Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa
File: zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa (raw, json)
Hash identifier: R0waJ/l+tfmJv5LfjnRTw8gnCOj1Af2T9Z4QZDnplrw=
Subject key identifier: CD:75:32:54:46:4F:40:83:AF:95:C3:33:25:D0:21:9D:09:4D:AC:10
Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial: 0194221FB64B5FE0DD85EF3501E76D5893B0
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 2001:67c:2dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b6:4b:5f:e0:dd:85:ef:35:01:e7:6d:58:93:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd753254464f4083af95c33325d0219d094dac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:1a:88:07:1a:df:f8:94:3d:9c:a4:f8:c1:
45:2f:9b:51:38:b0:68:72:c6:97:c6:a4:d8:9d:4a:
58:8d:cb:19:18:ca:2c:2f:72:a0:be:d1:6e:b3:c4:
06:26:a8:ef:89:ab:74:1f:c5:68:67:80:c3:79:53:
2e:26:69:c9:44:98:88:80:28:9f:76:89:6f:79:be:
e6:c6:c2:89:a7:e2:fd:71:0c:68:57:d2:ac:ed:3e:
5d:30:a5:69:8c:76:72:08:02:2f:d5:9e:59:e5:4e:
84:df:7c:b8:3e:3f:90:33:34:34:fe:d1:9e:24:0e:
5b:65:26:14:67:3e:c1:72:27:df:3c:5d:45:d3:4f:
f9:e9:e1:8c:6f:4f:75:87:9c:cf:51:fe:35:d5:21:
7c:cf:fb:0c:87:f1:5c:b1:13:f6:5d:d4:3a:50:1d:
e9:b8:18:9d:8c:50:09:25:f0:36:b5:a9:2b:f9:64:
04:f1:87:30:e2:65:ec:ea:ea:8a:78:24:0f:78:15:
34:e7:35:5f:6a:15:5c:60:ec:6f:b7:db:98:cc:f3:
9b:4e:a8:f0:77:35:97:f7:39:f3:f3:f7:09:b6:f7:
4b:58:f1:bf:71:9b:b9:5a:fa:33:2a:5c:84:bf:9f:
2b:19:b7:c4:ed:6f:f2:ca:0e:b3:13:fd:3a:fb:89:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:32:54:46:4F:40:83:AF:95:C3:33:25:D0:21:9D:09:4D:AC:10
X509v3 Authority Key Identifier:
keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
6f:f1:19:49:31:26:90:bf:58:61:7f:64:a5:2e:c3:57:20:08:
3b:81:c3:29:51:48:1f:0e:a5:a1:59:0d:2c:ad:8d:59:fb:ef:
95:74:37:ab:20:df:73:c6:f7:ab:92:57:d4:3d:94:0a:05:71:
05:f4:15:67:05:16:ca:57:00:b0:c8:f5:2f:7d:76:a3:1b:4a:
49:9d:9d:f1:d9:8b:95:db:00:df:cc:7b:70:7a:a1:ac:c2:9f:
68:22:6c:7a:5b:75:03:78:3d:52:9a:3f:40:bc:d4:d4:8c:2d:
01:5d:7e:17:e3:a7:8e:ae:39:69:23:44:ae:41:a1:53:98:d9:
cc:b9:ad:bc:83:61:b5:13:77:08:f7:b8:56:14:cf:e0:fc:bd:
e3:63:82:ed:7f:b2:7c:cc:c0:ca:92:5b:41:b9:47:56:f3:76:
08:8c:23:15:60:64:0a:82:60:04:09:99:14:84:2b:a3:9c:4c:
51:fd:a4:59:42:7b:5a:09:e0:9c:6e:bc:d1:98:e8:4d:09:4b:
f0:68:ee:58:18:a8:7a:4c:22:c2:34:43:9a:bb:5b:96:b3:17:
c4:4a:f6:f1:40:3b:ec:ab:99:61:96:ee:67:a7:e7:9e:cb:2d:
99:5d:75:9d:35:e1:4c:65:fe:25:78:23:cd:f1:7e:ff:17:7c:
a3:d4:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:41 2025 by rpki-client