Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa
File: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (raw, json)
Hash identifier: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=
Subject key identifier: D2:3C:A9:6B:66:3A:81:B1:DD:98:F8:C1:E5:C5:2B:2F:A1:C5:6E:36
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F684761718F21DAB9146D744D9AFA
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2874
IP address blocks: 57.79.0.0/16 maxlen: 32
57.86.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:68:47:61:71:8f:21:da:b9:14:6d:74:4d:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23ca96b663a81b1dd98f8c1e5c52b2fa1c56e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:72:e2:72:e1:89:17:aa:f8:91:0a:d0:98:
b6:0a:4a:d0:0f:0f:c4:3a:2b:c3:64:67:7a:df:54:
2c:96:be:4b:07:9f:3c:a5:49:22:40:9a:9a:e7:a9:
17:0d:e3:8c:fe:a4:03:36:b7:69:63:16:be:c1:c2:
54:cf:ac:ea:85:f7:4d:7f:c2:12:80:e1:29:05:15:
22:d9:1f:50:f0:c1:54:96:63:e9:08:49:fa:0c:cc:
cf:86:0d:0d:89:dc:9b:73:cc:89:87:76:93:fd:36:
58:27:bc:14:0f:6b:23:b6:a3:0c:26:04:73:af:c5:
43:06:65:82:9d:7c:51:1c:f2:f3:c1:ba:08:08:7f:
de:87:95:0f:c1:51:af:0c:f3:af:90:3d:bd:c1:13:
85:b4:20:7d:25:eb:74:93:77:f4:c6:c3:db:05:08:
44:bb:ee:8a:f4:9a:e3:5c:77:ff:00:f0:60:4c:1c:
34:27:61:7b:70:28:65:df:ad:3e:3d:fc:8b:7b:1a:
b8:84:85:d8:5d:4e:06:11:7c:4c:be:2e:b8:39:7b:
33:01:df:c9:a2:19:7c:36:54:2e:1e:58:a2:7d:b9:
95:88:08:01:f4:6c:3a:2c:33:7a:34:09:63:92:3d:
6f:0d:08:dd:9a:62:81:91:5f:04:f7:4d:ff:20:35:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:A9:6B:66:3A:81:B1:DD:98:F8:C1:E5:C5:2B:2F:A1:C5:6E:36
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.79.0.0/16
57.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:68:35:78:4f:69:61:21:46:18:a2:af:6f:ef:5c:0e:47:88:
ea:3c:09:eb:ce:2e:b0:9c:66:b8:8c:8f:35:f8:4c:f2:bb:e7:
75:4a:93:b4:2f:31:bc:c0:99:d6:82:c9:34:ef:0a:b4:e0:59:
02:7f:ea:4c:35:33:61:57:e0:ac:77:26:3d:c3:31:c3:1c:3f:
ec:bb:48:b4:41:91:8e:5b:b3:27:96:08:2e:5a:69:d6:b7:43:
7f:36:74:e6:5c:fd:ed:35:73:df:fd:66:2a:8b:c0:8f:91:bf:
90:42:b5:e6:5b:04:ca:e6:a5:c5:a8:ad:d6:b5:26:b7:b9:e7:
01:44:5a:1a:cd:bf:a8:47:82:09:62:78:00:09:95:8d:18:6b:
37:05:66:88:b0:a9:8a:c5:ca:e7:81:74:4b:07:d2:85:e3:a3:
c1:86:9f:b1:6f:d9:6e:2f:be:e1:7a:c2:b3:63:e2:32:d3:b2:
72:13:b7:56:19:96:99:79:e3:e5:06:c1:38:70:51:c1:1d:d6:
83:1e:25:af:d3:5f:a8:65:96:d4:05:ad:2a:1c:ea:f2:e9:4a:
dc:c2:33:49:74:d8:c0:9b:43:fa:0e:f0:bf:6d:2f:3b:80:c3:
8c:1a:e0:34:66:c2:08:29:c0:2d:63:3c:5b:88:93:b4:a4:af:
70:95:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:08 2025 by rpki-client