Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/W2dVuhdvkZPCT4xbWj4hASghcGs.roa
File: W2dVuhdvkZPCT4xbWj4hASghcGs.roa (raw, json)
Hash identifier: nMnqrzO3QlTClxSDTq/6l+sFo3+5m+fCPUztpwysE7s=
Subject key identifier: 5B:67:55:BA:17:6F:91:93:C2:4F:8C:5B:5A:3E:21:01:28:21:70:6B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0195CD608678548281276B9877C9F72B7371
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/W2dVuhdvkZPCT4xbWj4hASghcGs.roa
Signing time: Tue 25 Mar 2025 12:56:49 +0000
ROA not before: Tue 25 Mar 2025 12:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 2.58.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:60:86:78:54:82:81:27:6b:98:77:c9:f7:2b:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 25 12:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b6755ba176f9193c24f8c5b5a3e21012821706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:90:77:ec:c8:87:42:fb:ce:d1:9a:64:2e:7d:
47:09:ec:6b:6f:91:d1:71:06:90:65:8f:2b:c0:78:
70:74:b9:6c:20:d2:b4:ef:e4:bf:73:65:ea:ff:91:
47:e6:88:1f:40:13:9f:3c:45:4e:fa:ad:13:1b:b7:
69:e9:b0:03:b8:9c:a6:88:c1:48:fa:1d:f4:88:36:
d8:20:41:be:26:58:b9:2b:12:26:a4:49:24:b3:18:
99:bf:ca:8e:ca:ed:a1:7e:f1:35:10:f9:b3:e8:22:
15:a5:cb:fe:6a:57:b8:00:73:f4:aa:30:ff:18:de:
15:db:1a:04:d5:5f:6c:c9:3f:aa:12:63:9c:2f:dc:
13:6e:e4:5a:3b:ff:fc:30:aa:87:80:3f:fe:1a:a6:
90:3a:45:d5:d7:85:eb:6b:e5:c8:a8:8b:ba:4b:e4:
72:62:a7:e5:9e:6d:f3:67:b8:1d:34:a5:53:bc:b7:
06:cc:2b:b2:01:09:2e:75:56:f2:c5:89:82:47:1e:
29:87:86:e2:03:79:93:9a:9d:e0:76:dc:11:87:fc:
71:2d:f2:9e:5c:2a:b2:4e:91:7a:81:38:84:8d:a7:
45:08:30:b7:43:a4:9c:62:33:1d:65:2b:4c:db:a8:
b5:f0:90:02:ba:83:4e:46:70:e7:3e:62:a2:16:8d:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:55:BA:17:6F:91:93:C2:4F:8C:5B:5A:3E:21:01:28:21:70:6B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/W2dVuhdvkZPCT4xbWj4hASghcGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.233.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f2:3c:bb:24:ae:3f:c1:c3:cd:dc:82:67:40:40:d2:26:a5:
9b:4f:0f:cd:2a:3f:e2:16:2d:ca:44:a2:cb:27:ae:32:59:3e:
11:ba:b5:cb:6d:54:15:16:13:97:37:92:73:f1:cf:b9:26:63:
47:22:17:d8:2f:90:22:93:a0:ae:0f:0f:3b:f5:0d:67:e7:04:
b8:3c:26:c9:a2:70:c3:42:e5:66:2d:f6:4f:bf:c6:8d:c5:8c:
f8:85:58:37:12:49:1f:dc:90:5a:aa:39:d6:a3:ed:90:33:c5:
64:42:e0:58:d3:d1:2c:af:5e:5c:41:a0:70:4b:e5:4c:c7:bc:
da:fa:69:e1:68:7b:61:2b:9b:e5:cb:1b:3d:61:57:16:d6:85:
25:bb:53:e4:3f:8c:9f:3b:3f:5d:de:27:c6:c4:a6:7e:f5:ac:
64:f2:2e:36:ec:8a:21:cc:f4:90:df:fa:e8:59:96:b2:a2:c2:
83:b2:05:79:28:c7:9b:c8:b6:67:88:39:c6:7e:38:a1:06:40:
47:26:bc:c6:f5:4d:a7:4f:dc:ff:fc:b0:69:f7:96:17:01:f0:
17:10:09:fa:29:93:6f:de:4c:da:24:a8:db:6e:f9:39:42:f5:
85:4a:8a:95:d3:ee:67:57:88:52:24:67:de:0b:1b:73:38:3e:
94:82:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:05:20 2025 by rpki-client