Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/ucQhJZH517zkDWYQZemvl0znLfE.roa
File: ucQhJZH517zkDWYQZemvl0znLfE.roa (raw, json)
Hash identifier: qnZlnAxF5uhGUVtjnJAvgSS5A4KvFRuGaUFL34IgIDQ=
Subject key identifier: B9:C4:21:25:91:F9:D7:BC:E4:0D:66:10:65:E9:AF:97:4C:E7:2D:F1
Certificate issuer: /CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Certificate serial: 018456EC21FE1B026B66BB173F96A98D41B3
Authority key identifier: B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/ucQhJZH517zkDWYQZemvl0znLfE.roa
Signing time: Tue 08 Nov 2022 11:07:06 +0000
ROA not before: Tue 08 Nov 2022 11:07:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 2.58.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:ec:21:fe:1b:02:6b:66:bb:17:3f:96:a9:8d:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Validity
Not Before: Nov 8 11:07:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9c4212591f9d7bce40d661065e9af974ce72df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:a0:61:58:76:29:ec:e7:5b:02:ff:15:cf:
ce:c2:d1:bd:98:42:96:f5:01:c9:6b:de:5f:68:58:
56:ea:ec:00:c6:1a:29:45:aa:c1:82:10:66:d8:af:
e6:cd:27:df:66:7d:42:aa:7f:24:23:e6:ae:34:34:
a0:37:03:27:3a:95:cc:72:89:ca:2d:54:3c:11:45:
33:08:46:e4:22:8b:6b:0c:73:b5:8b:86:ef:9f:f6:
df:06:97:27:41:d3:bf:0e:cf:19:2b:d5:16:53:e9:
5b:f4:f9:57:e0:f1:f7:92:32:15:f7:b0:94:bc:c2:
2d:53:ae:fd:2c:4f:3d:72:ca:25:4f:35:f4:da:66:
99:a2:ed:3f:54:20:7b:76:84:34:27:74:a0:ee:28:
7a:c1:c9:eb:e2:ac:62:fc:e9:9b:10:c2:4c:8f:4a:
13:86:78:4f:fc:3c:9e:a9:a7:0d:3e:98:7a:d4:a2:
c6:17:f1:bc:a0:e6:db:f5:e6:7d:5c:ec:65:cd:8a:
6f:2a:88:05:24:7b:e1:f2:b7:a0:14:e1:0c:50:b0:
de:ad:40:33:3c:f6:ec:86:d9:cd:15:4a:0d:64:dd:
01:65:9e:54:5c:93:b4:71:2f:1e:a5:23:ad:07:58:
eb:20:af:b3:3e:2d:64:fc:5c:f6:54:43:3c:65:16:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:21:25:91:F9:D7:BC:E4:0D:66:10:65:E9:AF:97:4C:E7:2D:F1
X509v3 Authority Key Identifier:
keyid:B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/ucQhJZH517zkDWYQZemvl0znLfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/tT5UR8oGTpiuCDVWxyHRTy2aalI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1f:e3:c8:28:ff:40:78:14:b2:d9:ad:37:6f:7a:15:6d:7e:
2b:b5:30:e9:bd:38:e3:da:2e:b4:f6:ce:c1:a7:ed:7a:60:2b:
38:4f:df:aa:76:e2:cb:01:b1:11:57:90:b0:98:d6:28:41:22:
76:56:b2:8d:0a:41:ff:2c:41:73:54:a5:27:cd:1a:0c:f5:9e:
cd:b9:91:be:c7:79:1a:04:9e:92:a9:7a:83:da:cd:3a:66:48:
3a:7c:ec:f4:91:43:cc:2f:2b:b7:5e:28:83:66:5e:fd:2e:16:
17:11:79:06:b7:88:54:ec:03:f3:79:50:79:0c:2f:9c:0e:2d:
d9:d2:c1:af:cc:eb:dc:ac:c7:82:94:cd:3d:a4:41:b2:fd:9a:
b7:24:b0:f1:0e:0f:be:a3:28:13:97:ab:60:28:6e:19:35:f0:
86:37:6f:95:9e:a8:58:63:36:a6:06:eb:16:0c:d9:86:dd:51:
0c:a1:48:f1:b3:63:ec:e0:de:1e:fe:38:5e:67:84:da:18:ef:
f8:de:cb:2e:20:e6:bc:97:44:4f:2c:a9:6a:d3:f9:d5:7e:6f:
40:e8:b2:e7:33:5b:7d:77:4c:19:c7:41:5b:ad:87:38:ec:0f:
37:af:6e:28:95:a3:4d:86:c9:60:ad:5f:d1:cd:d0:64:b5:61:
68:ec:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:17 2025 by rpki-client