Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa
File: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (raw, json)
Hash identifier: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=
Subject key identifier: 64:20:50:4D:24:43:A7:65:63:8B:60:BD:85:2A:DB:88:F1:6A:EC:E6
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0194258EE8D43C613D2B2A702DE28D159397
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216084
IP address blocks: 2a05:6c00::/32 maxlen: 32
2a05:6c01::/32 maxlen: 32
2a05:6c02::/32 maxlen: 32
2a05:6c03::/32 maxlen: 32
2a05:6c04::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e8:d4:3c:61:3d:2b:2a:70:2d:e2:8d:15:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6420504d2443a765638b60bd852adb88f16aece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:d7:62:39:3e:7c:0e:6f:e5:11:61:42:df:
4c:13:e7:0b:00:09:03:00:fd:02:21:65:c6:bc:e8:
a4:4d:3d:39:ad:49:41:6a:52:f6:71:cd:ad:08:53:
6d:6c:74:a3:28:cd:32:6b:b0:76:b6:48:c5:3b:6d:
35:e8:a3:48:d8:fe:aa:c4:55:cf:3d:64:ba:fd:4b:
dc:66:07:7e:b0:e5:a8:5a:cc:7d:fd:a4:0a:2e:bb:
07:c1:09:09:a2:56:66:60:5f:e7:dc:4a:05:83:2f:
39:74:d3:84:7d:7d:06:cb:d6:35:f3:f0:31:86:00:
34:c0:47:82:0b:15:55:d6:41:8c:af:ad:21:1d:39:
be:9a:29:00:b8:f1:87:6e:30:2b:b3:d6:3a:a6:ca:
1b:e3:f8:23:fa:d7:6c:5c:5f:82:b7:7a:45:2a:16:
0b:11:c2:75:53:c2:f6:b7:27:0b:91:1c:6b:a8:8b:
36:7e:0c:c4:e3:fe:fe:1d:bb:86:74:02:5e:e0:76:
98:61:3b:47:ab:ac:52:bf:c7:ee:fb:68:f8:a6:42:
61:5d:a5:50:e3:c1:65:b2:d5:ea:81:e2:f5:36:65:
68:81:a3:33:77:4e:57:29:01:de:53:0c:dd:5d:56:
65:8f:e3:fc:86:7e:60:a9:4f:68:f5:b2:10:ab:fb:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:50:4D:24:43:A7:65:63:8B:60:BD:85:2A:DB:88:F1:6A:EC:E6
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6c00::-2a05:6c04:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:d8:a3:63:4e:08:0b:ea:21:ea:48:01:f5:81:f1:25:3d:63:
54:36:72:40:19:fd:f8:8e:77:a1:8c:56:12:df:0d:66:17:ca:
e0:2e:83:9f:27:f5:bc:a0:80:c5:18:1e:fc:c3:ec:8d:cc:56:
34:1c:0f:c4:b4:85:57:8b:56:c1:89:ca:01:ce:53:05:fb:77:
f3:7e:3f:0b:23:e0:2f:93:49:1f:ed:9c:5e:79:99:9b:72:b2:
6a:f0:6b:5e:97:08:65:11:8b:42:28:47:5f:cc:3a:48:12:ba:
0f:f5:3c:50:f8:9e:00:80:28:d1:3c:64:e8:95:e6:9e:22:62:
be:a2:53:5b:10:60:15:8e:89:b6:0c:16:55:ca:f4:cf:f7:39:
34:18:55:14:31:d3:24:d8:da:e0:bd:45:e2:3a:6d:5c:f0:c3:
c2:33:e6:86:60:fd:93:8f:7b:8d:14:b1:51:c5:95:2a:45:ef:
1b:d0:f4:2a:e7:bf:06:d7:69:25:2f:3f:15:e9:c9:16:5d:03:
53:de:de:d9:d5:2e:11:e3:01:d5:9d:cb:e8:32:54:66:b4:0f:
01:62:cd:c6:4c:3b:b3:53:d4:93:8d:50:9a:a9:63:41:32:a2:
47:57:04:9d:0d:e1:5f:b8:ad:6b:d4:81:ef:71:18:f9:2f:61:
6f:5c:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:58:31 2025 by rpki-client