Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/zVuCymN8JrRk9IcWOjdOd2y5_r8.roa
File: zVuCymN8JrRk9IcWOjdOd2y5_r8.roa (raw, json)
Hash identifier: 0in95Q1f0yHm24tHTyK5WD1k8nyUtT+dnuohH7HB7vg=
Subject key identifier: CD:5B:82:CA:63:7C:26:B4:64:F4:87:16:3A:37:4E:77:6C:B9:FE:BF
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 01941F8C5705C6CB71476B54006F95B46DDB
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/zVuCymN8JrRk9IcWOjdOd2y5_r8.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 159.60.0.0/20 maxlen: 24
159.60.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:57:05:c6:cb:71:47:6b:54:00:6f:95:b4:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5b82ca637c26b464f487163a374e776cb9febf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:c3:a3:f1:98:03:42:74:58:6f:a3:db:ea:
96:db:78:fe:12:3f:01:27:f9:47:d4:1e:33:ba:0f:
bc:eb:4f:fa:5e:97:24:c0:ce:12:16:e2:05:a2:59:
32:5b:e1:a2:41:73:ca:59:a4:f2:36:f1:c6:07:0c:
87:5b:5f:50:a4:8a:d0:40:4b:bb:4f:3d:c1:53:e6:
a6:3d:88:e3:f6:7c:96:46:54:9d:87:ce:ea:8f:c4:
5f:13:82:7b:f6:a2:15:3b:fa:46:13:04:11:a1:1a:
bc:d7:1c:ff:7d:78:0a:8d:78:16:90:9d:c9:d5:b7:
91:66:54:93:1e:13:17:36:c5:ab:05:86:a1:bf:67:
0b:d5:24:15:39:9b:f2:e3:9b:54:2b:71:1b:55:76:
14:ef:c3:cf:7a:82:97:6a:32:12:a9:82:ff:77:89:
a0:2b:ab:51:ef:60:31:af:a4:63:44:53:05:64:82:
11:d9:16:b6:1f:c1:43:10:c6:b3:ca:0e:13:cb:1e:
32:15:98:45:08:06:17:1a:39:58:3b:b0:e7:af:82:
b9:e6:cd:47:fe:ef:a8:d4:a5:6e:0a:d8:8e:eb:43:
46:9c:7d:3c:1b:ac:a1:49:95:00:e0:17:5d:06:d9:
2c:e4:72:0f:f4:cc:11:c2:3a:76:11:de:d2:be:9e:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:82:CA:63:7C:26:B4:64:F4:87:16:3A:37:4E:77:6C:B9:FE:BF
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/zVuCymN8JrRk9IcWOjdOd2y5_r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.0.0/20
159.60.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:ea:fe:86:30:fc:ab:ee:7a:11:a3:3d:8b:6a:12:6c:02:b6:
b7:96:e9:28:4f:44:0d:fb:52:b5:0a:4d:a5:33:7d:22:e6:75:
31:bb:ae:12:fa:05:08:e0:a9:9d:0a:a4:b0:b6:23:ae:4d:43:
49:67:31:75:36:a1:bd:05:bc:d1:bf:cf:b8:62:af:fa:f4:fc:
c2:2d:cc:58:f5:2f:24:cf:b8:cd:72:92:59:ca:99:46:96:7c:
bd:b7:08:ec:e5:51:55:e9:44:a2:55:a1:83:d4:09:52:30:5c:
3c:34:c0:bd:ce:82:a2:87:69:1c:09:20:43:73:22:9f:90:ec:
67:95:b2:88:d4:b5:7f:e1:b2:3a:ab:56:1c:72:9b:c0:8a:00:
4f:6c:8b:db:74:6b:de:12:f1:39:a5:99:8d:72:e5:31:21:91:
82:b3:be:93:ab:51:57:3f:67:88:eb:0e:b2:10:58:ba:88:17:
e8:8f:3f:be:4a:bd:b9:e8:50:4e:10:09:8c:cc:eb:ed:0d:d3:
2c:59:a3:ab:ba:5e:fe:3e:b4:f9:d8:1a:d9:82:bc:87:2a:f4:
9e:c2:bc:56:4b:53:3e:d2:b1:c3:7a:87:d0:3d:9f:6c:57:85:
63:51:3b:46:71:e8:6a:25:f2:3e:52:29:4e:49:23:9d:45:a5:
c8:a1:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:33 2025 by rpki-client