Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/pvRIKp7ter4l53fy9my93MgYKtc.roa
File: pvRIKp7ter4l53fy9my93MgYKtc.roa (raw, json)
Hash identifier: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=
Subject key identifier: A6:F4:48:2A:9E:ED:7A:BE:25:E7:77:F2:F6:6C:BD:DC:C8:18:2A:D7
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F6A4B00F92AEDB0822AB5A1627CA8
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/pvRIKp7ter4l53fy9my93MgYKtc.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5583
IP address blocks: 57.66.0.0/15 maxlen: 32
57.79.0.0/16 maxlen: 32
57.82.0.0/15 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6a:4b:00:f9:2a:ed:b0:82:2a:b5:a1:62:7c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6f4482a9eed7abe25e777f2f66cbddcc8182ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:48:2c:36:83:cb:ff:a3:72:44:37:4c:e3:
50:e9:50:bd:b3:aa:07:f4:af:1d:1d:77:03:47:f3:
9e:f8:bf:16:73:4b:72:f8:31:2c:6a:d4:0f:ec:bc:
1b:9f:7d:62:97:79:3b:3f:ed:26:24:7e:ab:7f:b1:
74:d7:8c:dd:69:bf:8a:71:2d:01:29:2e:b9:59:b5:
9f:4f:3c:87:ac:11:86:8c:20:f1:a5:cf:ef:49:78:
4d:66:41:d7:9f:3f:da:1f:87:f6:04:70:cc:e3:6b:
91:4c:3d:33:24:d9:7d:ae:6b:26:5b:5e:99:da:0b:
79:26:fb:24:d1:0c:c5:5d:02:b0:2f:35:b8:13:98:
8b:f6:6e:73:b2:b6:85:3e:17:b6:7e:3a:3a:0d:6f:
82:ec:ff:b4:24:ad:1c:04:82:01:a0:5b:ff:c9:d1:
f9:c0:f2:de:62:b0:14:ce:f4:e0:fa:da:a0:d7:23:
b9:82:99:0c:01:b3:78:01:c5:89:8c:fb:57:e4:40:
13:7e:43:68:8f:51:6d:3d:b5:8f:4b:92:25:da:f8:
00:b0:99:c3:8a:f4:be:35:3c:21:c2:25:df:67:0b:
f8:a3:26:d3:d4:aa:7b:b4:27:17:d0:0c:9c:fd:cc:
c1:e2:36:69:8e:6e:7a:e0:12:84:1d:0a:34:5c:5e:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:48:2A:9E:ED:7A:BE:25:E7:77:F2:F6:6C:BD:DC:C8:18:2A:D7
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/pvRIKp7ter4l53fy9my93MgYKtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.79.0.0/16
57.82.0.0/15
Signature Algorithm: sha256WithRSAEncryption
08:05:3a:16:c9:ec:6e:e4:63:cc:1d:25:c3:47:3b:d7:a4:7b:
c0:52:b1:1c:de:21:c4:6a:25:6c:1d:fb:47:48:00:70:3f:97:
6b:01:43:7f:76:82:36:0e:5f:cc:c9:c0:bf:b4:42:70:9f:f6:
e2:01:40:b4:d3:c0:b5:99:85:70:78:28:41:73:a5:79:b4:c0:
0a:e8:71:36:b7:40:25:c3:8b:c9:a8:fb:c6:8f:18:bd:d6:37:
b0:93:af:da:e4:e9:ad:bb:fe:b4:53:00:20:c3:ed:65:c7:f6:
da:19:4c:2a:b9:b9:f2:da:f6:92:36:be:98:1b:77:72:1b:e3:
ab:ee:73:42:02:9d:c7:12:b9:0f:44:fd:46:18:77:cd:93:86:
f1:c1:33:8b:52:97:4e:46:8c:77:40:5a:1b:94:39:91:34:8c:
82:63:10:49:f5:79:11:81:f3:6b:a0:36:9a:ef:18:5d:3f:5a:
f1:28:8d:d2:b5:ad:50:52:d7:1b:67:75:e9:94:4b:d4:c7:66:
34:bd:16:90:1f:50:64:f0:01:5a:a5:73:ac:6b:1d:b3:7b:65:
d3:2b:01:cb:ea:21:1f:50:b7:cb:34:40:42:31:27:88:da:c5:
8b:25:5b:4b:fd:f3:51:43:77:48:a9:33:17:23:eb:85:c5:80:
a1:b9:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net