Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/dosvK_851CqOZTm9nF8x2BjUP84.roa
File: dosvK_851CqOZTm9nF8x2BjUP84.roa (raw, json)
Hash identifier: 67fxzeFfcfsYydXnLf0v4wgyaeVZ+NdykJ31vgZYJHs=
Subject key identifier: 76:8B:2F:2B:FF:39:D4:2A:8E:65:39:BD:9C:5F:31:D8:18:D4:3F:CE
Certificate issuer: /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial: 01939304DE2EDABC3F0C16A46005EE75DC96
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/dosvK_851CqOZTm9nF8x2BjUP84.roa
Signing time: Wed 04 Dec 2024 18:53:09 +0000
ROA not before: Wed 04 Dec 2024 18:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0f:4301::/32 maxlen: 32
2a0f:4302::/32 maxlen: 32
2a0f:4304::/32 maxlen: 32
2a0f:4306::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:04:de:2e:da:bc:3f:0c:16:a4:60:05:ee:75:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Validity
Not Before: Dec 4 18:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=768b2f2bff39d42a8e6539bd9c5f31d818d43fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:62:e4:07:80:65:f6:7f:4c:74:15:a1:d8:
a1:0c:05:3e:d0:80:9d:ae:90:a1:14:5b:03:b2:9b:
51:65:a0:41:fe:b5:b7:6a:71:5b:76:88:2e:42:c1:
0a:14:78:f7:39:4d:53:3c:27:ee:bc:40:b7:eb:80:
ae:c9:76:f1:e5:22:7d:ba:bc:ed:90:ef:da:66:7c:
71:7a:1d:c8:f9:c7:c5:74:6c:d0:8a:00:c7:94:59:
6d:f0:73:ad:7f:d8:27:46:a2:98:85:c9:f5:0f:7a:
9f:7a:9a:97:59:c9:54:32:f3:ec:92:d2:eb:71:44:
1c:da:14:c3:14:b8:06:e0:d0:78:61:68:bc:fe:1a:
47:8e:9b:e4:dd:87:3b:89:c5:ab:b0:d3:74:36:cc:
b9:c3:a7:0e:99:ed:8a:d5:54:cf:84:02:70:e0:c6:
42:de:4a:f7:e8:47:ff:d0:8c:d0:c6:e4:2c:54:f3:
3c:2c:80:3e:63:9e:3f:b4:59:03:fb:2f:b9:68:97:
d8:cc:99:8f:77:19:9a:d9:92:4b:a9:e3:f2:88:e1:
19:04:9c:54:ea:5e:fd:7c:a8:e7:f5:b7:a4:54:6c:
56:6c:7d:bf:71:d4:f2:c4:d4:08:aa:c7:cc:3b:81:
9f:2f:e5:bb:ef:49:7e:12:07:8d:32:85:1d:b6:f1:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:2F:2B:FF:39:D4:2A:8E:65:39:BD:9C:5F:31:D8:18:D4:3F:CE
X509v3 Authority Key Identifier:
keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/dosvK_851CqOZTm9nF8x2BjUP84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4301::-2a0f:4302:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:4304::/32
2a0f:4306::/32
Signature Algorithm: sha256WithRSAEncryption
36:55:12:3f:00:71:36:bc:0a:a7:ee:da:45:06:4e:23:07:55:
98:c8:04:95:eb:67:6b:8e:ce:93:c8:c4:ca:df:d7:00:4c:78:
e1:d3:5d:8b:90:fa:b6:71:da:7a:26:9b:1c:93:d7:7f:4c:33:
83:f5:7e:28:c7:23:3e:b5:2e:c9:ae:ce:ec:9e:0b:28:c2:f4:
32:a4:db:30:f5:a2:5e:da:b5:6b:13:07:46:b3:7d:fe:50:d4:
ce:07:41:96:f8:c3:7b:23:c8:94:5a:c3:52:e4:79:4c:41:a2:
fb:78:0e:38:d7:b3:8e:b1:da:1d:75:b8:88:f2:94:b4:55:1c:
30:5f:9e:76:0c:7c:71:6c:1c:af:a3:bb:48:0d:00:4b:32:4e:
6d:24:26:f8:79:88:9a:c0:b9:bc:f6:ab:92:40:f6:88:a0:1a:
1d:b9:e1:1d:90:b4:96:cd:36:c6:a1:6d:cd:f5:36:f8:07:53:
5e:d7:15:97:f3:68:3b:d0:f6:f1:f0:19:8a:b0:fa:67:4c:be:
07:86:9c:2b:fd:e2:5c:de:3f:ff:9f:48:4e:4c:1d:04:c6:a8:
19:34:1c:ce:9a:e0:a3:9a:f9:d7:71:82:f2:03:dc:bb:07:db:
e4:33:97:77:df:62:c4:cc:ea:f7:59:7c:3f:21:fd:b2:eb:97:
47:d9:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:14:54 2025 by rpki-client