Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/zwDAxEjgskjwTyf2oYEI29_2zPs.roa
File: zwDAxEjgskjwTyf2oYEI29_2zPs.roa (raw, json)
Hash identifier: esL2oNWYqrhmrMhVaSuqkMnc4Juix2U/Ld+girdQpDo=
Subject key identifier: CF:00:C0:C4:48:E0:B2:48:F0:4F:27:F6:A1:81:08:DB:DF:F6:CC:FB
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 09ADCD4E
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/zwDAxEjgskjwTyf2oYEI29_2zPs.roa
Signing time: Sat 01 Jan 2022 05:05:34 +0000
ROA not before: Sat 01 Jan 2022 05:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203493
IP address blocks: 2a09:6280:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162385230 (0x9adcd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 1 05:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf00c0c448e0b248f04f27f6a18108dbdff6ccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:86:a4:a7:07:93:76:68:58:cb:84:2f:13:
63:12:7c:d3:aa:7d:74:43:8e:99:6f:b6:30:b2:b5:
25:4f:a4:dd:7b:ed:ed:e3:2b:51:ba:58:18:ec:82:
8b:f7:1f:a6:7c:ef:6b:62:0d:17:ea:ed:fe:79:89:
4e:c4:04:25:ed:ba:c3:a7:9d:4c:e9:dc:1a:bc:19:
07:5d:cd:b1:ba:3f:23:d1:f2:01:f4:6e:9d:e6:19:
b6:a2:bf:d3:60:c9:ae:3d:60:7e:be:ce:5c:b9:6e:
60:b0:33:93:d7:88:b6:1f:2d:95:01:19:3a:31:c1:
68:53:3e:f5:de:67:38:fb:2a:5c:ac:ad:9b:0a:15:
be:8d:ce:e1:9f:0e:0f:c2:38:57:60:a1:bd:b2:4c:
3b:a3:5d:6e:1a:ae:21:a9:73:ef:47:04:4c:b0:a2:
0c:0e:d2:5b:c5:31:58:43:1e:a1:61:33:81:48:f6:
53:cb:91:85:5a:da:a3:01:b8:f3:19:db:f4:c6:28:
d6:5f:a0:2d:c7:cb:1a:e1:4c:9c:13:ab:bd:58:9c:
e1:e2:dd:9a:01:a4:d1:40:0f:a7:e6:e3:85:63:29:
68:51:f5:9b:99:c5:01:4d:bc:a7:88:f1:1b:be:63:
94:09:81:5b:f7:a8:8d:b3:b5:5b:2f:c0:04:2c:43:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:C0:C4:48:E0:B2:48:F0:4F:27:F6:A1:81:08:DB:DF:F6:CC:FB
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/zwDAxEjgskjwTyf2oYEI29_2zPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:3::/48
Signature Algorithm: sha256WithRSAEncryption
80:0b:ca:f8:06:2b:7f:88:6d:91:a2:00:15:fe:57:09:ff:82:
47:fb:77:79:7b:6f:25:fe:ca:1b:3a:ba:a8:a6:fd:bd:3c:a9:
0a:d1:b4:c3:e7:cb:3f:fd:e5:64:32:14:4a:dd:b1:2e:96:3e:
c4:c6:bc:87:e5:f1:97:35:eb:c9:b1:f4:7b:8e:2d:ac:bf:3a:
b9:16:78:69:13:f0:50:95:24:47:05:8b:39:34:e6:a7:9a:7b:
fe:b1:fd:ef:d4:41:36:ab:56:c6:39:4f:83:80:88:8b:52:94:
56:98:98:23:e5:9a:3c:fd:9e:3f:df:2a:9f:31:1f:a2:5b:e6:
3b:38:e1:8d:d5:94:6d:46:43:ae:95:e2:e5:2d:8a:58:64:3b:
96:bc:ea:63:68:85:37:c9:5c:a8:d5:03:25:32:64:80:59:e2:
7f:e7:91:e6:63:d9:05:0f:31:18:4e:e9:bc:8d:54:bc:ef:2b:
6f:97:26:d2:3c:42:5f:a9:27:4f:02:0b:9e:1a:a4:ce:8a:44:
12:4a:1f:56:a9:94:ca:64:cf:c6:f7:e6:e7:d7:88:d9:33:10:
d9:f5:d5:1a:47:63:28:9c:88:e4:88:99:00:d7:33:0f:ab:f0:
e4:ad:7b:6c:2d:af:d2:ca:ba:34:ef:fa:54:fb:2e:b0:55:82:
ac:93:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:35 2025 by rpki-client