Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zm1UWgnwBW82jcSo5C2Oh1r6dTQ.roa
File: zm1UWgnwBW82jcSo5C2Oh1r6dTQ.roa (raw, json)
Hash identifier: sv83dTiCyeJyytVMfD/7fItOIXp4iPEltWhoNEjsV64=
Subject key identifier: CE:6D:54:5A:09:F0:05:6F:36:8D:C4:A8:E4:2D:8E:87:5A:FA:75:34
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252235E4E6D2B70C2340E860B73DC342
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zm1UWgnwBW82jcSo5C2Oh1r6dTQ.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209294
IP address blocks: 2a0e:b107:110::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:e4:e6:d2:b7:0c:23:40:e8:60:b7:3d:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce6d545a09f0056f368dc4a8e42d8e875afa7534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:87:d9:a6:ef:ce:6b:9f:4e:d5:df:9c:ca:
82:96:0b:fb:0a:37:eb:d9:3b:7a:e7:23:cf:b6:fd:
cd:8f:cb:3b:3b:f6:36:41:ee:90:23:18:86:e2:7f:
5e:06:65:94:1e:f1:d0:c8:72:05:d5:57:eb:d7:c4:
b8:5b:01:20:c4:9a:8e:e4:01:be:c2:5b:d0:c4:7a:
d3:ef:f7:58:f6:4e:a5:5f:df:46:14:a7:65:ec:87:
c5:85:61:93:49:e4:b4:92:15:5b:b5:50:8d:7f:b2:
da:8e:8c:a0:21:4a:bf:eb:e1:ef:8f:4f:f4:50:ee:
38:8c:86:55:5d:a7:bd:a9:64:fa:8b:5e:ff:16:27:
04:6c:c1:4b:9d:e6:3e:9f:1c:d3:0a:f3:4e:6a:86:
47:76:ce:80:94:2b:32:d5:57:5a:67:6b:89:e5:5a:
3a:28:13:44:b5:5b:e3:eb:96:c1:eb:f2:52:07:bd:
db:d2:70:51:70:d8:4e:4d:98:a1:66:4b:0b:b3:08:
a8:25:ef:fc:56:ef:79:08:46:19:00:16:dc:b8:2b:
73:76:c2:90:e0:d8:40:62:4f:35:d8:bc:e6:d3:03:
1f:a4:11:f7:a2:62:81:24:c0:20:13:bf:e4:51:22:
4f:3e:fa:db:22:c5:18:31:0f:32:da:e7:4b:da:35:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:54:5A:09:F0:05:6F:36:8D:C4:A8:E4:2D:8E:87:5A:FA:75:34
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zm1UWgnwBW82jcSo5C2Oh1r6dTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:110::/44
Signature Algorithm: sha256WithRSAEncryption
bf:cb:ab:30:fc:d5:cf:1e:60:f3:f7:14:ea:53:59:27:f1:ff:
34:e5:6e:c9:ea:c9:36:f2:05:ec:41:bc:9f:6a:2f:19:07:e5:
12:1a:af:51:87:76:bd:d7:b2:d5:69:0b:76:0b:a8:27:73:43:
fd:4f:3d:9d:d6:2d:14:95:d8:1b:f9:7d:1c:63:5a:e5:f7:00:
56:ee:5f:a6:13:b6:94:b3:d1:2f:8a:3a:c8:ab:5d:1c:ea:33:
cf:cb:a1:de:ec:bb:12:2b:be:54:e4:e3:4e:ee:5f:21:04:77:
98:ba:57:17:b2:fb:5d:4c:90:e9:1b:57:5c:1c:8b:64:94:02:
ea:8d:ea:e6:2c:c5:c7:f0:1b:99:67:21:a7:a5:00:bd:bc:d8:
c0:d4:0e:66:f6:fe:51:1b:f7:87:ba:f4:d6:8a:16:df:43:ae:
e5:e9:1b:d3:22:73:6e:fb:f6:18:5e:72:7a:60:34:ba:39:8b:
67:3b:ed:bd:38:4b:a3:8a:3c:34:cb:e3:be:6c:6e:b0:61:a4:
c2:7f:42:aa:4c:15:06:9e:a8:8b:66:8a:f4:41:29:87:e5:21:
fd:a8:ab:5e:08:f5:04:57:05:1d:c0:d2:5e:5a:79:63:55:5a:
cf:29:5c:78:5e:23:7e:f6:58:2a:a9:46:02:8f:cb:45:7b:02:
7b:68:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:57 2025 by rpki-client