Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/Voo3pzf4LD_DIb5LDnvARIWMy1I.roa
File: Voo3pzf4LD_DIb5LDnvARIWMy1I.roa (raw, json)
Hash identifier: uawaflHMP9u/AC/5na8UCpQ318svPIstKaBGatZyWFI=
Subject key identifier: 56:8A:37:A7:37:F8:2C:3F:C3:21:BE:4B:0E:7B:C0:44:85:8C:CB:52
Certificate issuer: /CN=2fa765753cefe816d38b250379c95766a96f06d7
Certificate serial: 0194228DF2FD6F0C17E2145BD6F6FC6FC2CF
Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/Voo3pzf4LD_DIb5LDnvARIWMy1I.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209062
IP address blocks: 2.57.208.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f2:fd:6f:0c:17:e2:14:5b:d6:f6:fc:6f:c2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568a37a737f82c3fc321be4b0e7bc044858ccb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:cb:9f:20:88:20:5c:61:e8:98:42:61:54:
8b:ec:db:07:2c:03:f4:42:d0:1b:31:c2:72:31:9a:
02:10:ea:fb:cb:7e:58:e9:13:af:c5:49:8d:5a:3e:
ad:08:4b:f3:0b:35:0b:b6:05:2e:de:95:95:25:db:
6b:19:a9:ea:19:93:cc:de:86:58:47:bf:23:22:3a:
a0:b2:38:b5:04:34:91:7c:23:d0:7b:2d:69:b6:8b:
ee:3b:0c:5a:8e:dc:8e:62:b6:76:d8:f2:89:df:e4:
de:80:d8:b4:69:32:9e:68:da:67:1c:98:07:43:d8:
14:7f:2c:4f:bb:c1:85:16:49:61:53:6a:4b:53:21:
86:f4:2b:52:44:c8:9a:09:bf:7c:18:09:5f:a3:3a:
e8:79:b9:43:78:45:41:5c:df:42:fb:6a:5a:ec:b9:
00:40:87:d4:5e:5c:3e:79:74:d3:5c:15:48:e4:ac:
a5:d5:ec:49:7a:2e:9c:7a:ee:47:10:0b:43:31:56:
77:da:65:55:9a:5f:83:87:07:7b:96:66:21:74:bf:
84:82:97:6f:0a:a5:8d:1b:57:d6:a3:9d:d8:48:b7:
eb:6f:52:34:71:43:03:b2:08:cd:11:6c:86:18:45:
70:cc:89:b2:ec:7f:92:bd:3f:59:30:a8:cb:3a:60:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:37:A7:37:F8:2C:3F:C3:21:BE:4B:0E:7B:C0:44:85:8C:CB:52
X509v3 Authority Key Identifier:
keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/Voo3pzf4LD_DIb5LDnvARIWMy1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:16:62:8f:30:7b:56:c1:73:df:27:df:77:9f:4e:b7:13:b0:
4b:5c:d5:b7:04:22:5a:47:28:3b:e5:10:a4:6b:3c:e4:0f:ac:
8b:0a:52:d2:de:b7:78:f8:0b:f0:65:1b:2e:2e:1c:1e:42:be:
68:e7:72:60:e8:da:23:ec:dd:d8:ca:a7:6f:63:5e:98:88:63:
bc:59:75:63:a0:60:6d:b4:f2:fd:60:a9:4c:f2:23:1e:f9:38:
8f:82:0f:16:27:a4:f0:79:5e:35:60:bd:25:bc:28:4c:70:96:
6b:4b:9a:54:03:36:4d:4d:c9:eb:c1:e3:85:ca:02:06:66:f3:
8d:5d:c1:5e:5b:a1:b6:9c:47:6e:f2:ff:02:8f:cd:62:ad:a8:
46:72:16:82:37:bc:2b:9d:3c:0f:6d:19:6e:a2:fa:7b:10:e4:
df:ca:3b:63:73:4c:63:87:15:32:f5:21:31:b3:84:bd:fe:9b:
d8:65:ca:72:1f:52:7d:a6:11:05:d8:ce:75:4c:3d:ef:5c:8a:
06:eb:ea:1c:c4:6d:42:ee:e0:d6:f9:13:7d:53:65:e5:e2:f4:
7f:fd:da:be:2e:d2:7f:d7:bf:b3:26:a4:aa:1d:2d:0f:3d:22:
10:7b:36:23:ab:98:f1:d3:32:08:0c:0c:f7:5f:b9:9f:10:fc:
2d:b9:fd:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijfL9bwwX4hRb1vb8b8LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTc2NTc1M2NlZmU4MTZkMzhiMjUwMzc5Yzk1NzY2YTk2
ZjA2ZDcwHhcNMjUwMTAxMTU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjhhMzdhNzM3ZjgyYzNmYzMyMWJlNGIwZTdiYzA0NDg1OGNjYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaXLnyCIIFxh6JhCYVSL7NsHLAP0
QtAbMcJyMZoCEOr7y35Y6ROvxUmNWj6tCEvzCzULtgUu3pWVJdtrGanqGZPM3oZY
R78jIjqgsji1BDSRfCPQey1ptovuOwxajtyOYrZ22PKJ3+TegNi0aTKeaNpnHJgH
Q9gUfyxPu8GFFklhU2pLUyGG9CtSRMiaCb98GAlfozroeblDeEVBXN9C+2pa7LkA
QIfUXlw+eXTTXBVI5Kyl1exJei6ceu5HEAtDMVZ32mVVml+Dhwd7lmYhdL+Egpdv
CqWNG1fWo53YSLfrb1I0cUMDsgjNEWyGGEVwzImy7H+SvT9ZMKjLOmDPiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaKN6c3+Cw/wyG+Sw57wESFjMtSMB8GA1UdIwQY
MBaAFC+nZXU87+gW04slA3nJV2apbwbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNmQ3N2MtYTEwYS00N2FiLWI1NTIt
MWZjNjY0NmQxZTc3LzEvVm9vM3B6ZjRMRF9ESWI1TERudkFSSVdNeTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hNmQ3N2MtYTEwYS00N2FiLWI1NTItMWZjNjY0NmQxZTc3
LzEvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjnQMA0G
CSqGSIb3DQEBCwUAA4IBAQCyFmKPMHtWwXPfJ993n063E7BLXNW3BCJaRyg75RCk
azzkD6yLClLS3rd4+AvwZRsuLhweQr5o53Jg6Noj7N3YyqdvY16YiGO8WXVjoGBt
tPL9YKlM8iMe+TiPgg8WJ6TweV41YL0lvChMcJZrS5pUAzZNTcnrweOFygIGZvON
XcFeW6G2nEdu8v8Cj81irahGchaCN7wrnTwPbRluovp7EOTfyjtjc0xjhxUy9SEx
s4S9/pvYZcpyH1J9phEF2M51TD3vXIoG6+ocxG1C7uDW+RN9U2Xl4vR//dq+LtJ/
17+zJqSqHS0PPSIQezYjq5jx0zIIDAz3X7mfEPwtuf06
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:58 2025 by rpki-client