Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/z-gzGRp6g46RfhDlKhHGqEoG68k.roa
File: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (raw, json)
Hash identifier: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=
Subject key identifier: CF:E8:33:19:1A:7A:83:8E:91:7E:10:E5:2A:11:C6:A8:4A:06:EB:C9
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019420680AFD85AE4CDA9086FAD5FAE49EDB
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/z-gzGRp6g46RfhDlKhHGqEoG68k.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47787
IP address blocks: 2001:b18::/32 maxlen: 48
2001:b18:1005::/48 maxlen: 48
2001:b18:1009::/48 maxlen: 48
2001:b18:1014::/48 maxlen: 48
2001:b18:1019::/48 maxlen: 48
2a0d:82c0::/29 maxlen: 48
2a0d:82c7:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0a:fd:85:ae:4c:da:90:86:fa:d5:fa:e4:9e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe833191a7a838e917e10e52a11c6a84a06ebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:a7:56:30:d4:be:9d:32:d4:99:40:5b:9b:
85:e1:26:2a:e1:cf:f0:13:59:66:96:90:90:b4:01:
d9:88:68:3a:0a:fd:2c:d3:80:ad:44:34:60:b2:ce:
03:d0:48:0b:6e:55:33:bb:e2:e8:45:e1:f1:d8:94:
30:e9:57:da:ae:2a:39:ca:5f:3d:91:d7:f5:eb:b3:
9a:ba:4d:f8:e6:ea:a3:40:06:83:73:c1:03:42:e7:
eb:d3:07:fc:45:3a:ad:a8:6e:00:61:c2:f4:20:13:
d0:72:9d:69:58:ca:90:85:08:11:0d:08:c4:42:8c:
0d:2c:24:d8:da:a6:a3:8c:5b:65:69:e2:c4:cf:1f:
96:e2:ef:cd:57:8e:32:b5:d0:c2:67:30:3f:89:48:
7b:d9:5a:59:24:b5:c3:59:12:8d:2f:d1:2e:3a:eb:
53:91:88:7f:48:4b:7e:09:98:71:ea:8a:60:55:80:
63:b3:6a:bf:17:2c:22:50:4d:81:d4:5a:d2:ac:f7:
37:a8:96:9d:2d:65:70:dd:6f:ec:29:00:5e:1d:a4:
d7:4b:65:9a:51:c2:68:5b:63:96:0e:88:d9:41:fe:
78:19:a5:fc:6a:da:2f:74:6e:5f:22:66:10:91:51:
a7:dd:bc:5d:33:5e:cd:58:ec:ef:ed:07:0f:51:40:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:33:19:1A:7A:83:8E:91:7E:10:E5:2A:11:C6:A8:4A:06:EB:C9
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/z-gzGRp6g46RfhDlKhHGqEoG68k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:b18::/32
2a0d:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:66:82:92:22:64:42:3b:b2:96:42:ad:23:95:27:dc:05:68:
e5:09:a3:a6:08:8f:e4:29:e3:4a:27:4a:96:ba:59:91:b6:0d:
6f:42:d6:17:89:89:a3:4e:d8:56:7f:b0:7f:f0:52:bd:af:8d:
7c:38:b8:4f:e9:41:05:62:b3:2b:39:73:4a:97:fc:a6:be:d4:
20:ea:40:0e:65:e0:56:4f:d3:68:21:63:99:3c:79:ac:66:08:
f3:41:75:20:c7:f3:00:03:de:e2:f4:34:38:b8:f5:60:4f:dd:
fb:1c:37:9f:3a:76:d3:f4:ad:a8:b8:1d:ad:76:8a:60:7a:f2:
03:f4:af:70:a4:df:ff:dd:8e:65:7b:b6:ed:7f:b4:c9:fb:b6:
a1:d8:a2:0b:42:0f:ae:8d:2d:21:69:f2:d1:59:a0:18:f0:ea:
19:0e:bf:1f:fe:95:ae:a4:db:16:2e:ba:28:4d:b8:ce:81:db:
f7:2b:65:90:82:df:52:ee:9a:74:ee:0c:45:87:3c:7e:fb:92:
a3:e6:80:50:e9:53:b5:0d:06:53:42:15:41:54:88:f3:bb:22:
62:70:b1:80:3a:55:87:de:36:e3:05:92:ca:06:2a:c3:bc:8c:
26:c8:f8:af:2f:9f:e4:7b:b6:2a:e3:df:d8:44:85:0a:e4:6e:
5e:8d:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:21:41 2025 by rpki-client