Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ZBzbPGBDovqZwVURk14Ee7YUzdA.roa
File: ZBzbPGBDovqZwVURk14Ee7YUzdA.roa (raw, json)
Hash identifier: Mkq9eLPJzfZgtUY2uTub0jxKpZSU17j0fbOwh9neYrE=
Subject key identifier: 64:1C:DB:3C:60:43:A2:FA:99:C1:55:11:93:5E:04:7B:B6:14:CD:D0
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EECDCDC2765E68AF1B0897E2C0884
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ZBzbPGBDovqZwVURk14Ee7YUzdA.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214053
IP address blocks: 2a0e:aa07:ec10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ec:dc:dc:27:65:e6:8a:f1:b0:89:7e:2c:08:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=641cdb3c6043a2fa99c15511935e047bb614cdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:b0:a1:eb:2c:c0:de:5b:5f:44:d5:50:57:
46:2d:f5:3f:96:13:a5:1a:c9:67:ca:2b:79:e8:e9:
46:40:a4:e0:a3:ff:69:18:01:c0:fa:04:dd:48:c8:
9f:55:92:6f:45:8d:97:0b:c9:1b:71:2c:71:c9:46:
a3:ab:2d:65:bf:f1:47:9b:b4:b3:41:99:97:e6:2e:
2a:f1:23:1c:f3:b7:3f:30:40:45:12:98:16:86:e2:
d1:f7:b7:d7:f4:a6:62:fc:08:22:3d:98:9b:84:71:
80:5e:8a:ad:9a:f0:c8:5e:6d:b2:d3:98:df:e3:cf:
c4:6a:a8:9a:39:b9:51:5a:9d:2c:ed:af:9a:a8:82:
1e:f2:4e:c4:76:5f:78:61:b9:ad:a8:2c:6f:5d:9f:
26:5e:81:6e:d3:c9:8a:65:33:72:43:14:cf:ac:38:
ed:ea:8b:06:e1:a1:ef:d6:c5:04:8b:31:78:93:86:
f0:54:f1:29:34:8a:a3:a0:a9:0f:df:90:0a:29:1b:
96:32:18:66:ab:c9:3f:33:77:52:fe:b2:5e:48:45:
a4:4f:ef:6d:52:d2:2a:68:94:59:10:fc:c5:99:01:
d1:48:f5:c4:8d:c9:ec:ae:9e:86:cf:e6:08:65:02:
6f:8d:0d:8d:da:68:89:7c:7a:5f:de:99:68:88:69:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:DB:3C:60:43:A2:FA:99:C1:55:11:93:5E:04:7B:B6:14:CD:D0
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ZBzbPGBDovqZwVURk14Ee7YUzdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:ec10::/44
Signature Algorithm: sha256WithRSAEncryption
32:18:65:cf:38:ab:00:0b:54:85:51:d3:29:99:dd:70:ab:d7:
f6:0d:63:d7:e9:3e:84:28:70:f2:d9:9b:70:42:6a:f7:c4:d1:
43:55:41:ae:75:5e:6c:0c:ca:7d:aa:ce:de:d9:b2:11:ff:8d:
6a:79:e6:0b:bb:2a:04:1e:cf:0d:3a:54:fc:df:27:0b:7f:0a:
95:80:20:e5:21:b3:8f:f7:38:9f:e2:13:32:0d:a0:21:c5:07:
ff:ef:a4:6f:fd:cf:62:3f:96:9a:71:63:f2:0d:26:be:a3:cd:
8d:57:a7:da:f5:2a:70:50:fb:9d:40:55:6d:df:1b:8b:91:50:
14:01:21:0b:5e:eb:cc:2b:81:a1:47:14:04:60:cc:e8:34:41:
06:3b:46:d2:60:35:50:00:a7:a6:e8:6b:44:29:1b:6b:b7:30:
34:0c:47:8d:c4:56:f8:e5:02:b7:38:53:d3:13:9d:fc:04:2c:
24:95:a5:7c:ce:77:e6:21:e0:2a:ee:8a:4f:f1:b5:4e:86:96:
a5:08:c2:40:1a:66:ae:79:be:45:24:eb:a5:42:e7:d4:bb:7a:
51:f5:68:63:cf:ca:f4:33:be:b4:5f:62:d1:e4:80:f6:34:64:
0c:68:60:50:d0:a0:b7:c1:ae:eb:9d:31:5f:f7:97:17:a2:8a:
57:69:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:08:30 2025 by rpki-client