Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa
File: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (raw, json)
Hash identifier: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=
Subject key identifier: 3B:CD:83:F7:E4:A5:E5:3B:8F:03:9D:58:0C:C8:DD:DE:81:10:FC:1C
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA043A48A7404041D98B19D37A3A4
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 2.57.123.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.138.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a0:43:a4:8a:74:04:04:1d:98:b1:9d:37:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bcd83f7e4a5e53b8f039d580cc8ddde8110fc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:5c:86:5f:78:08:cc:9a:e0:c9:5e:aa:fd:
bd:90:f3:73:96:69:b5:02:6f:65:f7:ea:fe:0f:de:
9e:3c:fd:bd:be:5d:7a:c8:b3:02:e8:ee:d8:28:4a:
1e:77:5d:d0:b8:0b:90:05:af:bc:d2:66:94:7d:24:
1a:e2:17:9f:0c:da:48:2e:3c:70:73:5e:de:e5:89:
22:bf:c0:63:dd:27:b7:ac:91:02:b0:a0:4f:6f:b2:
c8:54:f4:28:f4:78:a4:e8:b0:27:6d:28:77:0e:ce:
20:d4:90:26:70:b6:be:bc:6f:fe:0d:12:4c:6d:8f:
f8:e6:55:10:56:37:85:5f:fc:dc:f7:1d:f4:4a:0e:
18:be:7c:ee:0b:f5:d1:03:62:cc:94:40:af:fb:83:
f2:aa:89:e1:5d:05:92:a5:14:46:de:15:73:fa:8a:
13:90:f0:fa:a8:ec:e5:99:6f:76:a9:df:4d:e2:ab:
6a:47:40:8d:ae:f5:eb:d3:25:c6:18:10:db:dd:8c:
61:05:2c:1c:d0:29:e1:3a:3f:1e:de:b6:ca:8a:7a:
23:d4:6f:cc:57:16:81:fe:a6:b0:31:e6:f8:ca:6e:
e8:40:63:e5:81:59:1c:1f:a7:0f:c0:79:62:34:a1:
1e:3a:02:1f:c7:77:fe:eb:68:45:1f:ed:7f:f2:c4:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:83:F7:E4:A5:E5:3B:8F:03:9D:58:0C:C8:DD:DE:81:10:FC:1C
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.123.0/24
45.134.50.0/24
45.138.99.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:69:de:a8:05:a1:17:11:09:72:3e:ca:9e:5f:24:b6:9b:
3c:de:15:bf:5d:5d:00:b9:4b:4c:28:6b:db:72:d0:a4:5e:cc:
c7:57:2e:61:c6:d2:3c:c9:2d:8f:c6:ec:08:d7:ce:8f:88:15:
ea:1d:9d:6c:19:37:b2:81:1a:a1:d3:f2:f8:72:4c:8f:b2:66:
b0:73:67:27:32:05:ae:69:42:45:5e:a0:9a:73:1d:d5:57:a8:
1b:c3:d6:bd:e0:1c:05:55:1c:69:52:39:e8:86:89:35:d5:39:
29:9a:4c:dc:e7:e1:cb:90:13:9f:d8:f8:c5:01:1c:b9:43:19:
42:c2:b7:bc:08:0c:3e:2b:78:49:ae:23:b8:41:ec:bd:d9:4b:
94:eb:e6:06:20:52:fb:3b:c6:23:3f:db:75:e6:b0:de:ca:90:
d3:b7:39:ad:89:4a:90:1f:7c:2a:5d:21:72:5e:95:ef:08:18:
a0:a0:f3:d5:76:7b:b6:af:81:cb:c1:80:15:d0:9c:16:4e:4d:
64:ae:16:84:13:66:6e:60:41:4c:2e:ed:d8:1a:97:fe:5f:b1:
ce:e6:d5:df:f6:29:fe:12:04:db:01:7c:8b:8c:3c:8b:3c:88:
05:e2:45:47:74:1a:81:2b:22:a4:f4:94:45:78:27:e6:eb:42:
b0:41:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:58 2025 by rpki-client