Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/zEdUBqRFIsyqc7wpfOyC9XuKuw4.roa
File: zEdUBqRFIsyqc7wpfOyC9XuKuw4.roa (raw, json)
Hash identifier: vPDjXd657jTXeciD/SrxznGOd9/oItCvLVn0G6cktoI=
Subject key identifier: CC:47:54:06:A4:45:22:CC:AA:73:BC:29:7C:EC:82:F5:7B:8A:BB:0E
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 019135FE21F63D89B7EE861FCEFC0E7D0A5F
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/zEdUBqRFIsyqc7wpfOyC9XuKuw4.roa
Signing time: Fri 09 Aug 2024 07:15:32 +0000
ROA not before: Fri 09 Aug 2024 07:15:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2a11:68c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:35:fe:21:f6:3d:89:b7:ee:86:1f:ce:fc:0e:7d:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Aug 9 07:15:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc475406a44522ccaa73bc297cec82f57b8abb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:ba:ed:ab:72:57:ee:79:69:45:67:9b:48:
68:57:27:e2:5d:a6:eb:36:d6:2e:2a:ee:fb:71:db:
de:24:ff:b0:33:a3:ee:91:2b:62:14:94:99:4a:17:
29:3a:24:59:0b:0a:97:9c:e6:8b:22:80:b9:46:e2:
64:f8:f0:00:3c:3c:f6:b3:d7:c8:5c:57:3c:dd:b4:
4f:93:90:58:05:c1:88:34:31:55:f6:70:84:d3:9b:
92:31:55:45:61:b8:53:12:0f:0a:2c:d8:5c:e1:d0:
de:25:40:c8:af:4c:52:03:01:5f:77:28:c5:22:e8:
41:a9:e1:18:71:b0:6f:ff:c6:0e:62:b8:cf:79:0e:
81:88:9d:9d:34:f5:97:4a:37:4f:8f:69:69:d5:4a:
ab:00:f8:4d:53:56:46:d9:2c:66:a0:86:c6:43:d7:
e2:03:44:33:9e:2e:5c:c3:8d:22:a7:8e:64:46:63:
8a:ab:44:a2:45:17:6a:68:4b:eb:15:5d:d1:b6:87:
77:cf:ac:bd:5f:3b:2d:ad:3d:12:b8:f1:25:a3:b4:
bc:ee:4c:67:41:5d:e9:82:f6:cb:19:6b:78:0e:99:
b2:3c:dd:11:7b:b1:b4:71:5f:2b:a1:ac:9b:37:fb:
13:0d:b5:f1:c1:eb:0d:cb:94:60:fe:5c:bb:1a:cb:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:54:06:A4:45:22:CC:AA:73:BC:29:7C:EC:82:F5:7B:8A:BB:0E
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/zEdUBqRFIsyqc7wpfOyC9XuKuw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:68c3::/32
Signature Algorithm: sha256WithRSAEncryption
84:dd:a8:25:c6:17:b4:99:9b:9c:31:36:85:ba:98:ba:22:78:
3e:a5:62:9b:6d:5e:de:f1:7b:00:f9:da:5a:ee:51:66:7c:1f:
0a:02:d3:65:8f:ba:ea:8c:ee:01:ab:d9:58:00:e3:f7:4d:69:
7f:4e:2c:47:b3:c8:a3:df:9f:df:67:f4:f2:b8:5e:32:26:fe:
03:67:5b:b1:4d:f8:a4:48:4f:11:df:35:b4:b3:6b:29:d2:1f:
93:f8:21:c8:78:5d:18:21:03:c0:31:4e:58:d3:53:9d:77:72:
80:34:56:16:0a:95:22:43:71:43:d8:c0:eb:be:ba:e3:1c:f1:
28:40:40:99:e5:d4:6b:37:b0:86:ce:03:98:20:bb:68:98:0e:
57:c5:43:92:37:5d:1d:24:2b:35:51:71:9b:c5:d7:a1:07:ed:
03:5d:92:2c:5c:b0:b6:43:b1:a8:f9:54:62:b3:ef:d0:8c:06:
6b:a8:17:a5:00:e0:1a:ec:0c:5a:41:c1:1c:a3:5e:10:f2:98:
7a:20:ab:2b:1d:16:28:2f:12:13:39:47:8e:32:ae:7e:31:41:
81:9b:71:d1:b2:27:21:06:da:57:68:0c:e8:71:4e:0a:81:74:
a6:ba:a6:d8:66:51:4e:e9:3d:ec:30:23:b5:48:24:3d:6b:63:
9a:cb:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:23 2025 by rpki-client