Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/paWci91buJWWLtKLIOEAOw418mU.roa
File: paWci91buJWWLtKLIOEAOw418mU.roa (raw, json)
Hash identifier: dlO2sPGf5wlMykSQwYuCaO5/Ofd38ZdhlMkCwlnECjI=
Subject key identifier: A5:A5:9C:8B:DD:5B:B8:95:96:2E:D2:8B:20:E1:00:3B:0E:35:F2:65
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75C01D70CF3EB00EA993EEFB5A9A1
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/paWci91buJWWLtKLIOEAOw418mU.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12676
IP address blocks: 2.58.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5c:01:d7:0c:f3:eb:00:ea:99:3e:ef:b5:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5a59c8bdd5bb895962ed28b20e1003b0e35f265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:29:0f:60:be:7d:0b:f4:a2:0b:81:83:0c:
1b:a6:16:fd:4b:06:fc:f7:85:92:c8:a3:c3:2e:1e:
7c:7f:0f:08:f8:8c:99:cd:4b:20:1c:70:b5:fa:05:
41:d1:16:a0:eb:4a:19:56:1e:ef:dd:27:99:0a:4a:
23:b6:2e:3e:68:c5:be:af:df:54:b6:4d:59:ac:65:
bb:07:52:74:68:b1:0d:c3:8c:2b:d3:02:50:ea:d9:
24:10:6c:61:5a:c8:18:24:18:94:7d:1f:b7:b9:04:
8c:96:b1:4e:96:aa:6f:eb:77:45:f1:e3:98:4b:b1:
b6:18:95:86:d6:73:86:05:53:a2:b4:5d:19:76:12:
48:7c:99:e0:4e:26:a0:22:19:32:d4:56:97:8a:ad:
27:45:e1:9a:a6:86:5b:19:95:3a:17:8c:45:4c:57:
26:6f:ba:b2:a6:03:9c:97:9f:5e:77:c4:8b:cb:cd:
a8:6a:0e:a8:da:82:a2:21:fa:fd:27:47:67:d2:39:
25:67:84:a3:50:89:9d:8b:5a:b4:50:f5:4c:76:80:
30:0f:72:39:bb:dd:c9:89:fe:7d:1f:e7:af:44:8d:
91:40:b6:d8:6b:84:e4:4b:68:e6:2d:95:f2:39:8c:
c3:85:84:87:a4:0b:f1:17:c8:0b:74:bb:26:2f:b0:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:9C:8B:DD:5B:B8:95:96:2E:D2:8B:20:E1:00:3B:0E:35:F2:65
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/paWci91buJWWLtKLIOEAOw418mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:56:80:ee:11:ca:f1:32:ab:cc:9a:56:0c:7a:ac:56:da:10:
39:33:e7:6e:39:b5:d4:74:a8:f5:a5:ef:32:3f:ee:a3:c5:65:
61:b4:92:b0:d1:f8:28:3b:15:1e:64:70:ce:9a:21:ee:d6:34:
d7:d3:ea:dc:8e:29:f4:48:84:e2:42:23:e7:05:be:b6:fb:79:
cc:81:d1:3f:ed:54:43:3d:c4:22:2b:4a:b3:5d:84:b4:3e:94:
56:d8:fe:0b:20:14:5a:77:0e:f0:97:d8:d6:b5:1d:57:b1:2c:
fe:34:ef:6d:66:b3:63:63:98:a8:b1:da:66:ff:8b:d5:77:a8:
4b:3d:61:a1:61:e2:51:a5:00:55:4d:d0:d1:ea:43:0b:d6:f2:
43:24:f4:16:b3:b9:d4:c2:7f:ca:80:69:c8:72:f0:44:7e:58:
53:af:d0:c0:b1:4a:9a:bb:d2:2f:72:f1:40:39:d4:75:54:82:
7c:e0:c8:69:9e:2f:6f:c2:b5:a1:f2:cb:c5:67:c3:85:68:73:
cf:2f:d6:b3:0a:9c:b6:af:61:f1:71:53:cf:5d:ed:a3:b0:8a:
34:24:48:2a:e5:84:93:5a:4d:a1:15:b7:92:0a:c5:37:60:87:
76:2a:64:15:64:c5:07:06:aa:04:a6:42:29:a6:6d:d0:5c:c4:
93:f0:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:18 2025 by rpki-client