Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/___AQ3LSe3WVBreiiJRB_AYfZx0.roa
File: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (raw, json)
Hash identifier: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=
Subject key identifier: FF:FF:C0:43:72:D2:7B:75:95:06:B7:A2:88:94:41:FC:06:1F:67:1D
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F6B00E60451AC1ED075FDBDA9FC9B
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/___AQ3LSe3WVBreiiJRB_AYfZx0.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6853
IP address blocks: 57.66.0.0/15 maxlen: 32
57.78.0.0/16 maxlen: 32
57.79.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6b:00:e6:04:51:ac:1e:d0:75:fd:bd:a9:fc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffffc04372d27b759506b7a2889441fc061f671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:fe:7b:c1:a6:ab:4b:e9:72:17:a8:c2:09:
c3:3a:a1:b2:d6:a4:b9:c9:4b:ac:b4:21:33:09:4c:
73:f4:62:36:45:23:c1:c8:03:ef:ac:84:2c:14:da:
c8:8f:c2:12:38:83:d3:f6:d3:f5:dc:57:18:d2:89:
0b:78:b2:b1:fd:fa:ec:a0:9a:9d:b5:ea:c9:90:3d:
b4:75:71:05:ee:cc:a0:b0:c2:7a:44:66:01:61:c1:
1b:aa:4a:b0:7b:01:ae:0a:2e:2a:94:51:92:71:c7:
bb:88:ed:ac:eb:32:fe:c6:0a:19:b4:f6:6a:ad:62:
95:14:f9:66:d9:0f:c9:e3:df:f6:0f:1c:ca:4a:12:
53:6d:3e:77:06:1a:de:f7:bf:60:b0:2c:6b:3e:9f:
00:a3:45:16:cf:65:1c:22:d3:ca:01:7b:58:72:40:
79:b1:80:80:a2:42:34:94:3b:2d:8d:3c:3b:7e:8a:
30:02:03:eb:b9:57:b1:34:ec:05:21:47:b9:f4:37:
62:c9:83:fe:1c:f0:d3:bf:b0:b2:3f:ed:c4:a4:39:
2c:27:88:8d:40:9d:d0:88:82:7b:17:c1:cc:4a:a3:
32:75:16:5c:b8:64:31:27:22:38:41:16:2b:62:7b:
73:3a:3b:2f:1a:d7:36:be:ee:f3:ad:cc:6e:82:67:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:C0:43:72:D2:7B:75:95:06:B7:A2:88:94:41:FC:06:1F:67:1D
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/___AQ3LSe3WVBreiiJRB_AYfZx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4d:9d:e1:54:86:cf:78:d0:43:ba:2c:5b:8b:65:3b:60:b7:e0:
80:f3:2e:ab:01:e6:90:dd:11:59:96:63:f2:ac:6e:9a:9e:d6:
53:f4:aa:3c:8a:d5:ed:a7:05:83:ee:1d:6f:14:d5:9a:32:60:
4c:f2:d1:03:95:0f:20:a4:9d:f4:08:f8:e6:f8:0a:2d:c8:fd:
ac:3e:14:e5:9e:32:b0:5c:a3:e6:ad:8d:c8:f7:de:9c:5c:fa:
04:4f:9f:4d:88:d3:5e:f8:4a:f8:25:5f:2b:54:be:6a:22:ef:
50:50:53:3e:26:4f:67:f0:c7:d6:29:39:79:84:63:50:64:ec:
4e:9b:0f:f8:57:cd:c9:6b:8b:f6:fa:b5:e6:cd:54:d2:36:74:
a3:ff:6b:36:22:f1:31:ca:e8:9a:5b:ea:97:00:7b:e5:e5:48:
97:aa:b1:3d:30:b4:27:7e:3b:ff:39:ff:34:98:18:86:07:c7:
bf:4b:a8:63:97:7b:be:7a:e0:17:11:43:ac:86:b8:d9:17:ad:
47:00:67:4c:0a:d7:26:86:61:4e:36:5b:50:c8:7c:cf:a3:2d:
7f:81:a2:1a:69:af:3f:0c:88:9e:62:1c:41:06:75:38:54:84:
fc:b0:3d:1c:60:90:b9:ae:3a:41:cf:da:f4:b5:43:ad:a8:8e:
e4:87:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:21 2025 by rpki-client