Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/xBWezcOjf0HLBQBmbtDyglq06CU.roa
File: xBWezcOjf0HLBQBmbtDyglq06CU.roa (raw, json)
Hash identifier: dlL0ZUaafY/fyT+lFkSao0d0hLl5qFvGU+tiAKR4bcA=
Subject key identifier: C4:15:9E:CD:C3:A3:7F:41:CB:05:00:66:6E:D0:F2:82:5A:B4:E8:25
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019425FD487C5488D63C1ABF678A9703B08F
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/xBWezcOjf0HLBQBmbtDyglq06CU.roa
Signing time: Thu 02 Jan 2025 07:49:03 +0000
ROA not before: Thu 02 Jan 2025 07:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6085
IP address blocks: 57.0.0.0/16 maxlen: 16
57.2.0.0/16 maxlen: 16
57.3.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:48:7c:54:88:d6:3c:1a:bf:67:8a:97:03:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4159ecdc3a37f41cb0500666ed0f2825ab4e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:0d:4b:ea:21:4e:ca:72:f9:51:b0:a8:84:
51:70:aa:12:a9:ab:e5:8e:72:d3:cf:ba:30:b3:33:
4e:1d:00:55:d7:42:22:18:4b:aa:1e:aa:dc:c8:23:
14:f8:a4:5b:d3:d9:2b:2d:4e:e7:a2:f1:c8:44:fc:
38:64:c8:40:66:29:bf:fd:76:02:da:b5:94:3c:ed:
25:67:f8:35:80:7f:b0:1e:8d:ae:52:f0:7e:6d:7d:
90:50:e3:35:e8:a0:91:dd:7d:c7:4d:3f:9d:44:8f:
08:7f:34:6d:c7:1f:85:03:7b:f8:01:05:35:4f:7e:
7f:ff:b9:b1:be:c0:dc:4b:9a:42:eb:0d:91:bc:63:
7c:0c:43:8e:7d:ff:c7:f0:af:d9:70:df:8f:19:71:
a7:84:14:ef:ab:62:dd:87:6b:80:5d:43:b9:b5:47:
f4:67:78:bb:2e:e1:b6:e2:75:b3:74:a2:cc:fe:11:
c6:da:98:cf:b8:70:85:66:55:17:c0:f4:0d:3c:9e:
b7:6b:dc:a2:82:3b:e2:6a:40:86:d2:35:5c:8b:0e:
41:9a:51:01:88:ec:01:ea:47:56:2f:58:02:6d:ee:
08:31:fc:02:75:b2:92:bd:db:6f:9e:70:28:9c:93:
0f:66:c7:94:66:58:41:18:e1:3f:bb:18:99:b7:5c:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:15:9E:CD:C3:A3:7F:41:CB:05:00:66:6E:D0:F2:82:5A:B4:E8:25
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/xBWezcOjf0HLBQBmbtDyglq06CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.0.0.0/16
57.2.0.0/15
Signature Algorithm: sha256WithRSAEncryption
05:f2:09:27:be:92:e3:da:ad:67:b7:cb:78:b7:6a:81:b3:2e:
c8:21:b8:8a:8e:53:91:2e:6c:cf:ae:41:22:a7:1f:64:fd:cc:
ef:9f:0b:1d:03:fa:d7:d4:1d:47:d4:3f:28:c4:97:a9:31:b7:
d8:1a:0c:e4:88:a3:d4:0e:2c:a1:f1:bd:0e:1c:88:44:94:2c:
b9:6c:34:4a:4b:10:e8:b0:13:97:b8:ff:c0:ed:e9:00:26:e8:
b5:2a:41:e1:73:7e:2e:81:c4:9c:db:6b:e2:d8:f5:d0:62:9c:
a4:e7:d5:51:83:9d:ae:44:fd:05:a2:67:a0:ce:f7:b9:5c:0f:
5f:40:b5:8d:b9:d7:42:ab:e9:32:11:5b:e6:f3:6b:e8:6c:69:
2a:e9:87:ee:f5:27:54:56:af:97:a0:5c:90:98:75:86:98:14:
e3:07:3e:ea:12:e8:4a:a5:44:20:fc:44:e9:ea:af:c7:13:2b:
97:6f:e7:fc:f6:85:3f:f4:57:9b:9c:f6:8d:5e:29:80:80:bf:
ec:fa:5f:1a:e3:a9:fa:61:fa:2f:35:b9:2b:53:6b:af:0b:8b:
3d:47:a7:e4:3a:ce:0b:97:96:6c:23:7e:41:f3:1e:ed:39:a1:
02:82:88:26:2d:f6:71:c3:74:9f:95:5e:17:2e:e4:20:9d:de:
ae:11:a4:8b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQl/Uh8VIjWPBq/Z4qXA7CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTU4ZTczMmEwZjcxZjRmMDEzMDJkNjIxNjcxNzNiZDli
MTdjYzEwHhcNMjUwMTAyMDc0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDE1OWVjZGMzYTM3ZjQxY2IwNTAwNjY2ZWQwZjI4MjVhYjRlODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZQNS+ohTspy+VGwqIRRcKoSqavl
jnLTz7owszNOHQBV10IiGEuqHqrcyCMU+KRb09krLU7novHIRPw4ZMhAZim//XYC
2rWUPO0lZ/g1gH+wHo2uUvB+bX2QUOM16KCR3X3HTT+dRI8IfzRtxx+FA3v4AQU1
T35//7mxvsDcS5pC6w2RvGN8DEOOff/H8K/ZcN+PGXGnhBTvq2Ldh2uAXUO5tUf0
Z3i7LuG24nWzdKLM/hHG2pjPuHCFZlUXwPQNPJ63a9yigjviakCG0jVciw5BmlEB
iOwB6kdWL1gCbe4IMfwCdbKSvdtvnnAonJMPZseUZlhBGOE/uxiZt1zPfwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFMQVns3Do39BywUAZm7Q8oJatOglMB8GA1UdIwQY
MBaAFF/ljnMqD3H08BMC1iFnFzvZsXzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMt
YjZlNThmOWM4MmUxLzEveEJXZXpjT2pmMEhMQlFCbWJ0RHlnbHEwNkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMtYjZlNThmOWM4MmUx
LzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAOQADAwE5
AjANBgkqhkiG9w0BAQsFAAOCAQEABfIJJ76S49qtZ7fLeLdqgbMuyCG4io5TkS5s
z65BIqcfZP3M758LHQP619QdR9Q/KMSXqTG32BoM5Iij1A4sofG9DhyIRJQsuWw0
SksQ6LATl7j/wO3pACbotSpB4XN+LoHEnNtr4tj10GKcpOfVUYOdrkT9BaJnoM73
uVwPX0C1jbnXQqvpMhFb5vNr6GxpKumH7vUnVFavl6BckJh1hpgU4wc+6hLoSqVE
IPxE6eqvxxMrl2/n/PaFP/RXm5z2jV4pgIC/7PpfGuOp+mH6LzW5K1NrrwuLPUen
5DrOC5eWbCN+QfMe7TmhAoKIJi32ccN0n5VeFy7kIJ3erhGkiw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:45 2025 by rpki-client