Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/rZcv-swn7039blCdnkHsmvuTEE0.roa
File: rZcv-swn7039blCdnkHsmvuTEE0.roa (raw, json)
Hash identifier: YkjIIueA3tSkus+TXP81fG/yVykEarWy1n4j2aCv7FI=
Subject key identifier: AD:97:2F:FA:CC:27:EF:4D:FD:6E:50:9D:9E:41:EC:9A:FB:93:10:4D
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 019420D604EEAA559DE3BE8DAC04F744AD59
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/rZcv-swn7039blCdnkHsmvuTEE0.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 2a0f:7880:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:ee:aa:55:9d:e3:be:8d:ac:04:f7:44:ad:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad972ffacc27ef4dfd6e509d9e41ec9afb93104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cb:37:d0:e6:cb:ec:e4:84:38:99:50:2e:33:
4a:b2:b5:f4:4d:8f:f5:6b:16:af:1b:89:ac:e8:19:
a2:b0:3d:40:4e:98:1a:0b:af:00:0a:d4:b4:f8:da:
1e:9f:0a:d5:3e:80:bb:3e:db:c9:d3:e7:4d:80:b1:
f7:95:2b:2e:e2:88:ee:da:e5:c7:42:c1:3c:db:8a:
73:5f:e0:24:65:79:f5:13:07:4f:e3:44:d6:6a:4f:
a6:71:42:3d:74:bb:cb:74:68:c2:ee:c1:07:1d:b4:
8b:51:ee:12:01:cf:15:a1:0d:ee:04:d0:97:56:e2:
1c:8b:7e:e9:18:37:95:3f:1c:e5:93:5e:51:3c:79:
53:e9:b2:14:27:f4:35:c1:8c:1b:30:55:73:15:de:
96:90:b1:64:96:f2:e6:dd:93:42:28:86:93:17:ec:
9d:51:74:f1:95:15:5d:b5:17:43:86:97:30:17:db:
ce:61:19:e0:21:c2:1b:35:d2:e2:f3:2b:00:82:8d:
98:41:d3:b3:16:f8:67:25:73:e9:f7:16:7a:5d:ad:
fd:f9:33:77:62:bd:e7:8b:ca:52:d9:b4:20:8e:33:
9d:57:ae:17:d9:fd:e1:67:9d:ae:23:1e:07:7b:6f:
da:5d:3b:25:c6:4b:ca:be:4f:67:84:d6:33:cd:8c:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:97:2F:FA:CC:27:EF:4D:FD:6E:50:9D:9E:41:EC:9A:FB:93:10:4D
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/rZcv-swn7039blCdnkHsmvuTEE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:100::/40
Signature Algorithm: sha256WithRSAEncryption
d0:4b:fe:85:c9:2d:1b:e3:ae:96:43:91:e1:62:f4:46:0f:80:
8b:93:f2:e1:0b:4e:53:d4:0f:0e:72:d2:3a:24:06:14:14:96:
66:8f:03:1c:10:59:ea:45:49:a9:50:5d:5d:90:e1:83:ce:59:
68:8d:c8:0c:95:f4:27:34:da:89:4d:64:b8:c8:5b:4c:c9:ff:
a1:59:db:51:67:d4:93:ad:6b:1d:70:8e:e7:a4:3b:c9:12:19:
6d:30:ae:2f:cc:d5:26:b5:1f:6c:d6:83:08:09:76:65:1a:3a:
8b:72:5a:b5:eb:a6:b6:c6:39:ce:a3:16:19:cf:0f:d8:8d:58:
cc:38:f1:a2:6f:2b:ab:2b:2b:f9:18:e8:89:91:8e:5d:f1:e7:
c5:12:bd:81:94:3d:d0:b0:b7:51:fe:5f:e0:a2:57:76:ee:ae:
8c:ca:9b:71:a4:f7:d8:06:7f:e0:cb:f3:0a:a2:c1:98:16:eb:
65:fc:02:5b:af:7d:d6:8f:05:62:a2:71:d9:3b:41:21:24:0c:
06:21:59:65:ee:f8:d2:4d:c4:7c:20:15:c4:74:ba:20:90:7f:
c4:05:4b:a0:2a:f8:5f:e2:24:2f:f4:c5:c5:1d:0c:3f:9c:e4:
8c:c0:14:2c:32:c5:be:bd:85:97:c5:0e:68:7a:ab:a8:ef:67:
6e:8d:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:49 2025 by rpki-client