Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa
File: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (raw, json)
Hash identifier: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=
Subject key identifier: 66:9B:BB:EB:AF:1F:F2:1D:50:F0:06:7B:09:29:DA:62:F9:0A:04:19
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBA13FAC7BADD21CDF6CFEB1E1249
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198057
IP address blocks: 2a01:e281:ab00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ba:13:fa:c7:ba:dd:21:cd:f6:cf:eb:1e:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=669bbbebaf1ff21d50f0067b0929da62f90a0419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:6a:ee:05:b5:b4:a2:c0:aa:0e:d3:02:13:
6b:90:26:27:e8:71:58:17:c7:81:af:1b:f8:ee:52:
c4:98:7b:ca:cd:69:3e:75:b4:9d:f1:f4:60:3a:67:
c5:20:27:eb:3f:ac:8c:3e:41:eb:65:a5:ec:16:df:
cd:b7:af:92:ee:f5:c0:8d:8f:5e:7e:b6:52:64:ab:
c0:e4:fe:b0:b4:ed:52:72:93:02:21:0c:b7:c2:bd:
a3:92:7e:9f:92:70:61:a6:08:49:2b:3d:fd:2f:db:
1d:85:fd:50:f3:ef:01:ba:74:c9:de:24:0f:17:96:
60:26:d3:59:60:ec:cb:a6:f7:db:9d:50:50:3d:10:
6f:7d:91:da:e4:0b:42:b4:49:d0:9b:e4:ad:dd:d3:
ac:92:95:94:ba:01:c5:9d:d0:70:3b:80:9d:85:b9:
2e:7f:3c:4d:38:78:99:d4:cc:8a:b6:08:e1:6e:7c:
2c:f5:c0:03:2f:9a:67:47:a0:06:6e:dc:86:0e:98:
2c:d6:bd:68:0b:72:71:83:f4:51:5d:55:d8:05:e4:
7f:98:23:9c:5e:a3:1d:96:45:e0:28:0b:e7:f8:74:
42:cc:2f:4f:e5:b4:cd:a4:58:be:08:a9:53:de:1b:
db:90:7c:66:99:a0:f2:c7:b4:ef:1e:10:34:0d:aa:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:BB:EB:AF:1F:F2:1D:50:F0:06:7B:09:29:DA:62:F9:0A:04:19
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:ab00::/40
Signature Algorithm: sha256WithRSAEncryption
79:93:e9:01:ea:f2:56:9f:3a:5b:eb:7d:3d:56:7e:c7:d8:bc:
3e:4f:5b:23:26:06:97:5d:a4:7a:8b:04:96:f7:5b:9f:42:2a:
ad:21:52:6e:ba:35:5c:a3:cc:75:62:96:02:b2:0c:3f:c1:a6:
da:bb:20:35:65:87:5a:46:9b:42:7f:52:06:47:0d:4d:59:3e:
b1:40:e6:f0:df:bf:b6:dd:79:7c:c9:0e:2c:0c:15:0a:26:d6:
c7:e6:a6:8b:ea:10:90:26:05:09:9b:28:62:ac:5d:30:90:61:
7c:78:4d:3a:21:f2:d9:26:af:42:65:f9:5b:b1:cf:52:32:22:
a8:a5:57:12:ec:d4:08:12:0d:69:19:e3:ee:e1:3c:2d:5f:25:
ea:bf:a2:ca:74:11:06:50:e8:59:89:c8:ae:f0:ed:db:17:51:
3f:c4:c0:ab:b4:38:a8:b7:a1:93:e2:98:0e:9f:ae:81:c3:72:
6c:ef:f7:ab:0a:62:81:5f:1d:37:36:2a:0a:5f:27:07:56:8e:
72:63:38:57:a1:8a:49:13:47:23:40:55:58:11:99:1f:43:28:
96:68:e8:ef:df:35:94:2b:47:06:3a:6d:8b:61:22:8a:a2:36:
f3:37:da:d8:d5:ca:60:a1:d0:c8:9f:f7:8d:d9:63:15:c3:87:
e3:87:38:47
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijboT+se63SHN9s/rHhJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk
ODhkODEwHhcNMjUwMTAxMTU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjliYmJlYmFmMWZmMjFkNTBmMDA2N2IwOTI5ZGE2MmY5MGEwNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlRq7gW1tKLAqg7TAhNrkCYn6HFY
F8eBrxv47lLEmHvKzWk+dbSd8fRgOmfFICfrP6yMPkHrZaXsFt/Nt6+S7vXAjY9e
frZSZKvA5P6wtO1ScpMCIQy3wr2jkn6fknBhpghJKz39L9sdhf1Q8+8BunTJ3iQP
F5ZgJtNZYOzLpvfbnVBQPRBvfZHa5AtCtEnQm+St3dOskpWUugHFndBwO4Cdhbku
fzxNOHiZ1MyKtgjhbnws9cADL5pnR6AGbtyGDpgs1r1oC3Jxg/RRXVXYBeR/mCOc
XqMdlkXgKAvn+HRCzC9P5bTNpFi+CKlT3hvbkHxmmaDyx7TvHhA0DarOjwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGabu+uvH/IdUPAGewkp2mL5CgQZMB8GA1UdIwQY
MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt
OGQ5NDU1M2I3NWUxLzEvWnB1NzY2OGY4aDFROEFaN0NTbmFZdmtLQkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx
LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigasw
DQYJKoZIhvcNAQELBQADggEBAHmT6QHq8lafOlvrfT1WfsfYvD5PWyMmBpddpHqL
BJb3W59CKq0hUm66NVyjzHVilgKyDD/Bptq7IDVlh1pGm0J/UgZHDU1ZPrFA5vDf
v7bdeXzJDiwMFQom1sfmpovqEJAmBQmbKGKsXTCQYXx4TToh8tkmr0Jl+Vuxz1Iy
IqilVxLs1AgSDWkZ4+7hPC1fJeq/osp0EQZQ6FmJyK7w7dsXUT/EwKu0OKi3oZPi
mA6froHDcmzv96sKYoFfHTc2KgpfJwdWjnJjOFehikkTRyNAVVgRmR9DKJZo6O/f
NZQrRwY6bYthIoqiNvM32tjVymCh0Mif943ZYxXDh+OHOEc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:57 2025 by rpki-client