Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZrB13259qIzshksIEov7_Ns_ZUE.roa
File: ZrB13259qIzshksIEov7_Ns_ZUE.roa (raw, json)
Hash identifier: 87TUkxNPpS7oUGQlghx0GraF6AKK35lCjyxsDXya+uo=
Subject key identifier: 66:B0:75:DF:6E:7D:A8:8C:EC:86:4B:08:12:8B:FB:FC:DB:3F:65:41
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE44947476C82AE8EFFA76EBDE950
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZrB13259qIzshksIEov7_Ns_ZUE.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209533
IP address blocks: 2a0c:9a40:a000::/36 maxlen: 48
2a0c:9a47::/44 maxlen: 44
2a0c:9a47:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e4:49:47:47:6c:82:ae:8e:ff:a7:6e:bd:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b075df6e7da88cec864b08128bfbfcdb3f6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:75:67:4c:4b:9c:52:89:5d:61:29:38:60:
48:1f:7c:ae:ec:e0:de:dd:4d:6e:2a:c3:1c:67:72:
9c:61:fe:b2:91:63:90:17:73:65:4f:3e:bf:82:86:
59:ed:91:05:c9:ec:4c:85:75:0d:cb:c6:c8:bb:84:
e2:c2:ad:7b:2b:65:4c:de:4e:e6:21:bd:b0:70:f8:
ba:26:aa:e3:98:5f:39:ed:c7:e0:c3:e2:48:c8:f8:
4d:62:27:2a:34:75:5c:42:96:ce:94:4f:12:77:1f:
d1:84:c5:a4:16:32:f3:63:76:69:4c:4a:ca:57:0f:
d5:b7:6b:60:e2:c8:fb:a8:46:91:b1:43:54:46:e8:
dd:b4:3b:cf:be:19:b1:b0:cb:7f:9f:91:05:75:f1:
65:fc:7c:61:ff:88:28:46:da:c8:76:17:5d:4b:e7:
9e:e1:7f:c5:29:3b:1e:7d:93:40:5e:1d:f9:f1:05:
0a:2a:d3:ed:a4:b7:c4:5e:8b:e9:2f:78:6c:e0:2e:
b2:30:a5:a1:43:00:50:a6:6b:b8:18:be:ac:b5:c4:
05:ac:76:92:fa:17:8e:01:c5:d5:2b:27:77:86:6d:
d4:ed:10:90:94:2a:28:5f:fd:34:50:05:9a:e5:65:
7f:bb:b0:a4:e5:89:7a:04:9d:ba:9e:2f:d0:98:25:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:75:DF:6E:7D:A8:8C:EC:86:4B:08:12:8B:FB:FC:DB:3F:65:41
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZrB13259qIzshksIEov7_Ns_ZUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:a000::/36
2a0c:9a47::/44
2a0c:9a47:20::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ab:07:76:57:5b:5c:aa:17:31:58:af:6a:f5:53:e4:2d:d2:
ee:bc:e1:90:a5:fa:29:b1:86:81:c6:5e:29:19:86:1d:e9:0a:
5d:69:85:c9:71:9c:81:9d:68:bb:6e:1d:89:ce:ef:4c:0d:c2:
b7:01:b6:ec:43:a9:88:0a:bc:cd:cc:52:ae:7c:ae:51:67:4d:
81:a3:12:f3:b2:eb:78:c6:ee:f6:6d:03:46:05:6b:32:bc:47:
9c:b5:c8:7d:5e:a0:84:51:dd:02:1f:6d:9c:e9:d8:b7:69:db:
0d:30:25:d6:e6:3b:0a:ef:2c:c0:78:28:2c:c9:4f:e3:06:e2:
d3:04:b4:4b:60:e4:76:4d:7b:0e:35:21:36:2f:4c:e0:29:6e:
72:e4:7a:2e:ea:43:09:38:ea:05:5c:1e:1d:02:29:b7:23:39:
88:66:d6:f2:45:93:90:bd:a8:f7:9b:39:cf:f6:41:41:95:9c:
ea:fe:1c:9d:37:22:98:c3:92:06:3d:f5:40:b0:a8:ca:ec:4e:
c1:bd:fb:e5:50:84:7f:d2:24:e0:0b:c4:1c:1e:38:4b:2c:33:
2c:4c:1a:43:50:05:29:2b:6c:b1:66:9b:36:85:2c:fb:d3:44:
15:0b:bd:5c:f5:d4:c5:21:1a:3a:28:87:e2:f4:08:0d:66:5f:
70:c9:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:19 2025 by rpki-client