Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/JcAhZrilsZkvSyojajHWDjOF_6I.roa
File: JcAhZrilsZkvSyojajHWDjOF_6I.roa (raw, json)
Hash identifier: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=
Subject key identifier: 25:C0:21:66:B8:A5:B1:99:2F:4B:2A:23:6A:31:D6:0E:33:85:FF:A2
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 0194228E02CAD967C75BD09D4A8C723922CE
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/JcAhZrilsZkvSyojajHWDjOF_6I.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60718
IP address blocks: 2.57.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:02:ca:d9:67:c7:5b:d0:9d:4a:8c:72:39:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25c02166b8a5b1992f4b2a236a31d60e3385ffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:33:6d:56:c5:8d:ce:65:d1:75:bd:2f:22:
bc:f0:6c:ed:f8:d5:cb:87:8b:fc:d7:29:14:09:69:
96:3b:3a:d2:8a:97:63:2d:08:55:2c:e4:1e:62:3f:
e0:c8:f3:18:82:3c:09:3b:e1:e8:bd:87:4d:91:04:
c6:3e:24:01:9c:02:9f:41:c1:15:36:dc:27:ee:ac:
ca:b9:00:59:42:11:8a:b2:9b:8f:c6:01:eb:4e:c7:
33:c0:59:0a:10:aa:b3:3a:01:a2:07:31:92:73:5f:
66:c9:2f:e1:72:73:8b:7e:a6:92:1d:58:1c:6c:8d:
7f:07:07:83:be:2d:f1:a7:f9:cb:06:f8:31:7b:d6:
fe:b8:28:38:65:fe:91:9a:ad:e4:51:2e:e1:67:b5:
3b:61:63:44:cd:f9:81:aa:50:29:98:bf:7f:27:cd:
64:5e:f3:65:cc:0f:f4:e9:84:03:4b:fc:70:7f:8f:
be:84:33:08:18:5d:3b:3c:f6:13:ce:c3:df:36:48:
af:b3:f2:02:2e:16:a9:55:80:50:0c:fa:43:78:60:
0b:cf:31:5f:d7:67:e8:66:b9:49:cc:02:87:c0:d4:
c7:9e:52:61:b8:f2:ef:08:10:c5:3d:9d:21:c9:e8:
96:12:4c:32:e0:18:0c:30:18:63:72:d5:fa:48:d0:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:21:66:B8:A5:B1:99:2F:4B:2A:23:6A:31:D6:0E:33:85:FF:A2
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/JcAhZrilsZkvSyojajHWDjOF_6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.72.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a4:8d:27:e5:61:25:53:99:0e:75:38:8e:cf:ac:7c:19:7a:
e3:f3:0b:8e:76:3a:37:b1:ef:70:49:79:6c:05:72:e9:2b:79:
6f:1c:1c:de:b9:9d:6b:37:1d:46:70:6a:e5:bc:0c:67:14:64:
e3:3f:c4:d7:20:cb:8a:40:79:48:09:93:43:9e:1f:c4:82:9b:
7f:9e:40:af:0f:73:e1:b3:db:58:82:d5:c8:b9:20:c5:76:7a:
c6:90:99:da:b9:68:ee:83:6a:b3:e0:cf:8a:bc:32:0d:38:f2:
93:98:22:48:f2:ea:74:19:f4:e2:35:8e:13:5f:19:7a:67:e1:
9e:7f:70:0e:f2:b3:8b:c6:24:d8:dd:b6:b0:e4:22:5e:3e:e2:
de:3f:61:61:47:4f:2a:f1:53:c4:93:f7:04:e8:af:8e:11:31:
ef:08:0a:22:3e:36:fe:48:49:d1:11:d3:d6:d5:7f:48:01:91:
23:53:1a:2d:55:18:98:b5:e5:1b:d3:4a:71:8b:29:27:03:55:
f7:0b:9e:c2:03:c9:5c:c2:b9:70:5a:60:94:54:41:31:c1:19:
51:0a:59:71:e5:97:bc:74:a2:c2:d6:73:7e:f6:9d:4a:2e:3d:
ee:17:18:f6:e1:67:9e:95:8d:51:1d:6c:25:f6:20:0b:4f:16:
16:dd:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net