Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zxfbUlaP6QCgsbv5AWt4qcYs494.roa
File: zxfbUlaP6QCgsbv5AWt4qcYs494.roa (raw, json)
Hash identifier: us/29j9XGy12qID0IcBmhFZwSwSG3OKjhj9iinOLtBU=
Subject key identifier: CF:17:DB:52:56:8F:E9:00:A0:B1:BB:F9:01:6B:78:A9:C6:2C:E3:DE
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAECEC7D957D278439F33323DFC7F2
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zxfbUlaP6QCgsbv5AWt4qcYs494.roa
Signing time: Sun 01 Jan 2023 14:44:53 +0000
ROA not before: Sun 01 Jan 2023 14:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51645
IP address blocks: 2a02:2698:2000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ec:ec:7d:95:7d:27:84:39:f3:33:23:df:c7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf17db52568fe900a0b1bbf9016b78a9c62ce3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:37:53:ee:ca:88:83:e1:03:64:76:62:90:
7b:f9:95:ff:f2:f8:ee:e3:7b:8c:48:be:2c:e3:cc:
05:db:3b:df:57:a5:9b:f0:d4:49:c1:f6:19:86:e5:
7a:c6:18:14:66:64:9a:0c:b0:6c:fa:34:ad:db:f1:
08:98:2c:99:10:11:c4:28:a3:79:1d:b4:30:19:b6:
9e:14:ed:16:98:57:de:9f:76:ae:1e:71:ce:3a:e7:
0d:6e:c2:65:53:4e:02:dc:ef:9d:81:47:0b:37:10:
e3:98:7c:ab:59:29:d9:3b:70:a0:be:72:6c:37:02:
19:92:61:b4:59:b8:66:bb:cf:a5:fd:09:34:b2:f0:
fe:37:c1:c6:df:5b:59:32:0f:f3:84:77:e2:59:83:
c7:81:e7:11:49:1b:14:81:2f:3f:4a:7d:e7:d9:76:
c8:a6:f7:1f:da:03:53:8f:b4:4f:79:ce:4a:4c:42:
84:dd:f1:0d:87:d6:96:a0:ed:fd:06:85:49:e2:06:
28:b0:7f:c0:f6:eb:ae:83:3b:51:25:41:25:bd:4d:
09:2d:3e:7d:91:f6:8f:0d:af:ef:f4:8d:0c:75:58:
32:73:2b:bb:17:2f:55:08:a0:c8:be:10:de:52:3d:
79:78:cc:1b:ad:5c:2d:ca:66:52:90:e7:0a:c6:74:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:17:DB:52:56:8F:E9:00:A0:B1:BB:F9:01:6B:78:A9:C6:2C:E3:DE
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zxfbUlaP6QCgsbv5AWt4qcYs494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2000::/38
Signature Algorithm: sha256WithRSAEncryption
b3:33:6e:99:83:23:42:a4:97:63:05:2b:c0:38:61:bd:36:d1:
a7:fb:ca:10:81:fb:fd:f9:9f:73:20:fe:88:a8:81:13:a3:00:
5f:58:0e:8f:8d:ad:8b:de:95:f3:c9:ed:56:c0:e6:49:4a:09:
c6:c8:c0:cb:8a:1a:a2:48:d1:a8:0b:a0:cc:c1:ec:b1:49:5a:
4e:7b:69:28:04:89:89:b7:cc:1f:cc:c0:e9:1b:e7:19:47:45:
0f:b4:d1:af:68:2c:98:5e:e3:ca:25:8c:30:ee:99:1e:d2:e4:
63:70:60:20:ad:61:05:a4:5a:62:3b:35:86:a8:09:3f:d0:02:
8c:bb:94:c3:3c:a5:fe:5f:93:3e:d6:42:13:46:d9:77:e8:37:
67:cf:f1:4d:36:eb:76:9d:d6:01:ef:89:23:08:d7:46:d6:4d:
83:e4:5e:32:1d:7d:8d:04:05:06:a7:0c:f7:60:93:22:d1:87:
48:e7:33:ff:29:99:20:a4:b5:13:33:67:96:df:3c:1b:f7:f2:
4a:f6:98:94:a3:7e:aa:86:95:99:97:6d:72:05:27:2b:1c:5f:
01:05:1d:93:de:24:d6:c7:22:41:31:ed:6a:d6:c2:2e:fa:14:
80:1b:ff:c0:f9:42:2a:a0:97:7a:fb:d8:2c:c8:55:3a:e6:a2:
29:8a:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:57 2025 by rpki-client