Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/P2eI8lFbO3EB4rnH9RosaYao518.roa
File: P2eI8lFbO3EB4rnH9RosaYao518.roa (raw, json)
Hash identifier: DLbxiBSwnS3PBLCYQnIN7MRBwOqOxKrRcI1fc/KxD7E=
Subject key identifier: 3F:67:88:F2:51:5B:3B:71:01:E2:B9:C7:F5:1A:2C:69:86:A8:E7:5F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C1B3B3A50DDE7C25DF064398D9F7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/P2eI8lFbO3EB4rnH9RosaYao518.roa
Signing time: Thu 02 Jan 2025 17:54:41 +0000
ROA not before: Thu 02 Jan 2025 17:54:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60291
IP address blocks: 87.229.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c1:b3:b3:a5:0d:de:7c:25:df:06:43:98:d9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6788f2515b3b7101e2b9c7f51a2c6986a8e75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:89:25:0e:22:9f:2a:9e:98:4a:33:f0:12:
ee:a9:b7:99:30:1a:02:9b:43:38:16:9c:c4:9d:64:
1e:1b:83:c5:27:94:39:10:5b:71:39:03:02:ee:76:
1c:60:8e:79:e4:5c:2e:58:e8:13:88:03:ec:a4:7b:
45:f7:79:38:eb:ac:fd:c7:03:1a:c2:d2:a9:75:1e:
3c:50:d2:c5:2f:2c:dc:e7:5d:09:3b:09:35:3e:e4:
dd:37:92:13:41:a4:1c:88:21:18:26:6f:15:05:8a:
d3:ef:e5:39:05:f1:ef:0c:9c:d8:d5:b4:1d:ea:4d:
2f:a5:6d:c6:9a:d4:b8:86:3c:5c:10:4c:f8:7b:36:
71:50:bd:5e:43:fd:b8:83:72:80:39:c6:fe:e6:b1:
90:2c:52:ab:2e:93:fd:96:48:af:62:27:b1:b8:b4:
ec:37:16:bf:71:0d:ac:52:70:fe:d4:d0:bc:88:fa:
fd:cc:d9:b6:a8:ec:87:4b:87:1f:4a:1c:44:af:c9:
4c:8c:4c:54:6a:b7:38:52:de:fb:11:74:52:21:79:
95:9f:c1:cf:14:67:77:47:42:bd:06:f6:6a:a5:11:
e7:3a:83:6c:1a:64:22:90:03:ec:e4:c2:d4:db:59:
b8:21:37:fd:bc:12:e3:6d:59:87:32:e6:12:aa:7d:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:88:F2:51:5B:3B:71:01:E2:B9:C7:F5:1A:2C:69:86:A8:E7:5F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/P2eI8lFbO3EB4rnH9RosaYao518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:15:b4:98:3e:c4:a1:2b:75:be:f5:90:48:90:2d:64:d0:
2a:34:67:35:db:8d:a9:80:9f:0a:df:70:92:2f:31:37:d9:9e:
62:bc:b4:68:a4:98:35:ae:37:52:56:3f:0f:4f:94:4a:31:2f:
1f:81:4a:e2:aa:d5:f1:69:66:cc:fb:c7:f2:a7:33:d3:c6:1d:
49:b6:af:de:22:b3:0a:dc:cb:29:e1:6f:15:fc:9f:99:02:19:
f9:33:13:43:d5:be:d7:7e:79:9a:b6:c3:a1:83:08:3a:4d:bd:
b7:29:6d:0f:63:5f:97:3d:15:ed:1e:b2:d2:9a:8f:24:7d:8c:
01:81:6a:1f:e0:c2:51:40:ad:f3:f8:af:ae:b4:a2:40:9c:e5:
86:1d:c3:81:8a:53:b5:51:e1:71:b9:cb:9c:b9:c9:09:21:71:
5c:b0:24:8d:5a:e6:01:03:ca:82:6f:f1:b6:1d:3b:a3:cc:5c:
0a:ad:99:b6:28:10:84:a8:4b:b3:9f:f2:cf:c9:2f:4c:70:c8:
ed:66:91:32:46:48:22:6a:2c:f3:66:2b:5a:ed:1a:8e:60:a4:
a1:b7:01:0d:e0:b3:14:26:81:4a:03:3b:65:e6:2e:e1:18:32:
a8:30:a3:b4:74:3d:c7:55:b1:52:7c:71:3f:32:d9:1e:95:56:
92:63:57:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ8Gzs6UN3nwl3wZDmNn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMTAyMTc1NDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjY3ODhmMjUxNWIzYjcxMDFlMmI5YzdmNTFhMmM2OTg2YThlNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjyJJQ4inyqemEoz8BLuqbeZMBoC
m0M4FpzEnWQeG4PFJ5Q5EFtxOQMC7nYcYI555FwuWOgTiAPspHtF93k466z9xwMa
wtKpdR48UNLFLyzc510JOwk1PuTdN5ITQaQciCEYJm8VBYrT7+U5BfHvDJzY1bQd
6k0vpW3GmtS4hjxcEEz4ezZxUL1eQ/24g3KAOcb+5rGQLFKrLpP9lkivYiexuLTs
Nxa/cQ2sUnD+1NC8iPr9zNm2qOyHS4cfShxEr8lMjExUarc4Ut77EXRSIXmVn8HP
FGd3R0K9BvZqpRHnOoNsGmQikAPs5MLU21m4ITf9vBLjbVmHMuYSqn1nWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9niPJRWztxAeK5x/UaLGmGqOdfMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvUDJlSThsRmJPM0VCNHJuSDlSb3NhWWFvNTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+U5MA0G
CSqGSIb3DQEBCwUAA4IBAQAPHRW0mD7EoSt1vvWQSJAtZNAqNGc1242pgJ8K33CS
LzE32Z5ivLRopJg1rjdSVj8PT5RKMS8fgUriqtXxaWbM+8fypzPTxh1Jtq/eIrMK
3Msp4W8V/J+ZAhn5MxND1b7XfnmatsOhgwg6Tb23KW0PY1+XPRXtHrLSmo8kfYwB
gWof4MJRQK3z+K+utKJAnOWGHcOBilO1UeFxucucuckJIXFcsCSNWuYBA8qCb/G2
HTujzFwKrZm2KBCEqEuzn/LPyS9McMjtZpEyRkgiaizzZita7RqOYKShtwEN4LMU
JoFKAztl5i7hGDKoMKO0dD3HVbFSfHE/MtkelVaSY1eQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:21:29 2025 by rpki-client