Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/V6zEBzayoar1bRNapjv0e_aKUGw.roa
File: V6zEBzayoar1bRNapjv0e_aKUGw.roa (raw, json)
Hash identifier: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=
Subject key identifier: 57:AC:C4:07:36:B2:A1:AA:F5:6D:13:5A:A6:3B:F4:7B:F6:8A:50:6C
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F6DF1395079B98CA4E081CED2E468
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/V6zEBzayoar1bRNapjv0e_aKUGw.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25186
IP address blocks: 57.197.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6d:f1:39:50:79:b9:8c:a4:e0:81:ce:d2:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57acc40736b2a1aaf56d135aa63bf47bf68a506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:68:4e:9c:6e:70:0c:c5:8f:9c:82:75:00:
11:4e:5c:84:88:89:90:41:98:ba:44:5d:5d:11:42:
a3:4b:4e:13:87:40:4d:85:a7:95:1b:f1:28:29:92:
54:e7:4d:33:f0:70:3a:07:f5:00:41:74:94:a1:f1:
71:c6:e1:42:ae:d6:e8:0f:5e:91:2b:6e:af:be:2f:
91:9a:f7:84:01:de:59:d6:0e:10:21:5a:c6:1e:15:
15:ae:28:69:86:c5:92:2d:65:5b:95:d7:2b:54:59:
99:f3:11:a6:7a:d9:c1:b4:8c:d1:63:01:fb:67:ff:
1a:29:bc:10:8a:3d:e9:be:d7:7a:eb:b9:0a:30:2e:
7a:e2:86:1a:d2:e5:c4:fe:e0:ea:c7:db:e4:9c:2f:
0e:ca:a6:7c:54:2f:8d:d5:96:ed:bc:62:4a:fb:35:
ae:8e:5d:9b:b1:2d:55:e1:bc:fc:41:cc:f5:90:ee:
56:b0:f0:76:b8:8e:15:7b:19:d0:ed:f8:e3:73:1d:
35:76:71:ea:76:0a:99:b8:0e:72:b7:4a:0e:24:db:
ba:ec:07:db:b0:e9:e8:1a:db:44:53:c0:3f:16:19:
b0:f4:26:9a:06:87:7e:e3:42:6c:09:2a:d7:4d:f3:
a1:d4:e6:1e:23:a6:f0:d2:3a:7d:03:c2:80:04:30:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:C4:07:36:B2:A1:AA:F5:6D:13:5A:A6:3B:F4:7B:F6:8A:50:6C
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/V6zEBzayoar1bRNapjv0e_aKUGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:71:a9:34:f3:db:87:f4:40:51:c4:96:f2:2f:a5:9e:9b:55:
93:60:2a:3f:57:ce:4e:4f:29:0b:a5:4a:8f:a3:3c:e5:20:77:
a5:28:5f:c2:0e:3d:59:d0:bd:ca:c4:55:d7:a7:ef:64:fd:70:
58:29:79:94:e4:a2:e7:7a:1e:eb:cb:03:bb:7f:7a:34:65:ed:
f9:4c:ee:74:6a:60:a6:6a:1c:58:a9:fb:27:a5:2d:2b:a5:ff:
e9:4b:8d:d8:ac:56:3f:63:e9:2b:c8:b8:76:0b:25:9e:9c:cc:
29:7c:14:e6:36:44:22:50:b3:e6:ec:82:87:2b:d9:57:db:b4:
79:d9:1a:df:b9:b9:9b:9a:53:85:aa:ce:1d:bd:c3:9f:10:fc:
57:d0:41:7e:24:33:10:52:79:f2:38:e1:bd:4a:9a:3f:f6:14:
a1:7c:a4:58:28:aa:68:ec:f9:94:ea:1b:76:18:d1:b5:40:e4:
95:05:05:45:df:d3:1f:aa:21:01:23:6c:91:71:2e:e3:80:0f:
af:a7:f4:f7:15:89:84:6a:4b:9e:05:6c:69:27:b9:38:0e:c0:
18:78:39:ec:1a:40:f3:df:33:0f:af:72:94:29:67:14:d8:46:
21:9a:f6:e0:8f:2e:5b:6c:68:5e:b7:29:24:4c:a8:10:a9:3c:
8b:bf:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net