Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/sZB9qJRdylpTdvF1XtaqqpNl-OY.roa
File: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (raw, json)
Hash identifier: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=
Subject key identifier: B1:90:7D:A8:94:5D:CA:5A:53:76:F1:75:5E:D6:AA:AA:93:65:F8:E6
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0194266BE8E5ECE5C4348A31BF4736A267FF
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/sZB9qJRdylpTdvF1XtaqqpNl-OY.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3176
IP address blocks: 5.57.1.0/24 maxlen: 24
78.108.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:e5:ec:e5:c4:34:8a:31:bf:47:36:a2:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1907da8945dca5a5376f1755ed6aaaa9365f8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:e9:95:56:3a:dc:67:0b:4a:e1:f0:9d:3f:
9b:94:0f:2e:d5:a7:91:05:6b:24:91:0b:3c:09:8a:
b2:90:52:92:21:97:7f:88:3f:e7:ab:26:fd:9f:f4:
34:c7:07:9f:0d:d9:d3:07:d8:c8:a7:e0:10:2c:8d:
5f:50:89:7e:0b:fc:6b:83:e2:93:90:b7:4a:4a:57:
3f:0b:56:97:33:fd:1c:fd:55:0b:45:88:ef:82:4d:
f4:8c:43:17:0f:69:a9:38:80:40:f0:4b:ea:5d:4d:
8e:48:6e:23:97:00:9d:97:d5:b9:9f:9f:26:f4:3f:
5a:5a:4b:0e:1b:7c:73:70:26:bc:fa:6c:0a:42:f8:
85:21:de:67:2d:16:91:b8:c7:1e:d6:b1:01:b6:1f:
c2:56:4d:98:7f:6e:be:d5:db:f2:01:6b:63:db:47:
d7:c9:41:af:c7:f9:2c:ae:cb:14:2a:98:2f:ca:97:
47:8f:52:79:3b:70:51:2f:7d:d3:c2:b4:04:bb:6f:
dc:93:98:7d:94:f5:b3:5c:cd:d0:98:50:ec:b6:ea:
e4:0a:e1:ea:40:a1:bd:28:45:38:37:21:f6:3e:a0:
ea:c9:c2:b7:13:ca:69:bf:63:d5:21:bb:34:00:a2:
86:3d:33:e6:bf:95:6f:aa:e2:d7:50:84:e0:e8:68:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:7D:A8:94:5D:CA:5A:53:76:F1:75:5E:D6:AA:AA:93:65:F8:E6
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/sZB9qJRdylpTdvF1XtaqqpNl-OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.1.0/24
78.108.173.0/24
Signature Algorithm: sha256WithRSAEncryption
83:24:65:28:44:3c:35:07:70:ae:2f:c2:a0:51:c1:51:d8:03:
46:cc:66:fc:88:3c:90:27:86:f5:89:69:73:f1:46:51:86:3e:
97:3b:8f:ef:e6:32:b6:78:f2:22:e4:9e:e0:9d:c7:49:89:61:
22:3a:b7:32:78:b9:82:40:fb:08:d7:86:0c:dc:fd:da:6b:d2:
6c:29:3d:6f:70:d5:ff:a3:65:00:92:60:ef:b4:d5:93:de:b8:
5b:3d:48:fd:ad:e3:c5:21:13:fb:4c:da:3a:6f:fd:ff:5f:28:
45:6e:d8:49:86:49:37:df:d1:07:5e:bc:5b:33:56:33:4b:0c:
bc:ff:0d:df:60:01:cd:48:89:53:1b:a3:f7:3e:4e:b3:d4:be:
78:47:d8:12:22:d9:50:be:e5:1d:e0:52:86:0e:36:2b:73:53:
45:11:e1:fc:2f:45:b3:30:ff:27:42:fe:63:ac:b0:7a:d4:69:
e7:d1:bc:31:53:99:8d:6a:7a:86:cf:89:11:62:0c:a1:89:42:
07:ff:aa:2f:a1:b4:51:cc:76:5b:09:de:44:e7:92:86:3c:9d:
37:8c:25:4a:3d:cd:86:26:63:1d:da:aa:e2:3e:8c:70:b2:14:
36:95:bc:30:28:31:ae:8e:bb:08:da:8d:00:20:35:86:8a:5a:
c2:40:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:44 2025 by rpki-client