:75:7b:
0f:74:e4:ae:40:3a:21:24:51:12:59:f4:9c:25:bf:
4d:d2:60:b2:70:1c:34:5c:3c:5d:fd:28:bc:22:44:
04:98:be:41:9f:6d:f9:22:73:c1:88:68:84:9b:fa:
d0:c4:e8:9b:6d:dd:84:b6:02:d4:6a:c5:a4:a3:84:
fa:f9:47:89:d6:78:8f:1e:a8:da:da:2c:ff:34:4e:
a7:a9:73:b9:76:24:d5:f0:75:20:f0:b6:27:e5:bd:
9e:9c:90:01:85:b9:a3:ab:82:05:73:b8:9c:94:bc:
77:b1:61:dc:da:be:79:8e:86:4b:92:f5:3e:2d:ef:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DD:23:97:0C:A9:5F:B9:93:45:25:43:72:66:C0:D8:A7:0F:45:5C
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/sd0jlwypX7mTRSVDcmbA2KcPRVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.119.0/24
Signature Algorithm: sha256WithRSAEncryption
68:18:26:ab:64:01:47:8c:3a:ec:b4:6b:91:21:33:70:ec:f4:
23:78:f4:95:8b:53:41:ce:e5:49:67:e3:5d:20:ee:ee:7b:0a:
9f:5e:90:ca:c9:4d:3c:73:05:dc:19:37:cc:23:f9:1f:ec:a6:
7f:82:57:b1:cf:93:17:6e:ec:83:b2:b2:5b:7f:6a:f4:a7:a3:
eb:2f:57:6b:97:fe:43:80:ae:e6:aa:72:ec:c5:05:47:cc:6d:
36:47:b4:df:9d:33:d4:b4:f5:0b:4c:60:1d:c1:10:9c:23:fd:
25:69:0b:25:dd:63:94:b8:64:6c:a5:06:90:5d:be:3f:15:09:
91:2d:05:e1:e9:58:ee:78:89:db:91:14:37:62:3b:d1:ef:8c:
45:5b:55:8e:8a:58:05:ac:46:6d:e2:f9:3d:d3:c8:43:d2:ef:
2b:62:e6:5c:b1:4b:0e:28:b4:5f:49:c1:47:05:c0:3e:26:23:
c7:f9:d9:c4:93:4e:42:28:8f:5e:05:5e:86:43:77:2a:b4:d7:
a5:07:33:a9:b5:6f:65:67:c5:46:16:a4:ce:2b:ac:00:9c:58:
4b:ac:a6:19:00:52:09:73:e8:9b:03:95:d0:21:72:13:3c:e2:
ed:03:a4:be:d0:fe:0e:76:e5:48:3c:77:f8:b8:d4:8e:3b:de:
11:58:2d:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1k6522vgPAe/95NMJiaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm
YWM5YWUwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWRkMjM5NzBjYTk1ZmI5OTM0NTI1NDM3MjY2YzBkOGE3MGY0NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlp23qRmOKUj+FmBsPij1Ol7yz/K
lWd7XOoj9f95DvdLmr64sKF5O2iiFRuGp6Mzqk7lcxcPow2BE1xdfqT+u8/ZTCPD
Nz3AeZwcJiVRnCRz4F8fU9dmITiNpcrRvFi6VvO+lSUOU7/CgvuRgKMNmNvn/So3
ZreC1a3zdrvJ5TfWw3AUdXsPdOSuQDohJFESWfScJb9N0mCycBw0XDxd/Si8IkQE
mL5Bn235InPBiGiEm/rQxOibbd2EtgLUasWko4T6+UeJ1niPHqja2iz/NE6nqXO5
diTV8HUg8LYn5b2enJABhbmjq4IFc7iclLx3sWHc2r55joZLkvU+Le/7SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHdI5cMqV+5k0UlQ3JmwNinD0VcMB8GA1UdIwQY
MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt
MjY3NjY5ZjM1NjQ4LzEvc2Qwamx3eXBYN21UUlNWRGNtYkEyS2NQUlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4
LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjt3MA0G
CSqGSIb3DQEBCwUAA4IBAQBoGCarZAFHjDrstGuRITNw7PQjePSVi1NBzuVJZ+Nd
IO7uewqfXpDKyU08cwXcGTfMI/kf7KZ/glexz5MXbuyDsrJbf2r0p6PrL1drl/5D
gK7mqnLsxQVHzG02R7TfnTPUtPULTGAdwRCcI/0laQsl3WOUuGRspQaQXb4/FQmR
LQXh6VjueInbkRQ3YjvR74xFW1WOilgFrEZt4vk908hD0u8rYuZcsUsOKLRfScFH
BcA+JiPH+dnEk05CKI9eBV6GQ3cqtNelBzOptW9lZ8VGFqTOK6wAnFhLrKYZAFIJ
c+ibA5XQIXITPOLtA6S+0P4OduVIPHf4uNSOO94RWC09
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:16 2025 by rpki-client