Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa
File: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (raw, json)
Hash identifier: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=
Subject key identifier: E9:9C:06:FD:8E:B4:4F:2E:4F:4E:A4:EB:0E:52:AC:CA:98:5B:95:74
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 0194222000D44C046F18E397604698686120
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265530
IP address blocks: 176.57.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:d4:4c:04:6f:18:e3:97:60:46:98:68:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99c06fd8eb44f2e4f4ea4eb0e52acca985b9574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:12:25:dc:f9:ac:8c:5e:5e:31:b3:04:c2:
d2:cd:47:0d:12:4b:4f:12:f9:e4:50:96:f5:e5:6f:
3d:c8:0c:5a:eb:8e:82:d6:22:86:7a:57:93:32:17:
a6:15:ad:a5:05:36:78:82:48:ee:98:57:ca:c6:af:
81:29:9f:63:bc:97:d7:73:6c:f5:ad:d4:d8:44:76:
f1:88:7d:2f:1c:89:75:6c:31:f6:fc:dd:6a:e6:7e:
0d:a3:c5:ed:b1:27:f1:bf:e7:8d:0b:7b:f6:c7:b0:
33:b0:af:66:51:7f:4c:7e:c9:3c:fa:06:dc:3a:ea:
42:59:e9:d1:77:ac:00:be:38:a1:2b:09:0c:56:0b:
9d:94:27:c2:5f:17:c7:b1:25:fa:04:f1:4a:d2:3b:
a0:26:23:4e:67:b4:7c:db:56:43:a4:2d:92:15:42:
b5:a8:33:a1:5a:54:2b:fd:fa:ca:13:f7:0f:06:bf:
5e:2e:36:ec:f1:a2:59:9f:01:4e:b4:d8:fe:e7:b6:
1b:37:20:dc:87:7b:8e:06:a0:52:7e:d1:b1:10:70:
3b:13:45:5a:f3:2c:65:77:da:20:4f:03:28:4d:20:
b0:3c:df:39:f5:09:95:e0:86:eb:d3:9a:87:c9:de:
88:5b:46:8c:1e:94:a2:c8:06:b9:c3:ef:7d:f4:5b:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9C:06:FD:8E:B4:4F:2E:4F:4E:A4:EB:0E:52:AC:CA:98:5B:95:74
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.201.0/24
Signature Algorithm: sha256WithRSAEncryption
11:da:97:37:42:5d:8d:84:67:ae:d3:ba:d9:89:80:7f:4e:dd:
a9:b6:49:a3:a1:e1:7c:71:67:17:c7:45:b8:e4:04:f6:61:c6:
41:e2:56:50:0d:64:ff:56:c8:af:94:4c:9f:c2:8f:e6:45:85:
b9:30:80:62:02:02:f4:2a:1c:5c:11:70:f9:4d:6e:f3:56:51:
ef:b2:eb:d6:a1:8a:d5:8a:23:a5:36:c6:8e:5a:ac:e1:5b:62:
83:9c:d9:d6:1b:e9:30:23:77:35:a3:51:bf:9d:80:c1:58:b3:
87:d5:7d:68:a3:89:cf:4f:4b:bd:c8:7c:c1:ad:10:04:46:82:
e2:ea:aa:04:09:8b:43:52:d6:79:4d:2f:cb:2b:df:57:19:c5:
06:3a:cf:d9:b9:c3:09:e0:cc:e6:35:0c:7a:fc:96:4d:46:1e:
54:ed:89:b9:da:57:6e:88:85:57:77:b8:b5:c9:05:99:f7:e9:
3b:71:6b:33:d5:da:2d:f6:a5:55:a4:8e:7e:5d:77:6e:3b:5e:
f6:81:6f:15:81:0b:37:cc:a3:3e:f7:30:1e:7c:32:d4:b1:1f:
d7:d0:8f:d0:9b:88:8b:37:a5:d8:8c:79:73:9e:f3:4a:05:48:
52:a6:ae:bc:ba:9b:d1:b9:3c:13:e8:c9:ca:61:c8:93:02:a6:
f5:55:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:04 2025 by rpki-client