Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ZOoVGmkREp1U-QSELW2U5Vt6iz4.roa
File: ZOoVGmkREp1U-QSELW2U5Vt6iz4.roa (raw, json)
Hash identifier: aaq6k/OzWUN8c7Yz5MO4d3XlyrKCz6Sr4FbpM81UAT0=
Subject key identifier: 64:EA:15:1A:69:11:12:9D:54:F9:04:84:2D:6D:94:E5:5B:7A:8B:3E
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0193E1A3BA335E2412C32954D269BF9F2222
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ZOoVGmkREp1U-QSELW2U5Vt6iz4.roa
Signing time: Fri 20 Dec 2024 01:17:03 +0000
ROA not before: Fri 20 Dec 2024 01:17:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 2a13:a5c7:2710::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:a3:ba:33:5e:24:12:c3:29:54:d2:69:bf:9f:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 20 01:17:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64ea151a6911129d54f904842d6d94e55b7a8b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:62:e3:52:c8:71:d5:39:4d:0f:d9:dd:b9:
78:d0:03:6c:49:2c:95:32:c8:0f:12:8b:11:71:e6:
70:61:6d:9d:a6:3f:b7:72:d6:0b:a9:2a:67:1b:38:
84:79:ca:a0:2b:ed:2f:3c:45:06:68:51:0b:38:4e:
7b:ed:c4:fc:7d:77:9e:17:f3:0d:0e:c9:e6:dc:8b:
76:0b:6b:b9:33:bd:92:27:c5:cb:4c:b0:25:a3:0c:
75:64:a2:90:b9:e1:05:42:1d:ed:30:65:4d:19:a2:
51:c3:d0:5b:92:bb:16:08:05:55:e4:16:34:68:c7:
ed:a5:1b:20:e8:62:f1:2a:79:f6:eb:1a:8e:a9:82:
c3:d0:0c:12:05:b8:54:5d:ea:d8:fa:cc:04:75:8a:
a6:9d:bd:5d:17:66:d9:ca:10:eb:02:b7:4d:2d:18:
1a:f2:00:be:51:08:2a:bd:61:16:4a:46:b5:49:d0:
ce:b7:be:bc:b3:cd:db:1a:f5:f5:da:16:37:41:2b:
42:7c:20:24:3c:a9:5b:fa:20:ab:5e:c0:99:4e:99:
95:ad:42:3a:c5:43:c6:0b:de:82:cf:c2:12:e9:a1:
be:38:29:00:3a:d2:41:06:69:ce:45:05:45:c2:f0:
03:f4:47:e1:fb:21:2f:84:29:cc:dd:cb:36:0e:5a:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:15:1A:69:11:12:9D:54:F9:04:84:2D:6D:94:E5:5B:7A:8B:3E
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ZOoVGmkREp1U-QSELW2U5Vt6iz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2710::/44
Signature Algorithm: sha256WithRSAEncryption
ac:a0:a8:5a:e6:ed:e2:cd:ba:ea:bd:8b:88:ba:ed:67:eb:17:
3e:d3:15:94:c9:34:63:62:cf:11:72:bc:08:f1:f7:6f:97:ad:
52:ee:77:c7:ea:7f:3a:e2:c9:09:19:1a:1c:a4:92:73:5d:e7:
68:c8:ee:93:35:8e:90:fc:20:a6:e5:1c:65:1a:7f:e0:3d:f8:
ba:43:24:72:c7:1a:fd:43:bf:d1:1d:73:96:a8:43:b8:ea:16:
18:b3:d0:f5:11:f2:fb:98:e4:68:18:e1:da:5d:48:54:5c:7f:
48:8e:dd:3e:19:90:39:a6:f7:94:7a:48:b7:8f:27:da:ee:77:
8e:d5:a7:3c:54:27:6b:5f:79:3d:55:13:04:89:ed:c3:8f:e5:
08:d9:88:57:88:de:04:a2:6f:6c:b2:d9:cb:57:88:cd:4f:5d:
ae:88:e5:fc:6d:65:af:4e:6d:ff:09:69:e5:99:5f:06:d2:0f:
23:b5:41:c4:e4:b8:a7:96:51:5c:bd:93:75:ea:a2:f0:0a:b3:
4f:de:80:81:20:fe:8d:0b:00:36:18:55:98:73:ac:8c:99:7c:
48:58:0e:b2:1c:92:80:60:7c:ab:39:74:0d:c7:f4:f4:0f:fe:
e1:4f:26:87:8c:1b:2b:06:d9:ff:1e:22:4f:75:a1:51:8d:ff:
37:d9:bb:fb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZPho7ozXiQSwylU0mm/nyIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjQxMjIwMDExNzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGVhMTUxYTY5MTExMjlkNTRmOTA0ODQyZDZkOTRlNTViN2E4YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ti41LIcdU5TQ/Z3bl40ANsSSyV
MsgPEosRceZwYW2dpj+3ctYLqSpnGziEecqgK+0vPEUGaFELOE577cT8fXeeF/MN
Dsnm3It2C2u5M72SJ8XLTLAlowx1ZKKQueEFQh3tMGVNGaJRw9BbkrsWCAVV5BY0
aMftpRsg6GLxKnn26xqOqYLD0AwSBbhUXerY+swEdYqmnb1dF2bZyhDrArdNLRga
8gC+UQgqvWEWSka1SdDOt768s83bGvX12hY3QStCfCAkPKlb+iCrXsCZTpmVrUI6
xUPGC96Cz8IS6aG+OCkAOtJBBmnORQVFwvAD9Efh+yEvhCnM3cs2DlqTOQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGTqFRppERKdVPkEhC1tlOVbeos+MB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvWk9vVkdta1JFcDFVLVFTRUxXMlU1VnQ2aXo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlxycQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCsoKha5u3izbrqvYuIuu1n6xc+0xWUyTRjYs8R
crwI8fdvl61S7nfH6n864skJGRocpJJzXedoyO6TNY6Q/CCm5RxlGn/gPfi6QyRy
xxr9Q7/RHXOWqEO46hYYs9D1EfL7mORoGOHaXUhUXH9Ijt0+GZA5pveUeki3jyfa
7neO1ac8VCdrX3k9VRMEie3Dj+UI2YhXiN4Eom9sstnLV4jNT12uiOX8bWWvTm3/
CWnlmV8G0g8jtUHE5LinllFcvZN16qLwCrNP3oCBIP6NCwA2GFWYc6yMmXxIWA6y
HJKAYHyrOXQNx/T0D/7hTyaHjBsrBtn/HiJPdaFRjf832bv7
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:39:22 2025 by rpki-client