Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZoQyfuv1ywAq6gZMEnufuwG4cqE.roa
File: ZoQyfuv1ywAq6gZMEnufuwG4cqE.roa (raw, json)
Hash identifier: +YoPe5bRTR8ZnqgFZOF5gIEclgM6gFZmWbgv9SQ3MOA=
Subject key identifier: 66:84:32:7E:EB:F5:CB:00:2A:EA:06:4C:12:7B:9F:BB:01:B8:72:A1
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBDE38A7CB5A301EEEBBBF7DC1CDC1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZoQyfuv1ywAq6gZMEnufuwG4cqE.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204438
IP address blocks: 2a0c:9a40:8101::/48 maxlen: 48
2a0c:9a40:8106::/48 maxlen: 48
2a0c:9a40:8110::/44 maxlen: 48
2a0c:9a40:8110::/48 maxlen: 48
2a0c:9a40:8112::/48 maxlen: 48
2a0c:9a40:8113::/48 maxlen: 48
2a0c:9a40:8114::/48 maxlen: 48
2a0c:9a40:8115::/48 maxlen: 48
2a0c:9a40:811a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:de:38:a7:cb:5a:30:1e:ee:bb:bf:7d:c1:cd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6684327eebf5cb002aea064c127b9fbb01b872a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:45:b1:b4:52:e7:8c:f7:13:87:e6:9b:38:
c5:9e:42:f0:d0:63:b0:03:08:a8:b3:f5:b9:71:25:
e0:ff:09:31:b7:1c:03:1c:99:22:a8:25:c6:c2:17:
0a:15:cd:b4:fb:88:33:26:2e:89:64:0c:0d:a2:8a:
44:f2:73:67:33:7c:b0:42:c0:83:a3:35:82:f4:b4:
43:44:93:9a:f5:06:de:e7:bc:58:7c:2e:7b:16:4e:
d9:8b:16:31:2e:84:43:f5:de:1c:11:7a:89:fe:82:
0d:1e:15:d5:9b:6b:d9:06:f5:78:08:ad:e4:ef:9e:
c8:de:73:c7:c0:24:3d:79:e1:89:4c:f4:58:31:04:
b3:36:1b:ca:54:df:c1:f2:a7:1f:82:0f:2f:f9:4a:
77:f3:ac:31:f8:e7:f6:b8:ae:56:61:ca:ba:3d:4c:
17:41:b3:12:fc:e1:66:eb:3e:ef:0d:53:f6:66:8e:
4f:3e:fb:06:2e:e2:1d:79:29:20:67:ca:07:8f:77:
1c:7c:41:4f:4e:3e:20:fa:3a:95:d6:74:79:a0:f8:
75:14:2d:e7:a1:1b:9c:99:8c:e9:b2:b6:59:a7:67:
0d:c2:7c:e1:bf:34:87:a8:25:cd:da:1b:83:98:93:
65:49:be:5e:09:3d:d4:18:24:41:68:7b:8e:04:72:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:84:32:7E:EB:F5:CB:00:2A:EA:06:4C:12:7B:9F:BB:01:B8:72:A1
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZoQyfuv1ywAq6gZMEnufuwG4cqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8101::/48
2a0c:9a40:8106::/48
2a0c:9a40:8110::/44
Signature Algorithm: sha256WithRSAEncryption
7f:d6:09:3c:29:83:d3:f4:17:67:f7:ad:05:91:e8:1c:fd:3d:
f0:6b:51:37:71:c4:b0:8f:ef:4f:b1:b2:69:75:f3:a8:e1:78:
71:81:f2:d0:45:db:52:b7:36:ff:d9:56:f7:38:0b:95:7d:ac:
e3:35:29:96:05:dd:14:1b:4d:dd:0d:4f:42:fe:45:76:2b:5e:
b2:9c:c2:65:9b:49:51:8c:61:56:b5:2a:ca:12:98:ef:fb:74:
f5:be:e3:5b:b4:64:f5:fd:a0:7c:d5:81:e9:9f:cd:c0:47:c2:
24:8c:e3:30:7d:1f:43:66:47:7d:9a:22:e9:76:de:31:6f:2d:
66:41:89:09:0b:df:94:64:bf:c5:0d:ad:c4:cd:21:2e:15:e8:
62:05:bc:05:ad:cf:28:be:3d:30:02:3e:44:88:cb:94:56:0d:
1e:c0:05:5a:9e:8d:6e:70:c8:02:57:4a:22:bd:ed:bd:ed:14:
5f:d1:80:64:76:cb:11:1d:74:34:fe:19:a4:58:b7:a8:82:f7:
25:a3:7e:a3:54:42:d3:9e:a3:45:30:83:f4:96:69:f7:16:32:
91:26:65:29:dd:87:44:ff:5a:8f:8f:ba:1a:75:d8:24:dd:a5:
9b:0a:dc:ab:7d:46:56:a2:d1:aa:f6:40:85:33:ea:6a:3e:45:
97:67:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:15 2025 by rpki-client