Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/R3xDbok17226BVV5_oVU4HgJlmU.roa
File: R3xDbok17226BVV5_oVU4HgJlmU.roa (raw, json)
Hash identifier: 9phwwAlDIlq0apGtMbH/4H+fGncoix7zlcOlZn6UMpo=
Subject key identifier: 47:7C:43:6E:89:35:EF:6D:BA:05:55:79:FE:85:54:E0:78:09:96:65
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0195D3839203D8D5AB4BFB7027886CDF03BD
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/R3xDbok17226BVV5_oVU4HgJlmU.roa
Signing time: Wed 26 Mar 2025 17:32:49 +0000
ROA not before: Wed 26 Mar 2025 17:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39568
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:83:92:03:d8:d5:ab:4b:fb:70:27:88:6c:df:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 26 17:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477c436e8935ef6dba055579fe8554e078099665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:3b:6d:00:0a:74:d9:8f:d4:69:02:20:9e:
2a:f4:e1:47:bc:15:28:68:68:77:2a:23:61:b8:0b:
a8:68:bd:93:c3:2e:18:ca:0a:34:20:d8:75:5b:e0:
8c:69:29:de:27:3f:8d:07:17:63:47:fe:f2:bf:d9:
81:d0:bb:a7:50:33:a2:b1:da:48:5e:e6:87:82:21:
6d:61:e8:bd:f1:97:0c:3f:85:e5:42:f0:b3:0d:13:
2e:d7:2e:67:3c:d5:af:a9:f9:db:db:ab:cf:eb:5e:
b2:85:ec:34:bc:2a:bc:57:d6:54:f1:fa:1c:12:c3:
1c:7b:c7:c9:61:0d:47:03:73:49:02:89:b8:99:30:
f3:f5:bd:06:a8:52:1b:b4:32:c6:eb:71:b6:fd:6f:
14:95:ae:62:1f:3b:af:8a:ad:7e:d8:6b:6f:13:94:
16:8a:1d:54:ab:6e:96:69:ba:8f:70:6a:25:6d:c0:
51:14:ce:6c:89:b3:8b:ff:e6:29:de:48:61:b4:0e:
be:63:c7:8a:ec:2c:ea:c1:f5:57:47:a7:35:b1:2c:
f4:c6:f5:d9:25:87:b5:a1:3e:0a:04:35:07:aa:32:
96:92:ff:3d:8b:3a:ea:4d:71:55:ad:df:a3:34:f3:
1f:bf:11:8f:2d:99:5b:e5:49:89:f3:d3:0b:87:e4:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:43:6E:89:35:EF:6D:BA:05:55:79:FE:85:54:E0:78:09:96:65
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/R3xDbok17226BVV5_oVU4HgJlmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c0:ee:7d:5a:9c:5e:19:6f:cd:6f:1b:02:35:7f:23:5e:29:
6c:fe:7b:ed:a7:42:d8:42:c2:c1:ba:5a:75:6a:64:b1:bd:bd:
9f:72:72:44:d9:ac:9b:9c:fa:d9:03:59:8f:fe:61:ee:a0:24:
78:41:85:07:d2:cb:f0:b3:7f:b5:c7:d5:0d:bd:1e:e8:f9:29:
92:50:ab:ca:3e:26:ea:8e:51:9e:68:8e:17:30:6d:ae:63:e0:
ec:f1:a5:1a:6e:86:b8:59:85:07:c8:fb:7f:cc:8e:38:bc:6c:
50:a3:df:ac:cd:6a:16:a6:e1:5c:ee:23:a6:69:cb:6e:2d:cd:
dd:2f:b2:2d:ff:75:a1:b9:78:61:c1:7a:34:09:57:ff:d1:6e:
8e:8a:f2:43:42:06:b3:8d:5e:cb:9e:4a:85:c9:38:f8:f3:63:
7c:59:05:09:20:f4:80:77:55:d9:a0:d9:d4:39:54:50:67:6d:
51:a7:e8:fd:ca:f6:e1:1a:74:95:2a:95:fb:f8:b7:87:88:97:
58:d6:a8:91:7e:ae:0d:0b:f9:b1:13:33:c1:f2:9c:2e:b3:1c:
b7:9c:2d:f7:7e:3c:ac:57:42:ff:c8:aa:be:12:f8:d9:e5:27:
74:31:44:b6:89:b5:8a:b9:fe:5c:c0:2f:c7:40:eb:6b:09:75:
1a:fc:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:18 2025 by rpki-client