Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/y51o00vmMmDa9uJz_3L1BZLX_PQ.roa
File: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (raw, json)
Hash identifier: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=
Subject key identifier: CB:9D:68:D3:4B:E6:32:60:DA:F6:E2:73:FF:72:F5:05:92:D7:FC:F4
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019421B251B31F632566CA8712CE58C98377
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/y51o00vmMmDa9uJz_3L1BZLX_PQ.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 157.84.32.0/23 maxlen: 23
157.84.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:b3:1f:63:25:66:ca:87:12:ce:58:c9:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb9d68d34be63260daf6e273ff72f50592d7fcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:26:c3:e6:c3:06:30:5b:e6:69:48:57:b4:
c8:a4:4f:92:aa:50:9e:8d:62:95:64:f4:a7:9a:23:
68:a7:22:b4:00:03:92:7b:6d:b5:60:3f:45:7d:81:
99:12:0e:ab:0a:1a:55:d9:7f:56:ca:4e:c8:16:04:
be:69:2e:08:e0:28:e6:f5:b0:91:11:fa:c7:22:07:
d5:70:10:f3:81:37:2d:98:0b:f4:34:21:da:b7:13:
a6:c8:ef:e7:60:ea:cc:34:89:ff:e5:ed:c8:e6:b5:
35:11:b0:6d:55:1a:31:7f:05:74:40:4c:cb:0e:a7:
ca:5e:66:58:4e:3c:42:50:ec:25:35:40:a1:34:e7:
98:16:4e:d0:40:f5:5e:4e:b5:74:32:68:33:6c:a0:
7a:06:a7:ae:70:a6:30:65:de:6d:1e:74:9e:a3:99:
aa:8a:11:fe:af:d1:6e:37:44:08:be:66:7a:8c:fe:
49:11:23:57:57:3b:00:4c:1e:b2:ef:c2:14:dc:5f:
60:dc:b1:b2:03:7f:49:a1:d9:20:d3:2f:26:77:cb:
72:a9:95:dc:01:7e:3c:e1:c7:30:de:3e:f7:91:e6:
d4:a9:6a:cb:e8:70:c7:64:ba:2f:e3:d0:87:8c:6d:
e9:a1:91:f5:7c:2b:e9:10:f5:9f:6e:c1:70:82:f6:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:68:D3:4B:E6:32:60:DA:F6:E2:73:FF:72:F5:05:92:D7:FC:F4
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/y51o00vmMmDa9uJz_3L1BZLX_PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
157.84.40.0/23
Signature Algorithm: sha256WithRSAEncryption
be:79:ce:45:f2:63:21:c5:c0:10:7e:62:75:f7:61:df:d6:9a:
77:58:3d:2d:1c:43:ce:b5:c6:b2:06:09:55:36:a0:bd:92:6a:
12:b5:7a:f8:9a:53:b1:3c:de:8b:2b:75:80:28:57:c3:ca:31:
60:af:47:af:6f:c6:01:50:de:b8:71:ea:75:21:69:68:5a:72:
72:13:fe:6d:ee:a0:e5:94:ec:fe:45:8d:cb:89:40:bc:4d:c5:
65:b4:8a:ee:7a:e6:80:42:a7:51:6c:82:4d:ce:66:da:2a:20:
6e:bf:d4:79:90:34:ce:a0:84:fe:77:9e:cb:04:95:c0:26:0e:
8e:9a:1e:75:f5:6b:44:dd:2e:7b:6a:47:e9:6b:94:7c:62:8a:
1f:87:91:2b:93:63:04:0c:6b:e9:96:59:75:1c:96:88:fe:4c:
77:de:eb:b4:07:a0:e1:80:19:5b:fd:34:21:02:7d:d4:72:b6:
fc:bc:a7:ad:81:0e:6d:d7:cb:bc:1e:bc:a7:10:a8:91:46:7a:
7b:68:8f:a0:8f:dd:b0:f1:7d:8c:59:ac:be:24:f5:bd:93:16:
2b:1e:f0:56:c6:50:a1:78:4b:32:db:09:f5:48:6f:a9:9b:39:
3b:d4:44:e3:22:8f:ce:4c:e3:da:18:a0:1a:e2:3c:98:2b:5e:
41:c4:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:46:06 2025 by rpki-client