Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/zVisEWOE63cgJitrBEvJgl69e3s.roa
File: zVisEWOE63cgJitrBEvJgl69e3s.roa (raw, json)
Hash identifier: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=
Subject key identifier: CD:58:AC:11:63:84:EB:77:20:26:2B:6B:04:4B:C9:82:5E:BD:7B:7B
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 0194266BBC42DC9E5EED7DB4DC1E905B38CB
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/zVisEWOE63cgJitrBEvJgl69e3s.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 166.49.128.0/17 maxlen: 17
166.49.171.0/24 maxlen: 24
166.49.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:42:dc:9e:5e:ed:7d:b4:dc:1e:90:5b:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd58ac116384eb7720262b6b044bc9825ebd7b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:68:de:a2:51:08:04:97:19:cf:b8:e6:37:
34:3f:8f:70:88:48:43:6c:01:68:99:0d:fe:3f:a2:
75:da:41:ad:e0:6e:21:23:cd:be:7a:0c:7c:ab:6a:
0d:83:44:22:95:e0:19:ce:67:65:31:99:86:4f:9a:
34:f8:67:8a:65:78:5a:3d:56:76:1d:67:16:39:7c:
05:a0:a9:fb:6b:23:1d:74:cf:58:99:8b:3f:14:87:
4a:a2:ea:dd:a0:00:01:0d:19:5f:65:dd:0b:30:b1:
8b:10:b2:f0:f2:71:8b:03:60:f4:49:b7:77:62:a8:
5a:9a:3c:5a:02:85:ea:1a:54:a8:83:0f:04:a3:fe:
3e:b4:61:85:3b:8e:23:9a:87:80:00:65:26:67:40:
e4:2b:40:ea:cb:c7:ce:25:17:f7:22:05:ca:dd:b7:
13:5b:83:d8:b3:c9:ca:48:5d:e7:4a:c0:76:1c:bc:
d2:32:5e:dc:f2:42:35:f5:e4:2a:b8:1c:f1:b6:cb:
8c:91:47:79:09:56:fe:1d:44:a0:d3:e4:97:b5:1b:
e4:72:5a:cc:dc:c4:33:97:9c:c9:9f:2e:70:e2:36:
72:d3:0f:6c:cb:75:b9:0c:ca:11:5b:60:cc:3b:34:
d3:81:47:a1:41:2c:3e:c3:6b:80:ad:5f:c9:4d:cd:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:AC:11:63:84:EB:77:20:26:2B:6B:04:4B:C9:82:5E:BD:7B:7B
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/zVisEWOE63cgJitrBEvJgl69e3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.49.128.0/17
Signature Algorithm: sha256WithRSAEncryption
65:15:40:af:47:0f:50:6d:57:5d:f5:a0:6c:f4:bc:37:91:57:
44:a4:0f:fc:f7:59:60:ff:f3:7c:a7:74:56:f4:cd:9e:a5:d8:
ba:b5:91:56:c8:0b:ec:2a:30:d7:52:96:8f:7a:d9:3e:c2:e9:
00:71:fb:3c:4b:ef:41:90:93:04:28:43:ea:09:c2:20:86:cf:
90:c0:42:7b:aa:07:75:1c:ca:5b:e6:67:86:d1:6b:fa:b6:6e:
62:9d:4f:d6:27:b5:f2:64:f9:cc:d9:71:c2:3b:42:77:54:55:
05:36:1d:d4:d7:08:63:ad:ab:59:67:92:cb:d0:36:0e:96:68:
5d:72:03:76:37:c0:b5:0d:1e:04:e8:21:e7:13:6a:aa:ba:40:
bb:e6:34:8c:9c:b6:e3:60:9e:72:80:3f:f8:30:48:9b:6d:7a:
93:66:3f:1a:8d:9d:08:d1:91:eb:b6:13:85:3f:94:66:d0:c6:
da:83:c6:40:af:b2:03:94:3d:b5:9d:d7:64:a8:5f:6d:5f:b2:
16:25:37:45:62:b0:c3:bf:0a:a7:93:69:b4:48:79:78:e2:da:
af:f6:e7:11:42:2d:af:8b:9b:6b:64:77:c5:27:4b:33:02:96:
71:c6:23:19:c4:ac:43:b6:c6:48:76:61:aa:db:66:d8:ad:13:
3b:ae:77:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma7xC3J5e7X203B6QWzjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3
ZTY5ZTAwHhcNMjUwMTAyMDk0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDU4YWMxMTYzODRlYjc3MjAyNjJiNmIwNDRiYzk4MjVlYmQ3YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNJo3qJRCASXGc+45jc0P49wiEhD
bAFomQ3+P6J12kGt4G4hI82+egx8q2oNg0QileAZzmdlMZmGT5o0+GeKZXhaPVZ2
HWcWOXwFoKn7ayMddM9YmYs/FIdKourdoAABDRlfZd0LMLGLELLw8nGLA2D0Sbd3
YqhamjxaAoXqGlSogw8Eo/4+tGGFO44jmoeAAGUmZ0DkK0Dqy8fOJRf3IgXK3bcT
W4PYs8nKSF3nSsB2HLzSMl7c8kI19eQquBzxtsuMkUd5CVb+HUSg0+SXtRvkclrM
3MQzl5zJny5w4jZy0w9sy3W5DMoRW2DMOzTTgUehQSw+w2uArV/JTc1imwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1YrBFjhOt3ICYrawRLyYJevXt7MB8GA1UdIwQY
MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt
MDliOTkwNWQ0MWRiLzEvelZpc0VXT0U2M2NnSml0ckJFdkpnbDY5ZTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi
LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpjGAMA0G
CSqGSIb3DQEBCwUAA4IBAQBlFUCvRw9QbVdd9aBs9Lw3kVdEpA/891lg//N8p3RW
9M2epdi6tZFWyAvsKjDXUpaPetk+wukAcfs8S+9BkJMEKEPqCcIghs+QwEJ7qgd1
HMpb5meG0Wv6tm5inU/WJ7XyZPnM2XHCO0J3VFUFNh3U1whjratZZ5LL0DYOlmhd
cgN2N8C1DR4E6CHnE2qqukC75jSMnLbjYJ5ygD/4MEibbXqTZj8ajZ0I0ZHrthOF
P5Rm0Mbag8ZAr7IDlD21nddkqF9tX7IWJTdFYrDDvwqnk2m0SHl44tqv9ucRQi2v
i5trZHfFJ0szApZxxiMZxKxDtsZIdmGq22bYrRM7rneB
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:10 2025 by rpki-client