Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/zuaQcYGr_SOorxrrm1R8vFKkh3o.roa
File: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (raw, json)
Hash identifier: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=
Subject key identifier: CE:E6:90:71:81:AB:FD:23:A8:AF:1A:EB:9B:54:7C:BC:52:A4:87:7A
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 0194221FC2AF336EB9EFEACB91AB563E2029
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/zuaQcYGr_SOorxrrm1R8vFKkh3o.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a03:21e0::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:af:33:6e:b9:ef:ea:cb:91:ab:56:3e:20:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cee6907181abfd23a8af1aeb9b547cbc52a4877a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:a5:0f:ab:4f:69:7f:bc:8c:2b:4f:16:b0:
34:21:8b:e3:e1:5a:27:37:75:40:2a:ec:a2:41:e3:
f0:a2:c0:6d:69:3f:dc:22:62:75:25:81:4a:96:d4:
0c:e8:68:35:70:74:57:5f:74:70:57:62:9f:ce:7f:
be:85:fa:f6:9d:83:66:62:bf:ac:a1:3f:a1:61:8f:
76:52:84:ad:a7:08:e2:cb:32:e3:8b:25:43:93:1c:
f9:4f:51:96:ce:ac:8d:2c:6b:d8:42:d8:7e:0c:58:
6a:55:f4:5b:20:4c:70:7d:56:b4:24:7d:fc:c3:39:
e9:32:ac:ce:80:40:af:72:0d:5a:ad:fa:7f:61:51:
10:2b:56:14:45:45:c5:fa:76:dc:af:fb:f8:a4:53:
dd:8f:bd:eb:a0:a2:2e:95:47:bd:ff:e2:9c:d1:54:
a0:76:a0:52:ed:02:29:c7:7e:c9:10:c3:4b:0e:9c:
a1:ca:57:36:d1:74:9f:dd:b1:18:66:16:c1:59:2b:
55:9f:43:30:e5:f2:38:41:4d:91:7b:c8:83:f9:3f:
fa:2e:26:97:e3:2c:21:04:f5:10:f5:80:12:fa:22:
6d:f7:c7:e4:90:43:7e:79:1a:8e:ed:85:80:82:4f:
1b:4a:be:76:ce:c6:0a:f4:cd:34:7e:a4:5a:cc:53:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:90:71:81:AB:FD:23:A8:AF:1A:EB:9B:54:7C:BC:52:A4:87:7A
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/zuaQcYGr_SOorxrrm1R8vFKkh3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:21e0::/36
Signature Algorithm: sha256WithRSAEncryption
61:5a:6c:af:e0:f3:8c:78:3a:bc:55:85:54:15:d0:16:11:c7:
1e:4f:01:68:f4:5c:6e:ae:9e:52:a7:fd:84:6e:64:11:9d:02:
b9:6b:fe:df:55:62:31:4f:93:67:70:b1:e6:49:c0:a4:8e:79:
92:27:84:0e:8b:77:df:9e:73:8e:b3:45:79:ed:3c:b1:40:66:
0d:78:44:ff:91:dc:3e:50:c9:e9:73:ef:2b:6d:35:2b:1c:9e:
a6:8f:75:84:2e:5a:12:5a:9a:44:76:42:a1:02:2a:f7:58:69:
33:43:f7:40:be:da:0c:ca:31:d7:83:13:91:1c:e3:5f:ec:37:
34:e1:a6:52:a7:86:51:e3:5f:03:b0:2a:8a:3b:32:0d:90:ac:
95:28:6d:9f:f1:2c:e4:66:8f:3d:13:d8:ee:69:8a:64:dc:9f:
fb:14:14:e2:e1:14:c9:19:f0:19:d6:95:7d:28:f2:0c:f4:bb:
d4:0b:69:db:8c:e8:76:2d:fb:74:02:77:10:10:92:37:68:20:
f1:59:5e:50:5e:1c:cf:cf:a6:99:09:17:7e:bd:1d:b7:9a:4f:
14:aa:64:81:40:2b:75:33:5f:28:2a:e7:d4:5e:83:b5:96:eb:
ee:6c:3b:13:d4:88:67:1b:33:88:e8:60:11:9e:ac:19:24:b8:
21:d3:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:42 2025 by rpki-client