Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zvVbccPOezRcenUxgZYT6IshvbM.roa
File: zvVbccPOezRcenUxgZYT6IshvbM.roa (raw, json)
Hash identifier: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=
Subject key identifier: CE:F5:5B:71:C3:CE:7B:34:5C:7A:75:31:81:96:13:E8:8B:21:BD:B3
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019424459210C9D5F6FCA7B6834819F5FEE7
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zvVbccPOezRcenUxgZYT6IshvbM.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198231
IP address blocks: 2a11:e101::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:92:10:c9:d5:f6:fc:a7:b6:83:48:19:f5:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cef55b71c3ce7b345c7a7531819613e88b21bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3d:8d:26:36:fc:9c:d4:1e:16:ff:02:d9:d0:
2d:78:fc:27:5b:b8:ba:eb:89:08:24:f1:85:33:f8:
ec:35:96:6b:fc:34:ac:bb:46:87:24:25:af:e4:81:
81:14:81:df:85:a3:9d:89:c1:37:99:20:36:08:b7:
27:db:6a:89:7d:be:89:61:1f:66:92:ba:f2:c5:f9:
63:07:12:ef:f1:30:1c:b6:80:33:15:ec:f4:7e:18:
19:e2:35:d9:72:c1:75:aa:0a:52:5f:36:69:37:9e:
08:9d:40:d2:eb:02:79:07:2a:6e:8a:92:fc:95:e6:
59:f7:a4:7d:86:c4:4e:3c:18:50:07:40:d6:86:e9:
9f:48:f9:45:9a:c5:d1:1f:ee:ca:93:58:0d:12:93:
47:77:7b:ce:61:0b:f3:aa:bc:4d:93:03:04:b0:be:
57:9a:fc:34:0e:d8:40:d1:dd:01:d3:32:5f:9c:68:
d7:62:6a:84:43:8f:7e:5d:58:77:37:3c:1a:8f:bc:
3a:6e:ca:49:20:f3:03:b3:7b:69:56:a4:32:cd:52:
80:24:d4:3f:86:6a:b4:7c:cd:25:1c:df:82:0a:f4:
1e:ad:48:e4:45:e0:e4:86:bd:01:7f:40:90:c4:eb:
7d:02:91:2e:85:cc:0f:a9:65:5f:95:53:5b:2e:ef:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:5B:71:C3:CE:7B:34:5C:7A:75:31:81:96:13:E8:8B:21:BD:B3
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zvVbccPOezRcenUxgZYT6IshvbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e101::/32
Signature Algorithm: sha256WithRSAEncryption
5e:9d:3d:8f:96:d9:a3:b5:ac:bb:19:15:a7:a7:f6:fc:5d:69:
2c:d1:c1:c7:1f:02:d1:18:89:5a:6f:64:78:a8:47:56:f5:61:
b2:42:88:ed:38:e1:6c:82:24:21:d5:72:ab:92:df:5d:f6:fd:
6a:2f:a7:07:f7:dd:68:61:d3:71:64:84:87:1f:48:e9:08:8e:
4e:4b:9e:3b:cc:b6:63:3b:f8:1a:02:0d:63:bd:8a:05:f9:e2:
7e:bd:f4:17:d7:f4:58:9e:b8:d2:11:d2:2a:e9:aa:5a:13:b6:
b8:c5:8e:5b:ac:54:f1:d0:fa:2b:74:4b:ea:75:75:ed:7e:9b:
d5:0b:54:c3:1e:85:ec:be:d7:17:51:5a:6a:cc:17:26:79:03:
27:f5:de:64:c4:e1:0e:61:33:b7:47:bb:c4:dd:44:23:c5:d8:
6a:10:9e:3c:55:d0:9f:a7:16:58:7f:52:63:62:7d:d2:57:90:
b5:f3:ad:c6:c0:a6:18:c4:25:f7:54:c1:65:00:3a:1f:e1:35:
71:92:82:52:aa:93:cc:e4:9c:cf:1d:e1:c3:62:72:4c:80:24:
8e:2e:33:c5:44:1f:c4:da:97:da:14:f8:ea:e2:25:71:2c:23:
30:f4:56:fa:37:34:8b:eb:05:89:58:d0:a2:e3:68:7a:dc:b1:
67:39:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:44 2025 by rpki-client