Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/57B-StK2AQ9sl4U1coOqd8wTgag.roa
File: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (raw, json)
Hash identifier: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=
Subject key identifier: E7:B0:7E:4A:D2:B6:01:0F:6C:97:85:35:72:83:AA:77:CC:13:81:A8
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 019427B5A87FB9E9FC8F1D5432972D64DC4B
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/57B-StK2AQ9sl4U1coOqd8wTgag.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58350
IP address blocks: 176.115.0.0/19 maxlen: 19
2001:678:258::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a8:7f:b9:e9:fc:8f:1d:54:32:97:2d:64:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7b07e4ad2b6010f6c9785357283aa77cc1381a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:09:66:76:d5:8c:5d:09:ed:78:bf:5e:1c:
9b:fb:77:53:b4:da:2b:5d:08:77:97:c5:7c:d9:70:
15:7d:4f:fc:d2:c5:29:bf:c3:b5:11:f5:cc:45:fa:
7b:6e:62:86:f4:38:ea:16:88:60:bc:1e:50:ec:bf:
c5:36:e5:5d:84:2f:19:04:0d:62:ee:74:e2:c9:9a:
01:94:4a:69:cd:2f:3b:1c:02:17:7d:a1:0c:c8:d8:
ee:86:11:17:d6:d3:4f:d4:87:3f:70:eb:01:11:cb:
bb:ae:b8:ea:71:6a:b8:e8:1f:ce:60:5f:09:df:be:
80:97:c7:d5:a9:39:cd:ed:2c:03:7b:02:a1:e3:e0:
4d:e5:e3:c7:e1:7d:91:91:67:c4:b6:a2:66:50:39:
dc:2e:fa:6b:83:00:20:87:17:d7:36:ca:6e:d5:9b:
9e:c0:54:6c:be:b3:64:2b:1f:fa:9f:27:c5:c1:f1:
27:51:7e:f0:f5:6d:37:2e:20:3d:d0:51:13:cd:de:
51:f7:8e:95:63:d7:6b:99:e3:64:1f:1f:59:a4:96:
e5:06:7d:e2:4e:d3:de:74:3e:fa:e6:a6:30:ca:76:
ad:a2:70:aa:70:49:90:4b:eb:b1:50:34:ad:8d:9a:
0c:e1:66:8e:61:12:43:64:b5:e3:7a:d0:3f:d7:86:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B0:7E:4A:D2:B6:01:0F:6C:97:85:35:72:83:AA:77:CC:13:81:A8
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/57B-StK2AQ9sl4U1coOqd8wTgag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.0.0/19
IPv6:
2001:678:258::/48
Signature Algorithm: sha256WithRSAEncryption
35:88:9f:01:16:20:62:d2:0c:2f:ab:cc:eb:ed:f5:bb:7c:52:
02:93:e4:d7:00:25:49:b7:25:eb:33:1d:da:bc:36:81:93:80:
80:22:a1:b8:33:b6:ec:d9:c8:08:64:86:bb:6e:81:2c:b3:49:
32:24:ea:be:2f:aa:44:b9:bd:af:29:89:db:29:f4:2e:cd:e7:
38:4a:bc:d9:39:e9:71:be:74:9d:27:e2:bd:4f:6f:dc:46:9a:
ae:3a:fe:cc:11:a8:5b:bb:13:97:f9:ec:df:94:49:7b:c9:8a:
d1:49:9e:da:cc:7a:1b:92:a5:77:ef:c3:6c:cb:a7:56:de:ce:
21:9f:7f:6c:31:19:88:bc:c9:77:3f:f3:fb:da:3a:6c:31:ba:
c2:b0:b6:60:8b:55:66:e8:82:29:82:79:ff:6b:2a:df:68:93:
dc:46:ea:5f:4a:4a:34:3b:f2:b8:b4:c1:73:a1:9c:73:e2:44:
65:64:49:52:ea:e8:f6:f2:dd:93:69:3d:8f:92:cc:c7:ba:08:
08:db:84:e3:18:23:bc:ed:cb:c2:8f:d2:08:da:f1:f8:88:6f:
e8:8f:b9:1d:45:12:4b:a7:e2:2c:c2:3a:56:1b:ee:b6:67:c7:
14:bd:f9:f6:14:84:f7:8f:25:76:30:e7:1d:b3:11:8d:bb:58:
14:15:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:16 2025 by rpki-client