Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/O-Hk60iWFBySjfmtIEbOjzMsIwE.roa
File: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (raw, json)
Hash identifier: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=
Subject key identifier: 3B:E1:E4:EB:48:96:14:1C:92:8D:F9:AD:20:46:CE:8F:33:2C:23:01
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F675380AFBC12B5AADD43851D0908
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/O-Hk60iWFBySjfmtIEbOjzMsIwE.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2281
IP address blocks: 57.79.248.0/21 maxlen: 24
57.100.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:67:53:80:af:bc:12:b5:aa:dd:43:85:1d:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3be1e4eb4896141c928df9ad2046ce8f332c2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:60:34:85:b3:0a:93:c2:01:69:19:77:63:
1b:f4:f4:38:85:97:f1:09:fa:53:5f:f0:57:aa:85:
86:57:e1:59:10:80:b9:03:d7:c1:d3:f8:1b:1d:e3:
2f:65:4d:7c:7b:82:92:ef:d9:69:2b:15:67:ec:bf:
b3:18:d3:00:ed:92:35:d1:14:d8:4f:cb:c3:f4:d0:
c6:bc:37:ea:86:53:1f:34:5f:a9:ce:ce:85:bd:6b:
e0:2a:88:49:88:77:25:fc:0b:d9:a3:4a:e3:79:df:
fb:2f:d1:60:24:9c:aa:ed:8d:36:89:25:eb:0c:e5:
0b:fc:35:2b:0f:58:0d:7f:23:3d:bc:e6:77:d0:d1:
cd:e7:76:39:cb:af:b1:2a:4d:8d:17:06:f3:38:59:
8e:c6:10:b1:80:aa:df:69:39:85:be:95:f4:fe:01:
e4:0d:5f:2b:ad:20:c3:d3:61:5d:a0:21:d4:bf:46:
bd:60:3f:4e:6c:e3:d5:09:58:87:1e:16:5f:08:7d:
52:b4:f0:06:34:40:2e:ae:c1:e0:d8:91:95:03:91:
6c:75:d1:4d:3f:41:aa:17:7a:da:70:9b:1c:5d:5d:
fd:4d:4a:8e:cf:f3:c3:c0:da:33:6a:72:5d:7f:0e:
10:f6:8c:fb:68:93:79:6e:ee:9f:88:22:39:19:72:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E1:E4:EB:48:96:14:1C:92:8D:F9:AD:20:46:CE:8F:33:2C:23:01
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/O-Hk60iWFBySjfmtIEbOjzMsIwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.79.248.0/21
57.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
85:57:aa:6c:52:78:9a:29:a3:71:4e:a0:a2:b4:c1:0b:37:2a:
57:5a:d8:d4:79:8a:6e:20:34:bc:40:e8:0b:94:9c:ad:b1:96:
15:d3:e0:3c:b2:2b:cb:94:e0:25:4e:d1:08:0f:7e:82:96:77:
74:ea:2d:6c:38:6b:c1:59:15:51:23:e0:1b:56:b5:40:8e:f9:
e7:02:1f:95:46:b1:1d:0e:0c:e1:12:f3:da:d6:9e:6e:c3:7c:
7b:d8:92:20:55:eb:5f:f4:00:81:09:d1:56:b1:9d:7f:fc:d5:
05:ae:5b:1a:39:46:db:1d:ec:7a:2c:6d:23:c1:b6:0f:3d:4d:
76:ad:94:df:91:b5:69:61:d1:4a:5f:6f:1c:9c:ac:ef:47:de:
13:15:2c:b8:bd:ad:58:a0:d6:ec:ca:4e:67:8f:93:be:fe:ca:
c4:77:e1:61:a6:7e:3f:fc:9f:1c:64:2c:e3:b0:ae:19:9d:a5:
af:56:a6:9b:a5:75:03:e5:bc:68:6d:db:f5:4e:1f:c4:6b:21:
2f:67:da:fd:59:0f:19:7d:82:43:f9:d3:37:00:5d:b4:b5:ad:
ba:c5:25:63:ae:ec:42:40:7d:a5:5d:5f:bf:6e:1c:5a:a8:83:
ae:27:de:17:36:b3:27:1f:18:84:97:a3:ae:63:00:07:c5:23:
3f:ff:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:33 2025 by rpki-client