Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/EVm7RK1TXDIc2aA7DvYyzJSDZUM.roa
File: EVm7RK1TXDIc2aA7DvYyzJSDZUM.roa (raw, json)
Hash identifier: ufBBtAQYY7SHGw8Mc+sEfrIAkAWe1ikDVnNSCKKresM=
Subject key identifier: 11:59:BB:44:AD:53:5C:32:1C:D9:A0:3B:0E:F6:32:CC:94:83:65:43
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 019427B3D9D10C1E1674AAEA65FFBAF8AE96
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/EVm7RK1TXDIc2aA7DvYyzJSDZUM.roa
Signing time: Thu 02 Jan 2025 15:48:05 +0000
ROA not before: Thu 02 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 57.250.40.0/24 maxlen: 24
57.250.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:d9:d1:0c:1e:16:74:aa:ea:65:ff:ba:f8:ae:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1159bb44ad535c321cd9a03b0ef632cc94836543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:5d:c3:42:22:72:aa:1d:42:8a:7e:db:c2:
c6:9a:9e:69:39:e2:1d:44:00:18:29:af:7a:0b:02:
88:60:c8:d7:b2:c5:1b:7f:de:19:0f:45:92:b7:97:
d6:61:f8:e8:45:7d:ae:52:d2:ba:0e:3e:50:4f:36:
c0:57:13:7b:7f:41:c1:02:86:53:fe:22:a9:2b:90:
e8:0b:64:e3:d4:7f:2e:11:07:e2:58:8b:99:fa:5a:
ca:cc:56:a1:cc:fd:e3:1d:9f:5d:32:63:41:ad:6e:
81:7a:7e:44:71:a8:ac:82:22:ef:84:c3:84:e4:0b:
c6:94:1c:fd:ae:d6:18:07:d3:33:8b:a0:9a:f5:00:
fc:e7:8a:7e:8c:92:67:70:6c:27:5b:b9:c2:47:34:
82:5f:b8:37:39:29:6a:f0:df:c2:9b:27:fa:b7:37:
58:bc:1d:31:68:07:b7:8b:a4:c4:82:4d:18:bd:8b:
7f:fa:7c:c2:9a:a8:07:5c:f3:02:ec:1d:0d:34:30:
7e:01:eb:34:7c:c2:4f:d0:03:94:af:97:b5:3f:98:
d6:c2:b8:61:4a:5e:4f:94:b3:e5:bd:89:89:fd:72:
83:d9:d7:77:f1:24:0a:d7:af:97:08:d8:38:e0:34:
e2:81:a4:d6:52:ab:a2:23:a2:3c:11:9f:21:54:a6:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:BB:44:AD:53:5C:32:1C:D9:A0:3B:0E:F6:32:CC:94:83:65:43
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/EVm7RK1TXDIc2aA7DvYyzJSDZUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.40.0/24
57.250.42.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ba:ec:2b:5f:01:df:12:a9:b8:7b:00:65:21:27:b1:20:51:
27:d1:ba:08:95:ff:70:c5:2d:ea:5f:1b:f1:89:0d:ff:f2:ba:
96:84:2b:f8:a0:6f:23:6f:b5:f6:8e:1d:03:4d:54:c4:0d:a2:
e1:45:3a:ec:b4:09:48:23:22:24:8f:e1:0e:34:cf:a9:e1:59:
cc:96:5a:27:8b:84:5c:38:61:33:48:d2:36:1d:76:73:c9:28:
33:1e:e5:45:a0:5e:9b:b7:50:0d:b8:e8:cf:66:8f:b7:0b:d3:
9d:30:ac:00:e2:99:ca:65:8f:32:46:2e:a0:e3:38:26:ae:5d:
d3:26:e7:9b:40:30:10:62:31:0b:a3:89:b9:f5:bf:96:42:f5:
1e:f6:a2:25:d1:b0:d7:70:9c:3c:79:6e:37:60:8f:0c:06:5f:
2b:3c:19:2a:4d:bd:34:a0:c2:36:2e:ec:f9:02:0e:31:26:f1:
74:e8:b6:85:8d:8b:bc:96:f4:3a:b4:da:12:28:c7:42:aa:fa:
31:6e:d0:c6:bf:cc:2a:0b:73:6f:f3:eb:3d:5a:05:ea:d4:ee:
43:05:e7:ec:cb:31:ee:43:87:c1:5c:30:6f:b1:77:c3:3d:8b:
95:31:cf:05:0f:7b:4b:75:2c:f9:96:b1:be:a1:72:89:d1:dd:
44:f1:f4:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQns9nRDB4WdKrqZf+6+K6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjUwMTAyMTU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU5YmI0NGFkNTM1YzMyMWNkOWEwM2IwZWY2MzJjYzk0ODM2NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Zdw0IicqodQop+28LGmp5pOeId
RAAYKa96CwKIYMjXssUbf94ZD0WSt5fWYfjoRX2uUtK6Dj5QTzbAVxN7f0HBAoZT
/iKpK5DoC2Tj1H8uEQfiWIuZ+lrKzFahzP3jHZ9dMmNBrW6Ben5EcaisgiLvhMOE
5AvGlBz9rtYYB9Mzi6Ca9QD854p+jJJncGwnW7nCRzSCX7g3OSlq8N/Cmyf6tzdY
vB0xaAe3i6TEgk0YvYt/+nzCmqgHXPMC7B0NNDB+Aes0fMJP0AOUr5e1P5jWwrhh
Sl5PlLPlvYmJ/XKD2dd38SQK16+XCNg44DTigaTWUquiI6I8EZ8hVKYgOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBFZu0StU1wyHNmgOw72MsyUg2VDMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvRVZtN1JLMVRYREljMmFBN0R2WXl6SlNEWlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAOfooAwQA
OfoqMA0GCSqGSIb3DQEBCwUAA4IBAQBRuuwrXwHfEqm4ewBlISexIFEn0boIlf9w
xS3qXxvxiQ3/8rqWhCv4oG8jb7X2jh0DTVTEDaLhRTrstAlIIyIkj+EONM+p4VnM
lloni4RcOGEzSNI2HXZzySgzHuVFoF6bt1ANuOjPZo+3C9OdMKwA4pnKZY8yRi6g
4zgmrl3TJuebQDAQYjELo4m59b+WQvUe9qIl0bDXcJw8eW43YI8MBl8rPBkqTb00
oMI2Luz5Ag4xJvF06LaFjYu8lvQ6tNoSKMdCqvoxbtDGv8wqC3Nv8+s9WgXq1O5D
BefsyzHuQ4fBXDBvsXfDPYuVMc8FD3tLdSz5lrG+oXKJ0d1E8fQD
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:36 2025 by rpki-client