Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Zd_GJyy4dVbGLHY-zkXGryyPilw.roa
File: Zd_GJyy4dVbGLHY-zkXGryyPilw.roa (raw, json)
Hash identifier: VFiFTTKrLUZvNMzX1M9W/xFkXzx7cBq9s5miCfOfD5M=
Subject key identifier: 65:DF:C6:27:2C:B8:75:56:C6:2C:76:3E:CE:45:C6:AF:2C:8F:8A:5C
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 018311C1CD1EBDCBC28FED99FA7BB584893C
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Zd_GJyy4dVbGLHY-zkXGryyPilw.roa
Signing time: Tue 06 Sep 2022 07:44:17 +0000
ROA not before: Tue 06 Sep 2022 07:44:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210985
IP address blocks: 2a11:29c0:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:c1:cd:1e:bd:cb:c2:8f:ed:99:fa:7b:b5:84:89:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Sep 6 07:44:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65dfc6272cb87556c62c763ece45c6af2c8f8a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:91:42:1d:1c:93:8a:43:ca:42:0f:18:a4:
b2:c0:30:d0:5e:8c:64:62:2a:e7:b7:42:f6:1c:ef:
c3:24:39:86:d3:e9:26:41:86:5d:81:1a:ff:db:8e:
7c:19:97:8a:10:42:d8:7f:a8:e4:6f:df:72:66:2c:
d1:da:39:17:5b:2a:b0:ca:40:8c:69:35:72:da:30:
8f:22:34:81:d4:f1:75:95:d8:e2:e3:c3:50:d4:e7:
a4:dd:27:c6:02:90:d3:84:61:d1:ed:1b:9c:b7:3c:
d1:d4:fb:33:c1:a2:ed:50:4d:60:95:0c:87:9d:52:
e8:7b:1d:23:e5:1d:2d:a7:10:da:9d:1a:6a:1a:ed:
11:d2:77:84:fa:6c:8d:c6:b4:0d:3d:8e:a4:de:c8:
0c:d1:6c:9f:0a:90:37:a3:1a:a5:f2:af:4b:02:e4:
b3:ae:04:2c:7e:11:0f:a8:b4:03:e4:6f:3f:ae:d5:
55:d2:9b:cb:8e:51:f4:f1:3f:65:81:00:0b:d1:4c:
a1:dd:9b:78:68:9e:bb:99:8a:06:0e:7b:24:4f:0e:
7d:cf:ae:37:61:52:44:22:11:1c:95:cc:87:ae:b1:
80:0f:22:d5:1a:42:17:55:c7:bb:b3:75:a3:f0:eb:
28:aa:3a:1d:74:73:2c:65:0f:ef:84:4e:3c:e8:db:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:C6:27:2C:B8:75:56:C6:2C:76:3E:CE:45:C6:AF:2C:8F:8A:5C
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/Zd_GJyy4dVbGLHY-zkXGryyPilw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:20::/48
Signature Algorithm: sha256WithRSAEncryption
73:2c:bd:81:1b:9e:03:d7:19:89:3a:f4:c0:c6:6c:aa:ce:f0:
1a:e0:86:07:90:68:6f:55:1e:88:9a:0a:bc:a3:7c:38:a3:13:
4c:5c:5d:08:ff:10:b1:45:dc:ae:99:9c:19:85:f0:b7:6d:5e:
6b:fa:bd:99:a9:95:65:1d:93:aa:c3:64:7a:44:7f:d2:46:bb:
1b:39:7a:d2:32:fa:8c:eb:e3:bf:c3:2a:1a:ad:95:a4:ba:35:
ca:e8:5d:f6:14:b9:14:fe:a7:f3:c1:01:c5:f0:a7:89:79:e8:
ff:fe:03:b7:bc:9c:b4:b8:42:4b:21:a8:57:c2:0a:d4:63:40:
56:97:08:a9:ab:e8:37:da:86:58:81:74:13:23:71:42:f2:8e:
c7:7f:19:01:6b:ad:b8:8c:81:f8:15:6f:bb:52:8d:33:4e:64:
f0:af:9f:42:7b:bd:fb:15:58:8b:4d:0f:ba:04:be:58:1b:c1:
76:42:66:b6:a8:4b:52:64:9f:df:72:87:60:7a:6b:a5:db:bc:
f2:96:be:2e:09:ef:93:cb:fc:52:f9:45:be:20:15:54:f8:32:
fc:d4:f4:a0:eb:b3:c9:5f:c3:5a:ab:eb:e4:75:5c:ef:8f:1a:
b4:ed:c3:90:fd:03:2c:3f:ca:b8:f2:ce:be:3c:f5:8a:f0:57:
86:29:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:26 2025 by rpki-client