Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o4QIWiMBBySc4KfOKbRLghNMYag.roa
File: o4QIWiMBBySc4KfOKbRLghNMYag.roa (raw, json)
Hash identifier: 9CnoYORq25STvSs1pcX7FrpFleAjJpMUW6Ehve5B9Ew=
Subject key identifier: A3:84:08:5A:23:01:07:24:9C:E0:A7:CE:29:B4:4B:82:13:4C:61:A8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC2151B5C5BEF3AD8E1DEFF4CEA19F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o4QIWiMBBySc4KfOKbRLghNMYag.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209868
IP address blocks: 2.57.152.0/22 maxlen: 22
5.253.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:51:b5:c5:be:f3:ad:8e:1d:ef:f4:ce:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a384085a230107249ce0a7ce29b44b82134c61a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:41:68:cc:28:f2:b7:5d:61:7a:5b:e0:a9:
c9:ea:50:d2:6d:96:15:40:cb:5d:6b:24:48:53:75:
b8:c5:69:21:23:70:73:ff:06:6b:42:90:1b:b4:2d:
4d:31:3c:2a:1c:86:64:d5:38:3e:49:f4:7b:39:86:
8d:45:9e:82:76:d4:fc:5a:97:e8:1f:45:24:e4:be:
ca:28:1b:da:5e:67:a5:ac:ba:33:69:12:0a:fb:c8:
7c:42:c0:6c:78:93:f1:7d:39:43:8f:c9:10:aa:91:
46:e8:5b:b2:18:87:5f:06:b7:c8:ec:b5:bb:fb:b5:
9c:9a:16:2c:3b:5c:f5:e1:ba:07:84:18:3a:df:57:
fa:93:49:79:eb:90:ee:4f:56:ee:76:cd:4f:99:f9:
f5:47:d9:57:e8:f3:1d:87:9e:5f:a1:8d:2c:8c:af:
16:77:4c:cf:d0:d5:20:74:02:46:ad:d6:14:54:5c:
51:ce:b4:fd:25:f0:0d:12:35:f0:46:35:d6:04:d6:
93:1d:40:e6:de:e1:27:00:b6:6a:75:0e:e4:14:54:
5d:4f:a4:26:59:be:b9:a8:28:eb:fb:53:cc:dd:2b:
8a:19:96:45:98:81:f8:de:de:a3:b7:5b:76:6f:76:
46:f3:09:2d:ba:8e:52:df:7e:dc:c0:e0:5e:46:af:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:08:5A:23:01:07:24:9C:E0:A7:CE:29:B4:4B:82:13:4C:61:A8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o4QIWiMBBySc4KfOKbRLghNMYag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.152.0/22
5.253.228.0/22
Signature Algorithm: sha256WithRSAEncryption
23:79:c6:b9:db:37:32:81:43:6b:81:08:e7:db:ca:8e:09:22:
85:25:22:c9:3e:fc:de:cd:1a:a3:c3:2e:fa:2e:91:68:40:bc:
21:de:22:86:2e:0b:97:94:00:22:23:aa:80:1f:a2:b6:6f:98:
45:ce:bc:bd:a4:32:53:1f:35:ee:6e:6e:02:d7:ba:7a:90:3f:
c6:dd:28:c8:f5:55:5c:03:32:f3:e6:e3:f1:56:33:4d:39:5c:
c2:e4:58:7a:82:4e:c4:3f:20:4f:43:70:f0:23:b0:11:b0:06:
14:8d:33:73:fe:2e:2e:29:f5:f9:c2:26:14:0b:e9:8a:7e:d9:
fd:e1:7d:ec:c9:71:a1:5e:33:51:12:c6:71:32:33:82:2b:ad:
14:4e:c0:86:9a:e6:f6:1b:eb:89:fb:b4:a9:46:bb:0a:d2:90:
10:f0:11:4f:97:46:88:d0:72:3d:37:11:47:13:fb:fa:65:8d:
ee:36:05:95:83:93:82:54:f5:2a:83:5f:d8:3b:8b:5a:a6:14:
31:b8:81:03:51:16:76:61:ea:b8:af:ad:3c:42:54:2b:ca:a1:
a2:a1:16:09:e3:12:db:e4:3c:8f:5b:63:ff:d5:2c:03:cb:2f:
86:5e:be:4f:a1:0b:c1:bd:58:f1:5e:1f:db:b2:a2:76:d3:19:
3e:62:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:19:01 2025 by rpki-client