Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/TnupM8NExGTj32hPCbnGEZSk3_o.roa
File: TnupM8NExGTj32hPCbnGEZSk3_o.roa (raw, json)
Hash identifier: zzT60HXxX1byJvNtO5unynp6Zco0IgCXZ5jG9zK/RQI=
Subject key identifier: 4E:7B:A9:33:C3:44:C4:64:E3:DF:68:4F:09:B9:C6:11:94:A4:DF:FA
Certificate issuer: /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial: 0193ACDCA956C5AD8E1A95146481E086456F
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/TnupM8NExGTj32hPCbnGEZSk3_o.roa
Signing time: Mon 09 Dec 2024 19:19:22 +0000
ROA not before: Mon 09 Dec 2024 19:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:66c0::/32 maxlen: 32
2a11:66c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:dc:a9:56:c5:ad:8e:1a:95:14:64:81:e0:86:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Validity
Not Before: Dec 9 19:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e7ba933c344c464e3df684f09b9c61194a4dffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:b1:d5:f8:4b:23:7c:fe:e4:cb:27:40:36:
6d:51:af:d5:48:dc:bc:86:3b:1b:b0:a3:e9:72:74:
bc:3c:d3:34:90:1c:77:7a:63:84:b2:eb:ee:e4:1c:
20:3b:61:ca:30:37:e0:da:ec:8d:19:3c:d1:4b:ac:
0b:1b:42:46:d3:44:2f:0c:c4:16:02:00:af:97:9a:
69:b0:b1:01:c3:d4:40:30:be:e4:7e:41:ea:5a:5f:
66:dc:07:37:ad:f3:04:26:e5:d3:fa:9a:4f:20:c4:
c8:7e:97:fc:7e:8f:b4:d9:19:91:39:37:b7:a2:a9:
df:f7:a6:ac:d3:2b:86:96:d2:79:0b:54:7c:0a:03:
b7:72:c3:1d:f6:ea:2d:91:0a:d3:6a:f4:92:91:04:
d8:cc:f1:92:d8:c7:90:34:8c:48:d4:c4:e2:ae:4b:
38:4b:4c:d4:20:c7:48:14:7b:b4:0c:5d:7b:e3:c3:
76:38:34:2f:a6:e2:51:c7:db:8d:e7:71:26:0f:da:
8e:c6:c9:6a:b4:5d:56:b9:6b:c6:64:7d:e7:99:d6:
b3:53:c0:83:57:31:d9:d9:66:e7:26:e9:93:f2:78:
a9:6e:3e:83:6a:06:c0:7b:97:3b:d4:11:f5:60:86:
b9:d8:f2:c8:d6:52:25:ea:36:67:3a:67:74:90:c0:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:A9:33:C3:44:C4:64:E3:DF:68:4F:09:B9:C6:11:94:A4:DF:FA
X509v3 Authority Key Identifier:
keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/TnupM8NExGTj32hPCbnGEZSk3_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:66c0::/32
2a11:66c3::/32
Signature Algorithm: sha256WithRSAEncryption
bf:8c:25:b3:45:21:9d:5d:46:8d:ce:5d:e6:77:fc:1b:d6:61:
66:7a:8a:33:21:89:05:2b:40:62:7f:59:e1:1c:14:44:56:f2:
de:4f:65:6b:6e:84:11:04:b0:03:46:8e:99:87:dd:b8:d9:90:
56:ed:86:9f:55:bd:21:ff:5c:d7:1a:0b:fe:97:f4:8f:8f:63:
3c:48:fe:5f:a6:0a:59:49:e3:e1:a6:77:10:22:aa:d6:d7:0e:
47:6c:36:44:8f:68:44:4f:f1:48:ff:7c:be:a8:5c:b6:4d:35:
6b:36:6f:54:fc:81:ae:de:4d:67:eb:97:d6:98:48:05:0d:12:
66:75:00:b7:cf:60:d0:c3:22:3a:f8:9e:a9:f5:17:ef:8e:41:
ed:97:9a:05:59:2a:8d:ba:c4:8e:22:90:18:84:f0:f1:c9:1b:
93:c2:16:c0:3f:da:32:7a:50:2b:c5:8c:aa:d0:7f:81:8c:45:
38:95:68:4a:be:dc:69:13:1d:a1:b8:2a:c4:c3:f9:cc:4e:27:
c0:58:29:9b:cb:0f:89:b8:e9:d7:b6:b2:6a:98:fb:33:73:1e:
9d:b0:58:36:e6:13:f2:cd:0f:b2:66:7c:82:f7:0e:b6:53:c4:
99:33:d9:ac:84:0f:6c:de:6d:e7:b9:f8:00:9d:78:17:20:c7:
9d:bc:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:37 2025 by rpki-client