Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa
File: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (raw, json)
Hash identifier: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=
Subject key identifier: 75:96:FA:2F:32:5F:2F:7F:A4:76:F2:6F:B2:81:CE:D4:2A:5B:AF:FC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA33C78903E9459355DEB1A69DF220
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 37.114.32.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
43.251.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:33:c7:89:03:e9:45:93:55:de:b1:a6:9d:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7596fa2f325f2f7fa476f26fb281ced42a5baffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:2a:cb:9f:1b:80:27:5f:a0:e4:9b:fe:78:
b2:7a:5d:c9:26:09:0d:b6:2b:54:e3:d5:32:99:b3:
bf:4b:74:c3:a7:01:64:b6:ca:c6:a8:c2:4d:49:7e:
d4:db:be:8f:fc:11:d8:ec:31:31:81:77:5b:7f:ed:
d6:45:64:2e:87:59:43:1a:fd:01:ee:2c:6a:dc:a4:
e9:7f:cc:a2:c0:0e:36:c6:31:2c:5b:89:2a:31:a3:
6f:6b:48:48:9b:96:61:8e:e8:ab:c1:71:19:57:10:
eb:5f:3f:f1:37:1d:be:20:d9:a5:3c:4a:5e:70:5e:
87:4f:2e:51:69:e1:92:9a:bc:2e:22:b1:cd:d8:d7:
8e:fb:1e:b4:7c:0f:1e:1c:69:67:96:eb:9a:fe:fc:
57:f6:4a:de:c5:97:02:d6:c7:fe:0b:93:7f:62:76:
42:52:25:a9:6b:f9:2d:f8:8d:45:19:2e:4c:20:7b:
d5:bd:dc:69:12:5c:92:5d:27:97:f1:bc:d2:92:7f:
38:94:b1:f4:d6:dd:13:45:51:4d:fe:7e:7b:60:c8:
c9:2f:5b:1b:1e:9e:65:a8:c0:43:4b:bf:a0:b8:ad:
62:6c:24:98:26:81:76:69:37:92:cf:27:fa:13:6f:
46:24:ad:53:9c:8d:c9:78:5e:da:5c:6d:78:df:4b:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:96:FA:2F:32:5F:2F:7F:A4:76:F2:6F:B2:81:CE:D4:2A:5B:AF:FC
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/24
43.251.162.0/23
Signature Algorithm: sha256WithRSAEncryption
01:c3:d1:42:69:10:cb:de:ca:7d:ef:35:ec:8c:ba:86:56:d1:
40:08:fd:58:27:28:52:f9:fe:a3:85:eb:0d:01:53:82:b3:e0:
40:36:26:b2:1f:19:e1:1d:5f:90:e7:51:3f:4a:15:70:da:30:
78:86:fa:73:52:82:8e:4d:e7:7e:fa:33:ff:70:c9:45:f3:1f:
5c:16:11:33:03:9e:da:5d:34:fd:dd:e1:19:10:51:1d:6f:0b:
18:3d:9a:32:d8:41:01:a3:51:82:3b:46:56:7f:55:03:98:36:
7b:e8:d3:96:75:d7:af:d2:62:71:f1:93:cd:a2:14:bd:6c:71:
06:19:be:de:ef:84:08:2a:f7:65:ce:a1:8c:00:30:06:b1:25:
a0:dd:b3:53:4e:58:7f:86:8f:a6:48:00:0b:56:94:38:42:8d:
1a:2a:d0:33:32:66:71:0d:82:15:8b:1d:c2:32:13:3a:95:80:
61:29:4c:49:e3:b0:62:6c:f2:82:55:a7:4d:65:48:3e:cc:73:
2b:4d:65:66:15:1e:38:eb:8a:14:72:6d:ff:30:68:2e:82:71:
13:a8:98:d2:79:33:6a:9d:d0:49:cc:4e:71:8a:f8:c1:44:5d:
9b:40:3d:71:97:0e:15:bf:c9:88:b9:4f:0f:ee:15:66:8e:8c:
5e:51:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:30:07 2025 by rpki-client