Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/VJnD4Hi8bvWFxVSmfACMD1Bhg8A.roa
File: VJnD4Hi8bvWFxVSmfACMD1Bhg8A.roa (raw, json)
Hash identifier: /9E5woLo4FRtLXDTsJNaS9yutryy+y6vSf15VsTEjho=
Subject key identifier: 54:99:C3:E0:78:BC:6E:F5:85:C5:54:A6:7C:00:8C:0F:50:61:83:C0
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA2042A48FDE9A27BA11BAFA727B4
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/VJnD4Hi8bvWFxVSmfACMD1Bhg8A.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48090
IP address blocks: 2.57.122.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:04:2a:48:fd:e9:a2:7b:a1:1b:af:a7:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5499c3e078bc6ef585c554a67c008c0f506183c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:ec:4f:d7:d5:7e:1b:11:5c:22:50:97:48:
e3:dd:4f:fb:5a:b4:f8:61:5a:f2:ff:31:b2:ee:78:
3d:18:3c:5d:00:3b:a2:e3:06:df:7e:4d:32:a4:bc:
3f:27:29:5a:12:fc:72:7d:55:93:45:e1:59:cb:4a:
2c:87:72:27:4e:55:e6:69:3d:d5:ee:bc:71:c6:70:
f1:db:a8:54:98:7b:cd:6c:50:1c:2d:85:92:d5:f1:
62:c3:7e:83:c6:d0:51:7d:8f:63:ac:9e:c3:a6:98:
b9:b1:80:3e:2f:d8:af:2f:51:00:d6:4c:9a:9c:a0:
38:7f:12:4a:00:97:91:4c:a2:67:4d:17:ed:20:b6:
66:fe:6a:c7:62:89:bb:91:4d:4d:a2:4f:ba:6d:f4:
4d:86:38:42:86:61:a7:7e:4a:1a:1d:d8:cf:c5:0a:
90:57:ef:dd:d3:f7:b8:97:61:f2:d1:dc:6d:4e:b7:
f0:94:26:72:a0:fc:36:f7:cd:01:3f:25:59:bf:09:
99:31:86:f6:db:09:4b:3f:cc:1b:81:d4:83:c3:b2:
4f:ec:bb:47:96:85:a2:4a:8f:3c:eb:eb:fc:3a:b7:
16:23:be:93:ac:49:0c:8d:35:18:0c:f4:54:23:65:
46:40:51:0c:79:c0:86:a5:f0:4a:a7:62:74:01:9a:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:C3:E0:78:BC:6E:F5:85:C5:54:A6:7C:00:8C:0F:50:61:83:C0
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/VJnD4Hi8bvWFxVSmfACMD1Bhg8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.142.192.0/24
80.94.92.0/24
Signature Algorithm: sha256WithRSAEncryption
72:69:6f:5a:b2:cd:df:74:47:60:7e:5f:a7:08:28:da:59:18:
da:a0:7c:73:3e:b5:2e:df:54:88:4b:74:5b:fa:6d:09:07:9a:
93:a2:e8:f4:ed:0f:65:60:46:e7:26:3b:82:1d:fc:fa:80:02:
8c:c7:42:f4:f5:36:19:f1:ad:e3:62:0e:93:92:6e:85:64:90:
8c:24:31:ad:44:5c:3b:81:7e:bf:cb:77:0a:68:b8:e6:3e:73:
6d:c7:bd:1f:a5:09:b7:a4:df:59:f7:7b:97:01:82:f2:31:e2:
75:be:24:24:fe:66:7d:28:00:78:dc:e8:63:47:08:0b:89:4f:
78:ec:53:e2:6f:40:4f:cd:45:13:e1:ab:ba:c7:3c:78:32:17:
57:9a:66:df:ff:7b:9f:42:2b:71:52:aa:ba:ea:9b:30:9f:35:
10:d5:33:54:8c:f0:5a:b9:86:ad:85:ca:d2:c9:6e:1a:1f:57:
d5:3e:c6:ea:f3:80:41:60:a7:11:3f:fa:15:02:54:76:c9:61:
5e:28:cd:b0:7b:32:02:e6:8c:d4:79:0a:db:61:52:49:a4:95:
5c:0d:e0:7c:75:e7:21:8e:2d:6c:d0:9b:e0:ce:d4:c7:b4:02:
54:13:9a:b0:cf:8b:cb:c9:a1:55:f3:cc:ee:c7:89:0a:e9:45:
5b:e7:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:09 2025 by rpki-client