Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WeJfryKR5dTJuAoQ1QA6yTrO6qM.roa
File: WeJfryKR5dTJuAoQ1QA6yTrO6qM.roa (raw, json)
Hash identifier: NySUrQ9U6+TqBFoX23e5qKBEBRdj6dlGPzLj715kX6o=
Subject key identifier: 59:E2:5F:AF:22:91:E5:D4:C9:B8:0A:10:D5:00:3A:C9:3A:CE:EA:A3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019615A53A4FFEC9D11F4F7021C3003184D3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WeJfryKR5dTJuAoQ1QA6yTrO6qM.roa
Signing time: Tue 08 Apr 2025 13:44:31 +0000
ROA not before: Tue 08 Apr 2025 13:44:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 2.57.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:a5:3a:4f:fe:c9:d1:1f:4f:70:21:c3:00:31:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 8 13:44:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e25faf2291e5d4c9b80a10d5003ac93aceeaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:70:93:ff:3a:64:c6:b1:bb:59:bd:f2:84:
ec:73:16:1a:d5:8e:91:8d:70:9f:a1:49:2f:5a:21:
b2:cd:30:68:ce:95:63:7a:84:a6:e5:32:ec:a0:2a:
8e:86:51:03:6a:2b:c4:76:db:44:18:33:bc:45:51:
c2:5f:53:34:b0:cb:96:b9:02:aa:f8:1e:7c:ac:9c:
e7:32:14:38:f5:7f:c8:8b:f0:ab:e2:02:e0:46:58:
73:ce:f1:fa:22:2e:e2:17:21:1e:99:28:ba:bf:45:
5b:83:20:ab:2c:5d:fe:d8:d5:43:39:ab:1f:35:86:
7a:46:c7:6c:17:c6:d9:d4:1e:a3:9c:35:d0:ee:aa:
e9:e8:c7:e1:d8:89:e7:06:0e:c8:50:ae:35:71:7a:
ce:f7:ae:a7:6d:08:2d:a1:9f:09:64:dd:f2:99:fb:
7f:aa:17:e2:86:61:22:67:40:1c:62:23:92:32:93:
f3:6d:3d:98:d9:2e:c7:fe:04:9f:35:7a:75:4a:a0:
63:23:a4:6c:6e:ea:2a:d6:40:27:1c:f5:9e:d4:2f:
f0:6a:4e:3b:3f:52:b7:00:6d:2c:21:d6:f6:96:6d:
e1:02:6c:7e:a2:5b:7a:59:9c:59:94:f8:49:16:ea:
82:4d:85:8e:82:cb:c2:f6:a5:36:46:17:23:c7:ea:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:5F:AF:22:91:E5:D4:C9:B8:0A:10:D5:00:3A:C9:3A:CE:EA:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WeJfryKR5dTJuAoQ1QA6yTrO6qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1e:f7:86:c2:8d:ab:f5:6f:cf:5a:c1:41:0a:6c:89:cf:22:
5e:63:d6:42:50:c7:ac:0d:0d:b7:d1:0b:6b:71:49:fc:ab:cd:
49:a2:0d:59:f4:fb:ed:d9:86:ec:89:d5:b1:74:37:c8:cf:83:
05:06:39:d5:a9:e6:1a:6d:ca:99:f4:b1:14:21:8a:ca:55:04:
b2:b3:36:97:80:9b:44:e6:e9:1c:09:14:1d:dd:c0:3e:63:36:
34:56:5a:22:79:9d:42:ac:4b:9f:2c:17:b4:aa:07:0b:db:dc:
6a:1c:68:e4:94:4b:10:4e:1c:06:0c:f6:5a:d0:62:23:55:70:
b9:58:8b:76:1e:79:d5:52:7f:b6:af:e8:2c:0f:14:8a:2a:a7:
19:53:e1:c7:91:67:6e:10:4e:df:41:4d:99:da:63:b2:15:ca:
81:58:c3:73:60:82:c1:93:06:3f:a6:ea:ad:29:ea:03:13:6f:
62:d9:c9:df:d7:9e:ba:83:6c:6d:e9:8f:77:8e:bb:cc:c0:87:
55:36:08:6f:33:d7:43:1b:91:c0:87:40:3f:f8:f4:24:2f:25:
6b:d6:8b:12:5e:bf:4b:2b:60:ed:1d:5e:c0:06:99:d3:41:98:
73:98:f1:82:d4:5c:c2:c0:ad:87:18:68:92:73:13:78:66:bb:
fa:f2:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net