Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zTgJcqN5uCR0jGFKhs5t5RqCLuM.roa
File: zTgJcqN5uCR0jGFKhs5t5RqCLuM.roa (raw, json)
Hash identifier: PFjgeynlVXV3bz0LEKrvUPtrxV0gMhD7TpFJxPOQNJ0=
Subject key identifier: CD:38:09:72:A3:79:B8:24:74:8C:61:4A:86:CE:6D:E5:1A:82:2E:E3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0140966B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zTgJcqN5uCR0jGFKhs5t5RqCLuM.roa
Signing time: Sat 01 Jan 2022 01:00:14 +0000
ROA not before: Sat 01 Jan 2022 01:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210985
IP address blocks: 2a0c:b641:f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21010027 (0x140966b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 01:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd380972a379b824748c614a86ce6de51a822ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:e1:50:88:ec:9d:00:a1:d8:48:66:45:86:
ed:48:6d:09:4a:db:01:9e:64:a8:00:ad:5d:96:f5:
df:cc:52:9e:aa:17:e9:f6:1b:85:54:61:4a:04:f3:
cf:d0:4a:9b:eb:57:16:cc:17:fb:d8:8d:9c:04:69:
21:4e:36:c3:94:67:8d:96:65:1f:83:5f:d5:1e:e6:
4a:56:04:ca:0a:da:22:ec:2d:00:21:56:1e:63:60:
9f:8d:4b:68:b9:c0:89:8a:de:f5:ca:99:cf:ab:e5:
63:e5:15:9f:73:9b:b4:e8:69:76:60:4b:18:85:aa:
0b:d6:6b:42:48:49:ac:ad:64:d4:b6:19:37:b9:b0:
4c:11:54:6e:24:3e:de:6c:70:0d:76:4c:1e:90:83:
59:50:c8:b6:38:8f:4f:09:92:34:b2:eb:04:40:19:
96:e8:38:b4:eb:92:3c:fa:a5:95:2e:cd:73:67:a2:
ce:ae:c8:1c:31:3f:f8:a2:7a:2d:18:94:ff:57:cd:
a4:6c:3c:6a:dc:6a:a3:78:12:64:bf:69:26:52:ce:
61:6c:dd:4e:93:0c:48:e9:e3:7a:27:da:e8:90:35:
3f:61:75:e7:37:50:f3:e9:d4:e8:16:0e:11:f5:dc:
56:21:30:15:e5:4d:cf:4c:4f:b3:62:1a:4e:a7:b6:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:09:72:A3:79:B8:24:74:8C:61:4A:86:CE:6D:E5:1A:82:2E:E3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/zTgJcqN5uCR0jGFKhs5t5RqCLuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f0::/44
Signature Algorithm: sha256WithRSAEncryption
0e:4a:19:54:95:fd:43:bb:06:cf:70:ad:60:51:b6:8a:bf:08:
af:93:c0:bc:ad:a7:0d:58:fe:d6:19:5c:93:52:c0:77:51:5a:
8c:8d:96:31:7e:43:24:8b:9b:fc:69:30:66:c3:19:58:99:c1:
5d:1f:86:38:f9:b5:7f:8e:c6:9e:8e:82:40:45:84:15:e9:fe:
d9:2e:bc:14:78:c6:95:06:aa:f1:8c:11:5a:00:66:ce:4d:6a:
a1:43:f7:05:e7:19:de:79:65:89:d5:99:62:f2:92:a7:3f:67:
76:49:12:6a:97:55:0e:55:15:92:5f:a2:5d:b0:a4:69:e8:93:
68:15:45:e5:8b:fc:ff:88:ae:55:b9:c8:0b:a1:53:65:5f:cf:
e1:4e:01:72:94:76:13:2a:65:dc:42:70:ce:e0:ea:b7:19:3d:
4d:e5:3c:c1:4a:01:59:f7:39:3b:a4:a9:a0:04:bf:e8:86:57:
83:5c:ef:06:50:b6:dd:2d:64:f6:27:08:6d:42:19:35:df:18:
a9:07:48:84:6f:94:7b:07:c7:42:de:ff:42:3d:2d:fd:95:55:
4e:f6:76:0e:a7:21:fc:01:92:d8:bb:8d:8f:0a:de:71:0c:4b:
9e:95:91:d0:94:73:8a:05:c0:76:7c:96:0c:5e:6e:95:a0:0c:
20:d4:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:23 2025 by rpki-client