Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/zMNB6zMRK2fdRNZ6ZgZXR0pNp9I.roa
File: zMNB6zMRK2fdRNZ6ZgZXR0pNp9I.roa (raw, json)
Hash identifier: N3rh8XAU9Pz655sQeYZ6NQjsprRizwWZtdxtV1iZhOo=
Subject key identifier: CC:C3:41:EB:33:11:2B:67:DD:44:D6:7A:66:06:57:47:4A:4D:A7:D2
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 05005ACF
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/zMNB6zMRK2fdRNZ6ZgZXR0pNp9I.roa
Signing time: Sat 01 Jan 2022 08:56:13 +0000
ROA not before: Sat 01 Jan 2022 08:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25577
IP address blocks: 2001:9d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83909327 (0x5005acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jan 1 08:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccc341eb33112b67dd44d67a660657474a4da7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:e5:66:4e:56:af:6c:6e:45:60:a4:d2:3d:
d1:f4:ae:9e:9f:1f:09:ab:0b:fa:48:7f:0d:0b:f2:
c0:9d:7b:10:3e:65:99:f9:dc:31:9a:27:7c:37:44:
a4:2f:bb:09:e7:4d:ed:b5:b7:03:0f:73:44:6d:72:
99:83:19:1d:61:73:7f:aa:85:af:15:42:36:0e:9f:
d4:59:ad:5a:68:39:f5:be:70:1a:32:1e:5e:29:de:
3b:45:0b:a8:d2:f4:7d:ec:cd:6c:40:16:5b:b2:2b:
3c:60:4c:a8:6e:b9:92:e8:bd:5c:e3:d0:09:95:9c:
c5:3f:34:0e:1c:71:46:70:4a:9b:73:35:72:b1:a1:
3d:66:22:02:46:c5:14:9c:25:00:10:4d:3b:e2:f5:
3b:a0:94:75:a1:1e:0f:1e:0b:f0:b4:62:cb:fc:81:
41:8c:64:b2:d5:20:23:32:d3:7a:6a:e9:80:a9:15:
66:1b:7e:9d:61:57:35:29:ba:74:71:32:7a:be:c0:
0d:7a:f8:c3:c5:3f:35:a3:62:6a:09:9b:e3:ef:01:
a7:13:6d:50:8a:4f:ea:dd:c0:ce:ea:1b:04:f0:60:
15:23:8d:7d:9b:3d:2e:bc:e9:01:11:81:0a:a2:7d:
9d:fa:b4:e2:be:26:30:e4:1d:0f:d7:47:51:bd:d5:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C3:41:EB:33:11:2B:67:DD:44:D6:7A:66:06:57:47:4A:4D:A7:D2
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/zMNB6zMRK2fdRNZ6ZgZXR0pNp9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:fb:cc:dc:bc:fb:14:c6:c0:a3:43:7d:a0:36:d4:26:cf:af:
d3:50:a5:82:4b:3e:11:05:0f:a6:61:e8:e9:94:94:cb:a5:f6:
81:c4:b2:a0:d5:34:d3:c1:e7:c8:90:6f:87:a1:d9:35:49:87:
60:83:f3:4f:8f:99:53:e5:61:c6:a3:cd:b9:9c:f1:0a:ae:01:
bb:69:e6:ec:69:77:27:17:63:2c:c2:32:e4:03:55:4d:fe:a9:
41:c4:7e:70:f5:62:35:2e:fb:9a:15:8b:7f:39:03:a8:d9:d2:
c4:e5:29:82:94:37:31:03:20:f2:d2:73:8e:d8:d5:3a:22:1f:
b6:9a:21:d2:63:06:42:bc:29:0c:8d:fe:ca:68:a4:6f:6b:54:
2f:7b:5d:d5:91:ea:14:d7:04:40:0b:37:42:b0:73:4c:a6:04:
45:6d:c4:b0:58:26:32:84:40:b3:3c:ef:5b:9e:1f:a1:53:c0:
12:e0:0b:df:51:1c:93:67:40:93:6b:ff:e0:bd:9b:63:98:54:
53:e5:31:fe:f1:1b:99:14:ca:86:77:23:71:81:63:86:a8:7d:
76:ff:4b:83:3f:6e:86:12:77:1b:01:ac:cd:89:e1:5a:f5:43:
7c:88:13:ec:8f:f5:e3:98:c8:c5:d8:1f:9f:09:16:f9:e8:7e:
58:54:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:44 2025 by rpki-client