Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/Zudt2t67uMUQbMO8N99rmxJB1wQ.roa
File: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (raw, json)
Hash identifier: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=
Subject key identifier: 66:E7:6D:DA:DE:BB:B8:C5:10:6C:C3:BC:37:DF:6B:9B:12:41:D7:04
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 0194228D17C0CFA64E0515DBE6B68A56278A
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/Zudt2t67uMUQbMO8N99rmxJB1wQ.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212377
IP address blocks: 2001:67c:98c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:17:c0:cf:a6:4e:05:15:db:e6:b6:8a:56:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e76ddadebbb8c5106cc3bc37df6b9b1241d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:0f:18:14:72:ec:27:67:d8:d8:a6:ca:02:
ca:1f:e7:8b:89:e3:78:19:dd:f7:85:e2:f4:ac:9d:
ec:9a:d7:7e:bb:89:dd:1e:61:04:35:c0:f0:19:c3:
43:57:72:fd:2b:42:0c:db:df:b1:a9:43:73:3b:fd:
ec:48:94:8c:42:a6:99:78:26:b3:3e:46:8f:e9:f2:
be:0d:9b:72:00:a3:eb:3a:b1:1c:64:b1:f1:7b:20:
c2:9c:1e:99:d2:e5:f9:f0:22:a9:11:6b:a8:40:9f:
93:67:73:01:75:6e:75:7a:5e:ae:24:39:ea:4a:3a:
45:43:3f:0d:2c:ec:ef:24:07:12:a5:e8:e4:f5:a5:
3d:c3:30:b9:fb:aa:84:06:cb:dc:62:15:36:ce:11:
f2:94:48:a2:7f:52:c4:aa:bb:21:a8:b3:1b:1a:c9:
5d:5a:b9:48:27:ae:f3:7d:43:99:13:4d:c6:79:16:
63:f9:61:a2:8d:a5:80:06:45:51:de:c9:3c:7d:fc:
f6:b1:b0:40:15:87:17:83:93:fd:b0:93:35:2c:da:
08:d7:2d:67:71:13:bb:92:e4:ea:05:cb:8c:50:8f:
6e:26:a6:36:ae:e3:08:84:06:32:3e:2e:8f:4b:d2:
8e:04:f8:e1:d7:15:1f:c8:59:52:fd:85:ee:59:da:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:6D:DA:DE:BB:B8:C5:10:6C:C3:BC:37:DF:6B:9B:12:41:D7:04
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/Zudt2t67uMUQbMO8N99rmxJB1wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:98c::/48
Signature Algorithm: sha256WithRSAEncryption
20:73:c7:e5:f8:43:f7:d3:3d:88:88:45:cb:b2:61:e8:77:54:
0e:9a:02:99:6d:15:d2:cf:26:a3:56:cc:b8:ad:e0:fb:8a:5f:
c7:c4:2e:de:60:e4:41:6c:90:9c:fd:1d:a0:2c:34:0c:0f:ba:
39:37:a4:40:2f:91:4f:e4:fb:81:f0:39:87:24:10:ae:41:20:
6c:2c:d6:a7:e7:32:e8:4c:c3:63:cb:92:47:1c:5a:e0:ab:28:
fd:d2:29:d7:ae:b2:a8:44:12:30:2a:c0:dc:cd:1d:81:f8:f8:
a9:15:18:a8:07:cd:2b:c7:53:1f:32:d9:f9:bb:78:3c:4b:dd:
a4:36:a4:28:71:32:b7:6a:87:23:1c:53:46:d4:d4:36:07:4c:
3b:44:95:8d:eb:31:3d:24:45:27:e1:95:e5:22:15:08:e2:9a:
8b:aa:c9:05:09:bc:18:ea:47:3d:78:fb:bd:3a:07:b5:b2:cd:
0e:23:c7:7e:90:fc:fc:04:bb:c4:82:d8:0b:66:5b:5d:50:37:
b4:5a:a8:3f:5c:e2:6a:9e:a4:c9:39:ae:73:dc:25:83:9b:4a:
b8:3f:f4:24:de:eb:68:3d:00:54:ed:ea:7c:0b:9c:8e:0d:5f:
5e:d6:b5:f0:4a:d6:99:bb:d2:8f:f7:9b:1b:d6:c7:ae:78:a4:
3c:26:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:09 2025 by rpki-client