Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/SEzIpQlEdNO7qpFJFox8nqfBkU8.roa
File: SEzIpQlEdNO7qpFJFox8nqfBkU8.roa (raw, json)
Hash identifier: DyyJf3v7/p2uLPbLbI0Ax8tgSfmYrSUpfCXMF5ZFV0U=
Subject key identifier: 48:4C:C8:A5:09:44:74:D3:BB:AA:91:49:16:8C:7C:9E:A7:C1:91:4F
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 0195723F833C21E1104D9E3343CD1BE71F3A
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/SEzIpQlEdNO7qpFJFox8nqfBkU8.roa
Signing time: Fri 07 Mar 2025 20:15:19 +0000
ROA not before: Fri 07 Mar 2025 20:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210017
IP address blocks: 2.57.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:72:3f:83:3c:21:e1:10:4d:9e:33:43:cd:1b:e7:1f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Mar 7 20:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484cc8a5094474d3bbaa9149168c7c9ea7c1914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:24:95:70:b6:98:c5:e7:05:0e:e7:0a:e1:
61:8f:62:6c:9f:2a:89:7d:8b:9a:a2:5f:55:06:56:
18:72:de:27:b3:fd:2c:49:a4:93:6f:95:a7:cb:fa:
a9:62:11:6d:43:c0:55:b2:19:e2:07:92:80:14:a7:
8b:59:15:48:c0:1f:92:43:55:9b:8c:f4:9e:f0:0f:
9c:e1:09:e0:a7:96:6f:57:5d:ad:ef:00:a8:91:e6:
d3:d1:4f:67:4a:95:b4:44:c6:29:bd:d1:20:be:08:
f5:af:63:c2:20:aa:be:fe:fb:cb:c5:ea:eb:c8:52:
5d:eb:00:d2:5f:c3:31:b0:86:96:30:6f:3b:bd:8d:
88:98:d5:40:d2:ac:3f:26:3f:e9:93:a1:e1:4c:e2:
fc:ba:58:e0:b4:7a:94:9f:ea:96:81:26:dd:20:37:
69:3b:c0:ce:12:3b:b4:5d:47:a2:15:de:5d:eb:73:
4c:51:40:1c:6f:71:9a:be:33:54:cc:bb:f6:ce:15:
df:07:63:0b:1a:3b:7d:50:dc:20:6a:43:a8:04:a2:
39:3a:b2:2a:be:c7:f9:a4:9c:f6:68:87:62:80:d8:
3d:cb:43:15:3f:3f:9f:88:52:2d:f1:27:3e:34:41:
db:09:53:47:b1:dd:c1:5f:d9:a0:f0:d3:a4:05:a7:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:C8:A5:09:44:74:D3:BB:AA:91:49:16:8C:7C:9E:A7:C1:91:4F
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/SEzIpQlEdNO7qpFJFox8nqfBkU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.43.0/24
Signature Algorithm: sha256WithRSAEncryption
17:52:a4:e1:06:7d:3c:24:3f:dd:19:2c:ac:a0:b5:1b:96:ef:
f0:6d:07:43:5b:70:1f:80:a9:e8:ee:5a:b4:8a:af:00:a9:e7:
cb:6b:87:8d:73:cc:52:be:3a:a6:0a:9f:7c:81:66:d5:cc:5e:
21:f1:c0:67:00:37:88:82:7a:6d:88:0b:92:c7:ec:06:86:65:
8b:2c:1a:aa:17:ff:a9:6c:78:53:b9:14:c7:39:f4:35:fd:d3:
50:72:e4:eb:1b:ea:95:e9:cf:da:e2:29:81:e8:c0:69:a0:8e:
5d:e3:5b:0b:c3:f9:75:00:24:4a:31:4d:83:7e:a2:f7:42:91:
96:a6:3c:1d:24:31:6e:0b:05:fc:aa:a2:63:05:07:87:a5:3d:
4b:cf:58:dc:60:d7:e0:02:13:9d:e5:ab:0f:e6:a2:f8:b3:8a:
c7:9f:eb:f6:02:86:ba:fc:16:e9:bf:82:c3:cc:52:8a:af:e0:
9b:a0:12:4b:56:81:0e:1f:a0:5a:ed:36:f9:db:24:d1:87:12:
1a:c1:30:63:cb:b2:f4:2e:01:3a:83:39:c0:96:0f:a7:70:17:
76:d5:b5:2d:d2:1a:1f:a1:8d:54:9f:a1:8d:f0:d5:e5:0d:f7:
45:2d:5c:8f:c7:4e:61:e7:9c:b3:1c:9c:04:99:1c:22:26:de:
67:75:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:55 2025 by rpki-client