Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa
File: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (raw, json)
Hash identifier: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=
Subject key identifier: F9:49:99:D2:A6:9E:09:66:89:8D:24:1E:59:DA:30:11:E7:36:56:0B
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F6BEF248839EA667AC67E1B95A0E0
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13879
IP address blocks: 57.197.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6b:ef:24:88:39:ea:66:7a:c6:7e:1b:95:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f94999d2a69e0966898d241e59da3011e736560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:cd:ac:ef:81:c4:4e:a3:fd:c1:33:9b:7e:
67:0a:74:61:f6:a9:df:4e:83:f3:1a:64:8d:0e:a4:
52:db:32:85:4a:df:3c:82:e9:aa:89:c6:b6:cb:e7:
15:2e:f6:57:f2:3b:70:10:35:bf:f3:b1:09:54:86:
29:10:6c:2b:e3:0d:10:25:f2:0f:96:8a:cb:f0:8f:
c5:c7:70:59:cf:dd:c2:8c:74:ac:45:e5:fa:9d:e9:
34:3d:ff:fc:28:8f:c0:8c:60:08:5e:1d:f8:63:6b:
16:aa:84:a1:ef:e7:8e:8c:0b:9e:fe:09:32:c1:f5:
3a:2c:2c:3a:75:6f:a3:45:16:01:f1:29:92:53:f5:
27:9a:ed:26:aa:2e:63:56:09:91:42:4d:79:f6:2d:
9b:4c:9a:a3:ef:b2:41:a9:45:50:c2:8b:cc:00:25:
31:51:30:db:07:1f:55:a7:06:63:f3:55:74:56:c5:
47:23:9b:54:03:bb:59:57:6b:b0:e2:91:fd:be:35:
1d:fc:90:74:30:36:34:37:84:7b:ef:89:cc:81:9d:
97:fb:56:97:af:fe:e0:9f:c3:61:2e:0b:72:b9:cf:
6e:ed:e8:e4:b4:31:8f:28:a1:e7:6e:f5:21:1f:15:
9f:aa:1c:df:60:b2:e1:44:06:aa:8d:05:07:76:ca:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:99:D2:A6:9E:09:66:89:8D:24:1E:59:DA:30:11:E7:36:56:0B
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:4f:f8:c6:06:53:6c:f4:a0:04:db:87:76:69:0b:f1:eb:e3:
df:44:61:35:f7:86:95:4f:aa:23:e2:51:7f:5a:86:4d:88:ce:
eb:9d:c3:37:16:4d:b0:bf:12:f5:54:a6:46:be:e8:b5:ce:89:
b5:1b:ad:73:f2:f5:78:e0:63:ec:ea:9e:29:d4:76:27:78:f2:
0e:76:28:1c:cb:77:38:76:db:46:48:df:cd:c7:f7:07:d6:b1:
de:a2:c8:cd:e3:bf:73:a1:16:7c:95:c2:6e:02:af:bd:1e:a7:
2b:fd:c7:5c:60:be:a3:36:21:75:38:db:b7:23:71:a1:b0:a7:
6b:ce:b2:2a:cd:50:25:1c:a3:99:23:b1:fa:0d:30:2d:8a:8e:
0e:60:6b:e1:81:e3:15:47:2a:6a:59:9e:1a:d8:51:84:8d:d0:
97:94:2e:aa:9f:8c:ad:85:55:b8:b2:99:b8:08:39:c2:92:59:
1e:fb:c5:2a:c9:08:51:3d:86:d5:47:17:cf:1e:be:4c:60:31:
eb:33:23:c9:9c:3e:50:5d:25:87:e3:b6:da:3d:f8:3b:80:3d:
86:76:4f:3f:e8:bd:70:2f:39:9d:9e:e4:4d:57:5c:b5:cb:13:
2b:34:a0:4d:c2:6c:cf:d1:db:08:92:79:3d:e3:15:ac:0b:1d:
24:42:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:12 2025 by rpki-client