Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/4UeqOidVxXtllJBCXqccAPMB0L4.roa
File: 4UeqOidVxXtllJBCXqccAPMB0L4.roa (raw, json)
Hash identifier: F4SRHUsUQrgLFfE9vd29L5EUyTp/MgFHpYK0szqzOSo=
Subject key identifier: E1:47:AA:3A:27:55:C5:7B:65:94:90:42:5E:A7:1C:00:F3:01:D0:BE
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D63535246AE1CBD20A0928FC2028FC
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/4UeqOidVxXtllJBCXqccAPMB0L4.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7040
IP address blocks: 2.57.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:35:24:6a:e1:cb:d2:0a:09:28:fc:20:28:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e147aa3a2755c57b659490425ea71c00f301d0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:75:07:35:e9:5d:94:27:5b:7d:89:ad:fd:77:
65:23:7a:2f:fd:57:f5:07:63:e5:79:38:f2:d1:7d:
1f:d2:9b:8c:36:87:f0:1b:73:7e:bd:a0:d6:d3:00:
43:a5:3c:97:d2:05:51:9c:76:f4:d0:b0:9c:8a:6f:
02:00:76:f0:ef:03:1a:81:c5:2d:c0:76:4c:8c:17:
55:d3:3f:c8:5d:e3:40:61:db:11:b4:83:c4:db:17:
ff:2a:fc:39:5d:18:48:01:ab:39:33:2a:d7:52:c8:
8d:8c:01:16:6e:b4:b2:3e:00:91:ed:45:b6:27:89:
e5:61:62:9d:48:57:cb:e8:29:fa:87:6a:d8:27:ee:
c6:1c:51:a7:d0:90:7f:8a:6c:03:2e:dc:22:ca:52:
6f:6e:4f:b8:03:63:81:57:a1:d4:70:a6:05:d6:41:
2e:7a:a6:22:3b:d5:36:19:40:d1:e7:41:b3:3e:35:
58:5a:1c:ec:3a:be:d4:50:8a:d5:18:59:f6:75:e8:
72:63:cf:f9:37:3b:3a:65:04:44:a2:b9:f7:33:e9:
9f:b5:96:71:ad:2e:77:61:b7:e4:b8:3b:1b:37:e7:
9a:e1:8d:9c:36:c9:5e:43:93:72:5f:95:22:07:05:
1e:bf:f2:7b:d3:bc:18:1e:4b:87:a0:5f:9d:35:9b:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:AA:3A:27:55:C5:7B:65:94:90:42:5E:A7:1C:00:F3:01:D0:BE
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/4UeqOidVxXtllJBCXqccAPMB0L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
19:04:ca:56:36:53:ff:fe:bc:cc:59:77:f2:6a:f5:fc:a8:45:
35:6e:2b:86:db:92:6a:59:08:3b:9d:b3:64:ac:1c:5b:ff:fe:
81:6f:3e:dd:b5:f9:8f:fd:8e:3a:5a:91:2f:c9:08:a1:03:de:
85:fb:07:54:9e:6f:74:f4:ba:06:b7:80:e1:71:5e:e7:4a:a2:
65:21:58:c0:0c:73:a5:22:93:d7:97:8e:d6:90:46:e6:75:17:
05:75:7b:c3:e5:d6:ad:80:b5:77:ec:bd:34:70:ad:5d:b7:07:
e4:7f:90:47:45:57:33:8c:61:d7:1f:44:18:43:a7:da:87:cd:
42:98:15:3d:57:e7:67:cd:21:21:97:79:20:09:30:c3:f2:5c:
c7:e9:88:dc:df:ab:71:05:6f:26:b0:43:b7:28:ec:b9:5c:5d:
91:63:9f:27:d3:31:10:62:37:96:04:33:94:d3:a2:3a:69:4e:
ef:64:a3:cb:00:c5:76:5d:24:54:b5:4a:23:80:0f:9a:33:a5:
80:db:a6:e0:71:ff:63:00:56:4c:8d:c5:f6:85:75:24:95:08:
27:c9:83:da:aa:91:0f:fe:13:3a:da:c8:ce:b6:66:30:78:27:
9e:cd:8d:01:d7:c2:bf:94:51:80:8a:8f:4c:a3:ab:f5:1c:43:
5b:bd:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:42 2025 by rpki-client