Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/zzDzNokLDw5fB_iBSLdcgwToZfI.roa
File: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (raw, json)
Hash identifier: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=
Subject key identifier: CF:30:F3:36:89:0B:0F:0E:5F:07:F8:81:48:B7:5C:83:04:E8:65:F2
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55AB9A6E68D446FB7F69B0679B044
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/zzDzNokLDw5fB_iBSLdcgwToZfI.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198825
IP address blocks: 2a10:4646:2e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:b9:a6:e6:8d:44:6f:b7:f6:9b:06:79:b0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf30f336890b0f0e5f07f88148b75c8304e865f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:0f:de:42:68:4d:39:45:24:e8:fe:68:d5:
59:59:70:fc:8e:ff:69:50:e8:93:33:be:42:6c:a8:
33:bc:a8:48:72:97:aa:65:98:cd:db:f4:bc:ca:19:
6e:5a:6b:81:26:3e:2c:e9:cf:35:57:6c:36:38:60:
5e:ca:7b:df:c3:a6:b5:d8:08:12:d2:eb:28:5a:e7:
00:13:f2:88:83:31:ed:42:d5:50:36:8e:e1:ff:bc:
9d:fe:d2:d2:d7:ee:53:c9:d5:0c:3c:a9:e4:74:da:
ca:f4:8e:2c:ba:3e:1d:b2:e3:22:bd:9b:9a:18:ce:
01:e1:ec:82:fe:a3:46:d8:f7:4f:a7:59:8c:ab:9e:
29:7c:6c:63:97:16:15:65:af:32:54:c1:42:ca:5f:
0a:d7:7f:8a:11:03:3d:43:a5:ef:9a:68:ba:72:8d:
bd:02:c3:69:52:01:b4:94:ad:ac:ab:3f:3c:fe:f9:
2f:d0:f3:67:f5:18:85:6f:3f:b7:b7:17:3a:05:bf:
0a:e7:63:cb:45:a5:96:ec:86:d7:f4:89:c2:b2:a1:
7c:f9:37:9f:d8:87:49:63:d4:34:1b:4b:c3:bf:fd:
4e:a1:df:96:17:d6:f5:fd:eb:4e:25:01:4a:4f:31:
ea:f4:d1:1d:9f:e5:7b:76:7d:01:58:85:78:bb:a6:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:F3:36:89:0B:0F:0E:5F:07:F8:81:48:B7:5C:83:04:E8:65:F2
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/zzDzNokLDw5fB_iBSLdcgwToZfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
53:a0:a3:bc:ec:9b:3a:57:dc:bf:ff:9d:3f:f1:bd:22:80:86:
92:df:b2:a3:3e:3f:15:1f:2a:41:88:45:a3:0e:83:38:f8:47:
13:0a:a6:ca:c7:4e:f7:4b:2f:cf:36:dc:a2:0c:3a:8a:49:0e:
76:06:75:ba:e0:da:f1:2a:8d:4e:2f:49:67:c0:36:04:d1:3d:
08:ae:16:c9:4a:72:c3:ad:00:f2:d9:3d:c3:cc:8c:2a:5e:6a:
50:9d:84:74:cc:cd:d0:fa:3d:e4:f1:91:f9:17:da:9a:b0:cd:
b2:de:02:c1:ec:ee:ab:8c:a0:95:75:0c:b6:ab:07:d5:12:ac:
7b:c3:39:6f:5d:42:16:70:bd:95:29:93:e0:52:c9:5d:cf:5c:
1d:fd:e6:17:30:c4:56:74:6f:61:f7:8c:56:16:9e:a3:68:9f:
2e:de:8a:cb:9b:9b:8c:93:a0:81:f9:77:cb:23:3a:3d:75:05:
8b:d4:43:54:aa:2b:2e:3e:05:1a:c7:71:14:14:68:fe:26:c7:
69:1a:bf:f4:50:25:51:d0:9d:65:93:1e:51:ae:00:12:75:5f:
b9:f0:e4:84:c7:69:2e:85:dd:8b:8f:76:a4:99:f4:fc:d2:28:
cd:9a:bf:34:78:3d:0f:f8:14:42:e4:4e:c7:05:f5:67:bf:72:
e1:29:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:36:40 2025 by rpki-client