Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/ReUxOgZVHpY3xPzeTvMGQeOejwg.roa
File: ReUxOgZVHpY3xPzeTvMGQeOejwg.roa (raw, json)
Hash identifier: jIhP+s8q6CnbrL7Xjbwdz9uIAxip39uqfJunsV5mUBw=
Subject key identifier: 45:E5:31:3A:06:55:1E:96:37:C4:FC:DE:4E:F3:06:41:E3:9E:8F:08
Certificate issuer: /CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Certificate serial: 038B6072
Authority key identifier: B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/ReUxOgZVHpY3xPzeTvMGQeOejwg.roa
Signing time: Sat 01 Jan 2022 05:04:29 +0000
ROA not before: Sat 01 Jan 2022 05:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2.58.95.0/24 maxlen: 24
2.58.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59465842 (0x38b6072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Validity
Not Before: Jan 1 05:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45e5313a06551e9637c4fcde4ef30641e39e8f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7d:0f:44:4d:bf:a7:cd:44:1d:d4:d6:36:af:
4c:ec:b8:37:d2:ac:cf:55:f8:26:16:3d:16:fc:4b:
03:2d:cf:57:d4:7a:7b:1e:ca:5b:b4:04:7d:c0:f7:
82:f0:49:a4:d9:4a:11:d0:54:79:0a:4d:d4:24:66:
1b:a7:56:40:fc:a6:4d:e4:3c:9b:72:45:24:50:53:
65:27:ea:10:04:2d:d3:d3:3f:47:16:05:e3:b8:91:
21:28:e2:ba:23:46:9b:4c:e5:be:c3:01:60:b5:40:
0a:f5:9f:4b:c0:f3:07:70:8e:b3:ce:f7:10:83:f3:
b7:40:15:8c:da:8d:3c:7d:1a:99:50:0b:b8:83:95:
26:1e:ff:3b:fc:cc:dd:9c:b0:61:06:2e:bb:ff:a1:
45:77:c5:08:db:56:87:a4:71:79:d8:26:6a:72:47:
96:4d:d8:2d:70:3d:40:27:f6:35:fd:5d:28:c3:7f:
11:b4:40:9c:f3:58:49:73:7c:2a:04:ae:f5:f4:c0:
42:27:49:b6:9d:fc:3b:a1:82:e8:83:e5:65:93:d4:
28:b0:3d:13:da:11:42:bd:a5:ca:d2:63:74:d8:5f:
2e:51:8c:10:f4:3e:41:9c:8d:3a:5e:a9:41:1a:ef:
6e:59:84:0a:9d:9c:eb:73:3f:58:c7:00:c0:52:70:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:31:3A:06:55:1E:96:37:C4:FC:DE:4E:F3:06:41:E3:9E:8F:08
X509v3 Authority Key Identifier:
keyid:B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/ReUxOgZVHpY3xPzeTvMGQeOejwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/tT5UR8oGTpiuCDVWxyHRTy2aalI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0/24
2.58.95.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:aa:24:96:75:3a:52:75:18:dc:74:e7:27:cc:2c:25:ad:
2d:d0:af:82:9f:ae:95:da:3b:35:f6:2c:f5:ca:65:41:1b:ba:
22:37:a3:8c:10:4e:24:07:88:a5:ee:dd:78:95:93:1b:1d:4c:
be:5b:f1:84:80:8b:98:56:4b:4b:7f:28:df:39:18:43:2f:1a:
e4:2f:91:2b:e9:b8:77:84:26:d5:25:f3:ee:8f:06:45:3e:eb:
59:47:90:5f:5e:ad:d5:c3:f9:06:d4:6b:8b:39:40:50:d2:75:
ee:f8:1f:a8:f8:dd:61:3e:f3:15:92:46:88:c7:e9:65:9e:97:
28:e7:b5:2d:2e:ee:9a:f4:97:8d:31:85:98:03:f8:c2:02:ad:
e9:83:0a:ae:c9:34:43:b8:38:2f:8d:f5:02:f0:dc:14:19:b7:
b4:df:01:31:0e:3b:bb:69:26:41:44:14:63:cf:46:1f:bf:53:
4e:0a:50:16:5b:40:06:68:35:15:a6:d0:40:83:87:2d:9f:cc:
d4:e8:85:a4:69:0a:72:9e:e0:4c:ff:0c:76:f5:89:f2:db:a6:
32:8a:6f:c1:13:d0:f1:cd:38:74:ad:47:8c:f9:7b:d5:c7:9a:
98:08:8c:b1:f3:92:3c:e1:9a:f1:60:81:9a:81:85:7e:3a:95:
e8:92:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:10 2025 by rpki-client