Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/px36HXCD5Tde7rc7667drQlCUgM.roa
File: px36HXCD5Tde7rc7667drQlCUgM.roa (raw, json)
Hash identifier: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=
Subject key identifier: A7:1D:FA:1D:70:83:E5:37:5E:EE:B7:3B:EB:AE:DD:AD:09:42:52:03
Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial: 0194228D8718C417AEBABE0FEBFBBFD61AD9
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/px36HXCD5Tde7rc7667drQlCUgM.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 185.57.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:87:18:c4:17:ae:ba:be:0f:eb:fb:bf:d6:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a71dfa1d7083e5375eeeb73bebaeddad09425203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:2d:d1:18:50:21:42:6f:6b:d3:a4:93:6a:
ef:a2:1e:c8:85:55:7f:f9:3a:a5:29:a0:b0:32:1d:
ad:85:2f:57:17:7c:e7:26:ef:a1:c2:20:7f:02:7c:
a9:25:6c:30:ed:e8:c7:b5:9c:3e:6b:0c:d1:15:57:
d1:07:1e:00:dc:4e:c9:98:74:30:64:1e:88:7e:ad:
dc:25:20:ec:c9:f8:ad:b1:90:8b:8d:f9:7e:b9:3f:
37:45:88:90:ff:58:29:a0:62:e1:81:a8:73:bf:a9:
66:e3:62:fa:1e:8d:3f:95:c8:13:87:3e:a1:6f:fb:
35:54:9d:06:3d:5b:28:27:c2:59:62:56:44:a4:2f:
a9:5c:ad:10:31:3f:99:be:1e:f3:2e:e5:df:2d:22:
2d:eb:24:03:65:3f:df:7c:69:06:fb:52:49:1d:f6:
25:0d:b0:3b:48:d6:85:3f:e1:4a:3c:00:d6:de:30:
c6:49:e4:12:2e:de:c4:b2:44:23:ac:38:99:b8:04:
f7:f3:e1:8d:fb:1d:08:c0:6a:9e:dc:09:17:c3:40:
fd:56:2f:0e:53:71:72:95:64:fb:4e:71:31:75:94:
8a:c2:1e:9c:2c:a0:73:04:6b:34:d5:b2:d8:a5:f7:
b0:2c:a7:d5:56:84:e5:51:79:c8:ce:de:5b:bd:64:
fc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:FA:1D:70:83:E5:37:5E:EE:B7:3B:EB:AE:DD:AD:09:42:52:03
X509v3 Authority Key Identifier:
keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/px36HXCD5Tde7rc7667drQlCUgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.79.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e2:7b:76:6b:84:dc:63:99:b6:57:d0:28:1c:92:39:4b:ba:
34:e1:e0:5b:b5:84:1b:86:d1:5f:06:55:bd:51:2e:17:8b:c5:
82:06:da:5a:f1:23:cc:df:63:39:90:3b:6b:59:92:37:5f:b9:
98:d7:6f:90:da:67:f7:c7:60:89:06:a9:3d:41:43:d8:e9:db:
94:c5:1b:31:e7:5c:73:57:8c:99:b6:e6:4c:bb:fd:89:03:04:
30:67:40:25:00:a2:c4:d0:14:c8:3d:e5:4c:71:12:97:2a:a0:
81:6d:a4:61:b8:bf:07:c5:fc:44:d8:8c:65:7b:f9:95:9b:bf:
e1:bb:4b:be:58:9f:98:60:15:89:96:36:0f:5c:67:30:4c:a8:
4c:02:fd:14:a2:b2:57:ac:e6:0a:22:62:43:b8:23:b1:c6:5a:
9a:3b:53:14:46:67:c3:d8:f1:c2:1c:98:c8:d9:d4:3c:79:92:
6d:0a:e6:73:e3:92:69:7c:4a:aa:35:f9:4b:9a:a0:2d:fb:12:
dd:d7:05:b5:9f:bb:98:48:cc:05:13:79:c0:ea:de:73:8c:d8:
cb:8f:2d:25:d3:0b:75:4d:aa:d1:1a:d8:30:ff:7e:ea:85:29:
3a:32:29:b6:58:60:62:37:61:65:f6:2f:35:ae:be:24:c5:ad:
00:5e:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:39 2025 by rpki-client