Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/92e_pW9U2UEOuCcOGNqwzdLK7EQ.roa
File: 92e_pW9U2UEOuCcOGNqwzdLK7EQ.roa (raw, json)
Hash identifier: cmS9BmHD7QF4K2SgcIUIlikmwzZkVXU4powvGpGV0RI=
Subject key identifier: F7:67:BF:A5:6F:54:D9:41:0E:B8:27:0E:18:DA:B0:CD:D2:CA:EC:44
Certificate issuer: /CN=ce3cff3184126ba92b08c2e7ddefb2d2ac69f29e
Certificate serial: 01856BB7F673A52F7C1269870992C5E31C52
Authority key identifier: CE:3C:FF:31:84:12:6B:A9:2B:08:C2:E7:DD:EF:B2:D2:AC:69:F2:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjz_MYQSa6krCMLn3e-y0qxp8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/92e_pW9U2UEOuCcOGNqwzdLK7EQ.roa
Signing time: Sun 01 Jan 2023 05:04:56 +0000
ROA not before: Sun 01 Jan 2023 05:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57118
IP address blocks: 2001:67c:2c28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:f6:73:a5:2f:7c:12:69:87:09:92:c5:e3:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3cff3184126ba92b08c2e7ddefb2d2ac69f29e
Validity
Not Before: Jan 1 05:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f767bfa56f54d9410eb8270e18dab0cdd2caec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:0a:fa:df:95:e3:a8:11:1a:18:0e:81:aa:
09:04:1a:c7:ae:84:ef:1e:4a:9b:ec:21:6d:da:96:
26:df:2b:cd:c6:20:96:c9:57:e9:ae:de:c8:61:67:
5b:cc:e8:e2:82:17:b4:81:2e:d7:97:83:23:a4:91:
29:93:d8:dd:6c:09:69:3e:fb:aa:9e:3f:4d:52:c3:
b8:3d:b2:05:61:63:40:47:5e:06:a4:c8:d9:a7:15:
ad:37:92:37:9f:fd:42:ee:ce:df:86:03:5a:09:4d:
01:c7:01:3c:a2:e6:65:3c:ee:0f:fc:7c:cc:68:cf:
db:5d:83:f5:f7:2a:95:61:a4:a0:1c:7a:c4:5d:b7:
a4:62:eb:9d:26:ff:7d:65:92:4e:88:83:56:fb:04:
d5:fb:f7:f5:e0:66:ad:5e:87:a7:f6:20:93:c7:ab:
b9:a6:04:88:7a:8b:77:06:e8:7b:a2:fe:60:0d:1f:
33:70:ee:95:3f:82:38:f0:c8:93:43:84:4b:84:55:
c5:5f:4d:85:4a:fb:0b:25:20:ea:68:6f:d8:b3:7a:
67:ac:21:d1:9a:64:5f:c0:9e:5e:21:88:c4:48:ca:
ea:60:48:3d:4b:bd:a9:04:7b:71:13:61:bb:5a:30:
df:07:42:a0:f4:f1:19:77:8c:06:08:12:30:35:af:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:BF:A5:6F:54:D9:41:0E:B8:27:0E:18:DA:B0:CD:D2:CA:EC:44
X509v3 Authority Key Identifier:
keyid:CE:3C:FF:31:84:12:6B:A9:2B:08:C2:E7:DD:EF:B2:D2:AC:69:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjz_MYQSa6krCMLn3e-y0qxp8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/92e_pW9U2UEOuCcOGNqwzdLK7EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/zjz_MYQSa6krCMLn3e-y0qxp8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c28::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b6:10:84:6c:d0:12:4f:bf:c5:d7:12:8c:44:2b:eb:be:eb:
c9:5a:5f:67:a2:e6:d9:d1:de:97:52:fa:77:b8:45:ad:01:c9:
dd:dd:29:f3:e6:5a:3f:ce:3a:26:d9:de:62:03:28:e8:01:0d:
46:c9:8f:f2:95:f8:2d:1a:22:26:89:df:88:8f:fc:89:e9:4c:
3e:e8:f7:7d:a3:b3:a7:9d:28:3c:96:d8:7b:e2:8b:9f:7e:80:
99:8b:66:41:85:84:db:bf:a3:c0:c7:fe:61:3c:97:1e:c1:e9:
8f:05:37:92:bd:43:cf:3a:86:be:a2:6d:d5:e3:08:3e:a2:5c:
24:f0:e6:ad:00:6f:46:da:f2:64:ed:58:dc:10:a8:53:c9:f3:
4c:b8:db:3d:eb:59:0a:10:cc:62:2a:85:ae:8c:1e:bb:6c:89:
81:f1:02:06:b8:18:6f:1f:74:38:69:c4:95:2c:c2:3f:41:b8:
92:41:75:2c:54:23:b6:13:d7:40:29:b6:f3:bc:b9:4d:13:33:
38:cc:a7:82:bd:40:9d:e3:37:97:f9:5c:f5:29:9b:a3:d2:91:
60:1d:1f:da:b2:cb:1e:92:20:d4:4f:5d:07:12:95:d2:15:4c:
47:73:71:82:9f:b1:08:7d:74:a1:18:36:11:26:2b:8e:57:3a:
38:fb:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:29 2025 by rpki-client