Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa
File: e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa (raw, json)
Hash identifier: BfIWv41neeV2qgq9Eq0Nn/Yphlr8J5Yfm9562icW1ms=
Subject key identifier: 7B:C8:17:A4:CF:12:F4:C4:18:29:1D:C9:D5:DE:55:58:6A:60:AF:CA
Certificate issuer: /CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Certificate serial: 047B0312
Authority key identifier: B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa
Signing time: Thu 14 Apr 2022 06:16:34 +0000
ROA not before: Thu 14 Apr 2022 06:16:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2.58.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75170578 (0x47b0312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Validity
Not Before: Apr 14 06:16:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bc817a4cf12f4c418291dc9d5de55586a60afca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:55:b9:6f:ca:35:1b:9f:24:c7:6b:a4:bc:
cb:90:b8:7d:cb:70:c7:fe:f3:ac:ad:45:04:48:cd:
b9:ef:e7:7d:1a:03:52:81:d3:3f:f0:b2:38:95:e8:
2b:3c:4b:e7:da:89:d0:b2:11:80:62:07:d0:a2:f7:
e4:63:60:4e:46:c1:aa:6a:70:6c:8d:07:af:7a:5d:
e7:3e:49:a9:13:3d:09:64:a4:ad:0c:88:1e:ed:8b:
1a:37:a0:77:44:9a:d1:60:d8:fb:e5:aa:ed:ef:35:
32:85:f1:50:dc:bd:5e:e7:10:ba:de:9a:f8:54:f4:
fc:0c:6f:8e:bb:3e:4c:a0:21:38:1d:0a:83:6a:4f:
0d:8a:a4:f5:da:d5:43:f2:ea:61:96:34:ee:11:dc:
0d:d2:14:41:d2:e1:5f:b3:72:c3:57:ad:fe:b8:ae:
e6:dd:4d:01:18:7c:2e:ed:ac:60:08:a1:e0:db:f7:
98:27:97:69:99:6c:0c:41:69:5f:f0:96:94:0e:38:
1c:81:72:45:78:da:1e:a1:63:4c:fa:57:d6:a3:a6:
a4:d2:e7:a6:09:3d:97:fe:82:b1:c5:6f:be:3c:ac:
d9:68:f2:ed:ae:1b:5c:f0:a3:75:13:dc:5d:1d:f3:
73:87:75:0a:5e:dd:66:50:3e:c1:3d:88:1a:f6:7a:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:17:A4:CF:12:F4:C4:18:29:1D:C9:D5:DE:55:58:6A:60:AF:CA
X509v3 Authority Key Identifier:
keyid:B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/e8gXpM8S9MQYKR3J1d5VWGpgr8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/tT5UR8oGTpiuCDVWxyHRTy2aalI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
Signature Algorithm: sha256WithRSAEncryption
33:29:7e:48:b3:04:11:fa:a6:e1:d5:15:ca:f6:8f:91:8b:d6:
b6:43:3f:7e:81:cb:38:c0:45:82:f8:4e:82:a1:cc:8c:7c:3a:
b8:33:51:05:5f:e2:18:57:e4:97:22:84:cd:37:c0:28:30:e9:
c6:d5:99:a4:8a:01:7f:48:13:6e:3f:83:10:ed:83:3c:39:20:
ae:35:5c:d6:86:2e:b5:21:40:a3:f4:0f:00:39:bc:f6:72:ce:
3b:46:e8:d0:2c:46:69:c9:41:7b:e0:a7:9f:77:89:dc:2a:ed:
1b:fa:7c:34:06:f4:14:a6:a3:16:fb:64:50:b5:94:88:e2:77:
a6:43:df:c6:93:c4:c8:5d:dd:55:4c:3a:5e:80:57:97:34:6c:
ca:28:de:b1:bf:35:10:34:3c:07:0c:f7:37:70:3b:e6:f1:e0:
f3:22:a4:f4:d3:96:30:bd:80:ce:49:d8:9c:95:5b:cd:1e:76:
80:cb:44:20:b9:fb:f0:15:fb:1a:d7:fb:0b:c3:80:9d:a8:ca:
e7:a6:e7:d8:a6:11:56:80:c8:68:6a:04:05:ed:ce:cc:79:a9:
bd:05:fa:8e:7b:00:32:37:6d:f9:bb:e4:4c:d8:a1:2f:97:cb:
92:b3:4d:3f:12:59:fb:70:bd:49:de:4f:53:0e:b8:71:6a:ab:
5d:ad:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:31 2025 by rpki-client