Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ZGdAuUombv4vkBsPwiqPFlqYz8k.roa
File: ZGdAuUombv4vkBsPwiqPFlqYz8k.roa (raw, json)
Hash identifier: Vg0hs2FALGJK84oUteDgK6tbIxpNAMJc90q23NUJBvM=
Subject key identifier: 64:67:40:B9:4A:26:6E:FE:2F:90:1B:0F:C2:2A:8F:16:5A:98:CF:C9
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A5CA5DB6FC4507BD1491448A0D8C
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ZGdAuUombv4vkBsPwiqPFlqYz8k.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214963
IP address blocks: 2a13:a5c3:ff20::/44 maxlen: 48
2a13:a5c7:2100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a5:ca:5d:b6:fc:45:07:bd:14:91:44:8a:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=646740b94a266efe2f901b0fc22a8f165a98cfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:64:04:32:01:49:06:50:71:ac:fa:ac:5a:
74:83:95:d5:86:49:00:c2:68:a4:50:63:e9:28:a4:
62:de:0d:fc:28:d6:eb:10:7b:ef:8c:e8:6f:6d:45:
2c:20:c6:04:c9:33:aa:a5:d1:09:5a:8a:6b:50:7d:
9f:11:6f:f4:29:90:2f:43:c6:e9:7a:34:21:c1:b0:
8c:fb:6d:5e:2d:26:54:0d:1d:33:98:7c:8e:34:41:
37:cb:97:10:f4:18:1e:2f:d8:3c:e7:d8:6e:bc:cc:
37:82:b8:58:60:ec:d7:bd:67:60:c4:97:98:0e:3d:
94:01:f9:21:a3:f2:19:1c:1f:dd:ff:2e:f5:5d:94:
f5:ab:d5:a4:fd:11:ba:1d:0c:06:fa:65:1d:10:c2:
44:ad:76:a1:43:52:47:4f:08:82:50:66:a7:4d:6e:
47:ed:80:b4:5c:92:3d:89:43:82:80:30:d3:58:93:
4e:7f:9e:33:63:e9:e1:f2:a1:a0:e0:ae:1a:18:a7:
e9:29:2d:88:70:06:6e:dd:bf:5c:2e:18:4d:bf:de:
35:4a:b6:f9:74:eb:99:60:34:be:cd:ab:26:60:4b:
e0:a9:1c:d0:a9:95:4d:58:6a:f7:e0:21:3d:3f:7d:
df:54:96:d9:fb:21:1c:57:3a:14:07:96:23:d1:dc:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:40:B9:4A:26:6E:FE:2F:90:1B:0F:C2:2A:8F:16:5A:98:CF:C9
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ZGdAuUombv4vkBsPwiqPFlqYz8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff20::/44
2a13:a5c7:2100::/40
Signature Algorithm: sha256WithRSAEncryption
92:61:bb:3a:cc:ae:ac:4a:d4:00:f4:a0:2c:4f:22:57:b3:ae:
49:44:ec:2e:cf:26:ff:09:04:ba:f3:c9:2a:fb:d0:97:24:0b:
52:e8:90:ae:e9:f5:40:c0:7d:73:d6:d6:b6:0e:0a:50:66:a1:
2b:df:5e:2a:5c:6b:fd:7a:02:68:51:35:63:35:89:8a:04:9f:
40:07:7e:32:ba:f3:a9:e3:7d:39:9c:0e:67:74:6c:66:92:33:
f5:3d:4a:25:7f:e8:d1:49:df:3b:bc:90:77:63:5a:6d:e5:f1:
ac:55:b2:10:07:72:6a:66:3b:a3:03:a1:18:1b:d7:28:5b:4b:
80:f0:30:82:aa:10:ec:01:b8:88:b3:43:a2:d0:1b:77:14:29:
b6:96:89:f3:8f:fc:15:11:b7:59:88:b3:6f:89:e2:54:73:5a:
2e:a1:c2:91:28:c6:00:28:3b:54:54:1a:3a:fa:4e:ce:dc:46:
f8:73:e0:a8:0e:a2:1e:66:65:2f:0e:db:6c:62:48:b5:25:36:
43:09:9d:a6:4e:aa:ae:7f:03:fb:83:a6:e8:1f:eb:88:de:82:
fa:18:82:30:ac:51:2c:c9:3c:a6:17:54:de:22:59:d4:32:ae:
51:88:f0:a8:16:c1:91:a0:94:81:77:3f:02:66:74:09:63:03:
16:98:0f:4c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZQlIaXKXbb8RQe9FJFEig2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMTAyMDM0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDY3NDBiOTRhMjY2ZWZlMmY5MDFiMGZjMjJhOGYxNjVhOThjZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yFkBDIBSQZQcaz6rFp0g5XVhkkA
wmikUGPpKKRi3g38KNbrEHvvjOhvbUUsIMYEyTOqpdEJWoprUH2fEW/0KZAvQ8bp
ejQhwbCM+21eLSZUDR0zmHyONEE3y5cQ9BgeL9g859huvMw3grhYYOzXvWdgxJeY
Dj2UAfkho/IZHB/d/y71XZT1q9Wk/RG6HQwG+mUdEMJErXahQ1JHTwiCUGanTW5H
7YC0XJI9iUOCgDDTWJNOf54zY+nh8qGg4K4aGKfpKS2IcAZu3b9cLhhNv941Srb5
dOuZYDS+zasmYEvgqRzQqZVNWGr34CE9P33fVJbZ+yEcVzoUB5Yj0dyqowIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFGRnQLlKJm7+L5AbD8IqjxZamM/JMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvWkdkQXVVb21idjR2a0JzUHdpcVBGbHFZejhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhOlw/8g
AwYAKhOlxyEwDQYJKoZIhvcNAQELBQADggEBAJJhuzrMrqxK1AD0oCxPIlezrklE
7C7PJv8JBLrzySr70JckC1LokK7p9UDAfXPW1rYOClBmoSvfXipca/16AmhRNWM1
iYoEn0AHfjK686njfTmcDmd0bGaSM/U9SiV/6NFJ3zu8kHdjWm3l8axVshAHcmpm
O6MDoRgb1yhbS4DwMIKqEOwBuIizQ6LQG3cUKbaWifOP/BURt1mIs2+J4lRzWi6h
wpEoxgAoO1RUGjr6Ts7cRvhz4KgOoh5mZS8O22xiSLUlNkMJnaZOqq5/A/uDpugf
64jegvoYgjCsUSzJPKYXVN4iWdQyrlGI8KgWwZGglIF3PwJmdAljAxaYD0w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:44 2025 by rpki-client