Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zCQB2Z-8_P9hDChicXvuOZrXDuA.roa
File: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (raw, json)
Hash identifier: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=
Subject key identifier: CC:24:01:D9:9F:BC:FC:FF:61:0C:28:62:71:7B:EE:39:9A:D7:0E:E0
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAFF452FDCE8BE4D71AF0F6F9043D6
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zCQB2Z-8_P9hDChicXvuOZrXDuA.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212360
IP address blocks: 2a0f:607:1054::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ff:45:2f:dc:e8:be:4d:71:af:0f:6f:90:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2401d99fbcfcff610c2862717bee399ad70ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:c6:80:33:30:04:f8:18:6b:32:b9:cc:d7:
01:e1:42:e9:a4:6e:a6:06:53:37:dc:4d:e4:79:84:
3a:3a:59:1e:ca:92:1e:89:e5:87:9f:6d:6c:62:6e:
7a:cf:42:8a:e0:52:a0:7f:e3:58:f2:4f:bb:a7:00:
17:75:1c:08:0f:f4:26:14:2e:db:53:3b:d3:51:56:
80:88:8a:15:5c:97:60:3a:83:e3:09:76:f3:77:db:
4b:a8:cc:ef:01:1e:61:ef:33:c8:d6:fb:40:94:6c:
23:70:01:f6:8a:b2:67:ce:cd:17:35:ab:5b:bf:ad:
52:33:e0:08:0c:8c:2e:35:12:93:0b:98:74:0c:b7:
bf:8e:a0:5f:78:86:6b:b1:0d:14:04:1b:1f:ea:95:
90:71:f7:71:38:bc:03:58:8f:af:54:dd:5e:30:f7:
9d:95:21:b3:a4:07:8e:45:15:2d:e0:36:2e:11:df:
eb:1c:b4:8b:b7:7c:16:1c:02:33:f2:fb:55:f2:ba:
09:e6:a8:06:aa:6b:6b:e2:b2:86:65:cf:ce:e2:f2:
60:23:5d:42:78:37:e4:bc:96:85:71:35:d5:a2:83:
3a:34:df:b4:b7:61:86:99:87:44:1b:3c:75:9d:77:
ae:28:72:65:4a:38:64:e6:08:44:c3:0b:dd:11:23:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:01:D9:9F:BC:FC:FF:61:0C:28:62:71:7B:EE:39:9A:D7:0E:E0
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zCQB2Z-8_P9hDChicXvuOZrXDuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1054::/48
Signature Algorithm: sha256WithRSAEncryption
08:39:41:e4:e7:0f:5e:46:62:7b:a0:6d:fb:0f:eb:ca:d6:36:
5d:c6:c7:9b:05:fb:c7:de:78:97:81:76:20:fd:71:34:5d:46:
61:a2:85:30:a3:75:fa:5a:b4:9f:53:50:0b:22:07:59:b4:c8:
49:2f:81:75:4e:e0:c3:83:cf:01:d3:61:43:ca:7d:35:92:35:
55:10:39:27:c4:7b:fe:6a:62:09:56:2b:bd:c2:52:21:fe:79:
e6:91:07:8e:be:e2:02:d5:1e:49:54:33:ff:39:72:54:5d:9b:
b8:7a:d3:24:ce:c7:f3:58:90:21:00:70:4c:78:b8:b8:0e:90:
4d:c3:1f:1d:9a:7f:e6:01:d5:33:58:39:c0:3d:dc:85:2e:e6:
3f:fa:c7:97:ea:9f:77:17:fd:75:13:25:93:12:13:cb:16:4e:
f7:8d:d4:c7:e2:41:62:a9:b4:23:17:57:69:b1:91:65:1f:ea:
58:8b:af:29:fe:24:8f:c1:7b:af:34:b9:2e:53:8c:a1:6f:33:
d2:3a:02:62:a2:76:96:53:66:a0:e6:5b:5c:50:8a:bd:6a:5f:
b4:14:eb:28:d6:63:26:8a:c5:62:31:53:d9:04:c9:15:1e:1e:
99:25:c1:6d:22:89:4b:f8:9c:ba:af:c6:4b:c8:83:00:22:43:
f5:86:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:35 2025 by rpki-client