Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zHgLhh-kWnwts7zKQIkqJ12Q8xQ.roa
File: zHgLhh-kWnwts7zKQIkqJ12Q8xQ.roa (raw, json)
Hash identifier: xCeE9pKx3Tmt3ad+5b2swKEJbp5ehlAIYVRL7lzg97o=
Subject key identifier: CC:78:0B:86:1F:A4:5A:7C:2D:B3:BC:CA:40:89:2A:27:5D:90:F3:14
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCADDDA09CCC170CFD4A8AA2BDEE331
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zHgLhh-kWnwts7zKQIkqJ12Q8xQ.roa
Signing time: Sun 01 Jan 2023 14:44:49 +0000
ROA not before: Sun 01 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41002
IP address blocks: 2a03:1ac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:dd:da:09:cc:c1:70:cf:d4:a8:aa:2b:de:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc780b861fa45a7c2db3bcca40892a275d90f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:7a:ff:78:e2:d1:2c:73:5a:cf:40:20:33:
2d:56:3b:ae:fe:6e:08:59:6c:f7:c8:54:53:d8:c9:
33:6e:a7:40:f4:23:a2:76:91:69:ca:ed:47:9e:46:
d3:ed:69:3d:32:6c:07:0f:3c:03:d3:5e:91:7a:e4:
ad:8f:2a:73:3d:e6:99:a8:ce:ad:36:a9:3d:3c:09:
e9:f2:be:0f:ad:13:78:d8:ca:03:75:8e:21:08:f6:
dd:74:29:bb:c7:7b:f0:a7:28:44:79:a1:79:8c:9a:
94:9c:41:2e:f8:fe:94:35:00:5c:21:1f:20:c7:e8:
37:00:f0:33:7a:8d:0e:9c:28:68:0c:9b:4f:3f:91:
9f:89:5a:bc:22:74:2b:97:65:d6:63:cd:7d:cc:21:
b7:33:f3:61:97:2d:0b:ac:e4:a0:3e:27:30:4e:53:
4a:93:63:1c:63:cf:b4:ac:bd:a2:29:dc:19:78:71:
0b:04:a6:e8:5e:70:54:8a:6c:04:94:6f:30:31:a0:
72:2c:4c:ed:b1:f2:6a:d2:7e:0c:e3:fd:18:a2:23:
46:24:b8:bb:12:e9:56:24:20:2c:d9:f4:3b:04:3b:
92:6b:f9:85:ff:a6:2a:6a:9b:ad:e8:55:84:89:ad:
b5:a8:d9:61:6e:91:10:8a:18:71:b6:b3:9e:17:df:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:0B:86:1F:A4:5A:7C:2D:B3:BC:CA:40:89:2A:27:5D:90:F3:14
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zHgLhh-kWnwts7zKQIkqJ12Q8xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1ac0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:aa:bf:e0:6e:15:72:36:45:cc:19:ca:d1:84:b8:97:30:17:
b4:2c:1c:b2:81:dd:a2:a9:34:4d:60:f8:cc:a8:e9:d4:68:e3:
d5:95:0f:4f:66:3f:d4:c1:54:5d:8f:ba:33:4e:43:be:b9:40:
83:7d:59:5f:fa:b9:7e:7a:3e:b4:6e:31:4b:12:1b:2e:a5:a1:
23:11:8c:91:e7:51:c3:26:11:66:98:ca:fb:4e:ad:fa:08:79:
5c:dd:90:83:b6:1b:d6:ac:96:6c:9c:68:e1:6f:73:a5:c7:f1:
8b:fe:18:63:1d:e3:17:d8:1d:fe:9d:90:06:a1:b1:ef:b7:00:
00:70:06:4f:d4:07:e6:bf:b7:d2:ce:4a:45:be:1d:3d:9c:c8:
07:85:7d:b7:db:8f:e4:89:50:f5:58:45:de:00:58:5d:66:47:
02:e3:8d:70:d1:5a:ec:9d:15:26:e6:f6:c2:1d:09:8c:9f:5f:
94:f7:51:37:7e:fe:f1:79:72:38:1c:71:7d:a4:db:6b:db:bf:
13:00:63:04:e6:06:82:81:99:c6:d9:6a:32:d5:8c:8f:c6:77:
16:70:5b:63:57:60:6d:95:e5:2c:48:6c:60:14:6f:1e:bf:17:
34:0b:a1:bf:a5:38:2c:a7:aa:37:78:ec:e1:85:62:a8:e5:e7:
ca:2c:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:19 2025 by rpki-client