Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/Zl4NeqBsKTblRRZcVa0Pwb4MOwg.roa
File: Zl4NeqBsKTblRRZcVa0Pwb4MOwg.roa (raw, json)
Hash identifier: mAkba7cuOQ9VCkS+38mKZiw8ID9ckcWu3m8dRw9Ycvw=
Subject key identifier: 66:5E:0D:7A:A0:6C:29:36:E5:45:16:5C:55:AD:0F:C1:BE:0C:3B:08
Certificate issuer: /CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Certificate serial: 01857079B5E14974C6670CD8CFB3EC44C7DB
Authority key identifier: 5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/Zl4NeqBsKTblRRZcVa0Pwb4MOwg.roa
Signing time: Mon 02 Jan 2023 03:15:02 +0000
ROA not before: Mon 02 Jan 2023 03:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56796
IP address blocks: 2001:678:9c8::/48 maxlen: 48
2001:678:9e0::/48 maxlen: 48
2001:678:a80::/48 maxlen: 48
2001:678:9d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b5:e1:49:74:c6:67:0c:d8:cf:b3:ec:44:c7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Validity
Not Before: Jan 2 03:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=665e0d7aa06c2936e545165c55ad0fc1be0c3b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:5b:91:73:52:10:e6:db:9f:0c:29:4e:ec:
75:2a:95:c4:ca:3f:b3:e9:2c:35:dc:45:81:38:94:
ee:45:37:45:c5:1c:87:15:0c:be:79:77:f4:cd:b4:
3c:9e:57:ad:c0:a6:40:20:e7:e4:dc:eb:e3:d5:e9:
06:f3:73:e3:ca:a9:21:98:dd:73:b6:8c:72:d8:c8:
dd:16:67:62:cf:6d:50:27:92:ce:09:bb:ef:aa:bd:
08:24:a4:0a:82:99:bc:dd:fe:ef:4d:57:bd:dd:df:
e3:b5:32:95:1d:bc:2a:83:ef:df:62:94:f9:07:58:
58:73:87:da:37:08:6f:88:38:7e:84:f8:0e:47:3d:
d4:18:76:57:f5:2b:ac:16:40:3b:fc:38:c3:f1:01:
22:89:1d:c8:7d:ce:d3:a0:e0:d8:d1:79:1d:eb:03:
a9:96:dc:60:67:9c:44:95:56:d3:9c:41:bd:3f:9f:
53:2d:2b:20:38:76:77:3d:02:0b:0d:f2:a7:ec:a7:
46:7e:33:a3:18:66:ac:79:57:0f:fe:15:df:54:b7:
77:b1:ea:2d:e8:85:cd:ab:c4:ae:8d:8c:ed:0b:98:
4b:69:93:a3:d9:f1:7f:af:f0:04:db:2b:88:b9:06:
51:ab:76:9a:db:d4:98:25:cf:cd:fe:5a:7b:df:44:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:0D:7A:A0:6C:29:36:E5:45:16:5C:55:AD:0F:C1:BE:0C:3B:08
X509v3 Authority Key Identifier:
keyid:5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/Zl4NeqBsKTblRRZcVa0Pwb4MOwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9c8::/48
2001:678:9d4::/48
2001:678:9e0::/48
2001:678:a80::/48
Signature Algorithm: sha256WithRSAEncryption
48:d4:5c:40:78:ed:23:0f:1e:88:30:55:07:8b:a0:84:73:e7:
93:d9:7f:71:16:5a:ad:95:97:95:43:51:f1:bb:8e:e1:46:e9:
0a:87:83:e7:54:4d:96:1f:2b:67:d2:b9:bf:1a:60:c3:95:96:
a2:b8:c7:18:a1:ef:0a:0c:5d:b5:84:03:98:b2:69:75:48:a8:
9e:97:1f:cf:b8:74:f3:c2:cc:63:35:e0:97:24:8d:03:42:13:
e8:84:f9:2a:1b:90:e4:00:59:13:fb:2f:de:bb:c0:84:e9:e1:
76:90:7b:6c:4f:5a:c8:0e:e0:be:10:b2:41:33:d4:4b:97:6a:
ae:fa:6b:83:9b:e4:40:55:15:e2:74:48:df:6c:5e:69:8d:6f:
d8:d2:4e:15:d8:8e:b6:8e:2a:97:57:3e:c6:3c:60:95:fb:e9:
d0:9e:6e:0c:95:63:64:51:98:fe:06:cb:e7:15:a6:eb:2c:74:
8a:3c:0d:51:03:1a:27:3c:85:a5:00:0c:05:e0:01:56:10:23:
ad:a2:c6:86:ec:ca:a6:b5:5d:b1:f6:89:d6:83:3a:7e:6c:c5:
6c:6b:6e:e7:ce:d4:f9:28:ca:2c:53:d7:df:22:0b:9d:a0:5d:
62:83:12:54:86:a0:54:9e:d0:b2:a3:87:59:b9:37:3a:e9:40:
ed:4a:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:56 2025 by rpki-client