Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa
File: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (raw, json)
Hash identifier: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=
Subject key identifier: 0E:0A:7F:00:E9:92:EC:5A:BB:4A:F9:35:FD:14:9D:92:07:BE:59:15
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 01950548F6ABA259723FFB6C150C29B76549
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa
Signing time: Fri 14 Feb 2025 16:27:02 +0000
ROA not before: Fri 14 Feb 2025 16:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203462
IP address blocks: 2.57.84.0/22 maxlen: 24
2.57.84.0/24 maxlen: 24
2.57.85.0/24 maxlen: 24
2.57.86.0/24 maxlen: 24
2.57.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:48:f6:ab:a2:59:72:3f:fb:6c:15:0c:29:b7:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Feb 14 16:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e0a7f00e992ec5abb4af935fd149d9207be5915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:f3:2a:02:e5:35:91:a3:b1:16:ad:95:9c:
6b:bf:9b:30:74:d6:7c:a7:56:48:09:74:a8:ec:13:
bb:03:5d:95:87:72:85:be:88:00:a7:0d:1e:e0:e9:
58:31:57:6e:e4:39:2f:f1:16:1a:5f:48:f1:a1:16:
7d:f7:90:10:88:54:3d:62:04:be:9e:b4:c3:58:cf:
6e:04:09:27:84:85:c3:89:f8:4f:5c:4a:97:69:6a:
f3:cf:a4:ca:5a:b7:a0:77:4a:08:60:53:7b:9b:10:
00:04:0c:7f:67:69:00:87:a1:03:ca:63:42:3e:6d:
97:c0:cf:ec:78:08:03:2b:ca:c1:5b:09:73:f3:fc:
0a:1a:de:84:d0:f2:4f:e9:e0:6f:7b:ad:dd:8b:16:
52:a1:4f:8c:f7:24:1b:8c:33:e1:bb:42:a0:27:5a:
83:c0:32:8c:ee:c6:60:d5:cc:11:04:51:11:04:7b:
95:97:e8:e7:8b:31:2d:49:02:16:1f:f3:03:09:30:
2f:a4:39:b1:5d:2f:e2:12:c9:94:dd:d5:f8:43:78:
fd:86:5d:d5:8d:19:78:da:d8:2a:43:d9:11:7c:d8:
81:1f:ee:21:92:12:44:3d:6e:27:68:73:9b:e6:64:
9f:27:e3:91:11:90:a6:b5:4b:99:f2:c6:c5:f6:90:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:7F:00:E9:92:EC:5A:BB:4A:F9:35:FD:14:9D:92:07:BE:59:15
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.84.0/22
Signature Algorithm: sha256WithRSAEncryption
34:18:ad:a9:fe:eb:77:17:f9:88:4c:da:aa:9c:51:91:1c:6d:
ec:35:02:e4:67:f7:d1:3c:dd:29:44:f3:f5:8a:29:1e:58:ad:
ab:81:85:a3:a1:b0:d1:51:b9:3e:ff:e6:be:4f:f5:12:60:6f:
3a:f5:7e:07:88:03:ad:e5:f5:f9:af:c6:b9:3d:fd:92:33:de:
f7:f7:5e:78:3f:6f:a8:ef:f9:d1:0d:9c:db:81:c0:7a:f6:24:
18:1d:04:84:72:7f:c2:ef:54:90:d9:c5:bc:0a:bd:1f:af:e4:
af:cd:df:94:73:ff:c1:74:5b:d4:77:bb:ee:56:37:9b:87:09:
f2:11:e4:a3:a8:f9:b9:3a:a3:82:5f:a1:a5:25:a6:0f:ce:d7:
bd:50:cd:40:d4:df:54:f0:a6:93:49:9f:07:02:0d:c4:62:b0:
59:33:97:a4:2c:20:47:b3:cb:05:cd:b5:f2:26:42:95:76:c9:
ec:0c:d7:88:46:66:90:49:8e:9f:df:b9:1e:51:a9:f2:2d:df:
5c:4e:fe:da:15:43:29:06:43:be:ca:f0:1e:0f:30:ca:56:99:
50:81:c8:be:82:bc:b1:23:82:eb:4e:92:2c:48:b1:0a:21:a7:
ca:1c:2a:ff:2a:5e:08:64:d3:13:33:49:3d:3b:93:6d:2f:86:
60:d1:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:04 2025 by rpki-client on console.sobornost.net