Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/QOlU2_199XSOE961RlohguyMUYA.roa
File: QOlU2_199XSOE961RlohguyMUYA.roa (raw, json)
Hash identifier: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=
Subject key identifier: 40:E9:54:DB:FD:7D:F5:74:8E:13:DE:B5:46:5A:21:82:EC:8C:51:80
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F690CA31C71F8E40EF9AFDC3B0A43
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/QOlU2_199XSOE961RlohguyMUYA.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4862
IP address blocks: 57.72.0.0/15 maxlen: 32
57.72.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:69:0c:a3:1c:71:f8:e4:0e:f9:af:dc:3b:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40e954dbfd7df5748e13deb5465a2182ec8c5180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:da:15:bb:7d:52:23:01:e4:10:fd:7c:23:
95:7c:d6:73:01:2e:e9:b3:7c:74:e7:5f:41:fe:74:
a2:68:73:b8:fa:06:04:4a:57:73:95:af:ba:54:ef:
d6:0f:43:8d:cc:4d:2d:3d:39:a9:4e:a9:98:32:46:
9a:34:e9:6f:11:90:1d:e7:e8:c1:d7:2a:d3:1b:30:
18:7c:a8:bf:ee:60:39:ec:39:02:2d:0d:f7:8b:7f:
17:6a:2c:e3:23:ea:40:c5:68:0f:db:b9:04:e9:04:
e7:3a:4b:a1:d2:d9:9b:92:85:ff:df:fc:1f:cd:3b:
2b:cc:d6:90:f3:50:00:c0:1b:41:1c:6b:9c:e3:6e:
27:f9:f1:6a:d1:c1:fc:be:0f:4a:a6:39:71:ed:81:
e9:fe:d9:75:d9:fd:05:b7:23:62:37:35:c9:a7:99:
c2:f1:95:08:e9:ae:a4:37:1a:5e:da:4d:0d:27:df:
f7:89:f7:87:32:8b:8c:c4:0c:e3:58:2d:65:a0:d1:
fb:d4:29:5b:87:f8:9a:ae:d8:b1:7c:85:06:d6:9e:
8c:ce:a0:40:17:0c:e6:be:c1:db:52:59:77:71:7a:
a5:b4:f8:f4:10:19:6e:f8:2d:ab:40:b7:95:56:65:
c9:5d:bb:3a:56:df:32:af:e3:13:51:74:77:09:5d:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:54:DB:FD:7D:F5:74:8E:13:DE:B5:46:5A:21:82:EC:8C:51:80
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/QOlU2_199XSOE961RlohguyMUYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c5:08:6a:c1:d0:c8:1c:fd:37:7d:c3:26:6d:e1:0e:98:be:d4:
4e:73:0e:09:95:77:10:f2:fd:66:da:57:f8:ec:a5:26:55:66:
21:62:bd:02:b6:23:e0:e3:d1:c8:83:bf:79:56:7b:3f:54:d6:
2a:80:27:67:90:aa:0c:1e:f5:e6:07:51:35:45:a0:32:91:d6:
e4:2b:db:c5:83:79:65:24:ca:c6:8d:67:57:c8:43:96:29:25:
e0:46:4f:88:8c:68:2a:46:e4:cf:6f:b2:9f:97:cd:e2:9b:1b:
f3:43:6e:73:f7:6d:f2:c0:7e:70:2f:1c:d2:6b:01:45:ae:8b:
b0:ad:71:96:09:35:8d:5c:3b:53:66:74:61:8b:07:01:81:1c:
8a:72:a3:11:8f:2c:2f:43:9e:d6:69:7c:91:28:f7:49:3f:ac:
e5:9f:29:5a:58:b8:5a:16:2a:d2:5a:03:8c:1d:dd:70:9a:9d:
f2:c4:12:73:f5:7d:fe:da:3e:86:08:79:8f:1b:ea:fd:83:09:
19:c6:49:82:14:5c:ef:34:aa:54:61:b2:bd:49:cc:d8:e7:e8:
5e:df:1c:92:24:c2:37:4e:60:c9:1e:67:0c:af:59:ae:bc:ba:
ce:e6:67:36:b1:3b:db:63:64:03:e0:b4:58:39:25:b9:f7:de:
4b:2a:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:12 2025 by rpki-client