Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/zcJed7pD50neRZeJxA9pDgI-55o.roa
File: zcJed7pD50neRZeJxA9pDgI-55o.roa (raw, json)
Hash identifier: RPtpOjLRm1topFSbzjncE7qbxZn5f8HfOsQucyWO0vA=
Subject key identifier: CD:C2:5E:77:BA:43:E7:49:DE:45:97:89:C4:0F:69:0E:02:3E:E7:9A
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 01856E942EA9B999253081FE645947E01C81
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/zcJed7pD50neRZeJxA9pDgI-55o.roa
Signing time: Sun 01 Jan 2023 18:24:43 +0000
ROA not before: Sun 01 Jan 2023 18:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211703
IP address blocks: 2a12:62c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2e:a9:b9:99:25:30:81:fe:64:59:47:e0:1c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Jan 1 18:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc25e77ba43e749de459789c40f690e023ee79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:a0:52:88:99:d8:eb:f3:14:d2:b0:be:e9:
15:4f:e2:d5:b7:29:73:6d:cb:19:4b:7b:cf:37:d6:
9d:83:8d:85:2b:27:50:a7:7f:e6:e8:89:6f:15:16:
df:63:06:6b:8e:83:39:b8:7b:32:fe:07:ae:3e:8b:
0d:77:cd:4d:69:ea:c1:8e:28:b6:a7:01:d6:b3:96:
2e:ef:bf:bd:94:c2:af:fa:14:c0:c0:5a:32:df:e1:
3b:65:f7:54:40:0f:af:1a:cb:33:be:fa:88:8e:32:
bb:f3:cf:c5:38:0b:4d:c6:2e:d7:77:44:a2:ce:b4:
3b:f8:56:96:a8:45:4c:33:ce:2c:4b:d6:57:a8:43:
c8:3e:62:51:d4:79:c9:2f:08:ab:89:8f:34:84:21:
78:0d:e5:02:a5:a5:74:5a:cc:33:3f:b8:04:41:63:
e1:4f:42:6c:ed:06:40:9a:f4:74:75:d6:1b:b3:e1:
69:42:8f:d6:5c:dd:04:64:53:90:61:fa:14:e1:38:
ed:37:b0:53:33:d9:84:70:68:91:d3:52:2b:5a:81:
64:72:90:05:40:3d:18:2e:eb:32:c7:5c:1d:28:c5:
ea:16:6c:89:44:c4:47:2f:81:b9:08:be:b0:e1:fa:
ab:02:25:92:44:61:a8:27:38:cf:70:94:92:8f:4b:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:5E:77:BA:43:E7:49:DE:45:97:89:C4:0F:69:0E:02:3E:E7:9A
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/zcJed7pD50neRZeJxA9pDgI-55o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:cb:5d:bc:fc:bc:29:0d:e6:ff:57:4c:d9:06:2d:4a:3b:2c:
76:ed:37:96:91:95:b6:81:c0:9c:82:8c:5b:d4:7b:ea:5d:47:
c5:75:23:ce:12:f9:f2:ec:b6:36:f7:55:c1:b1:6a:70:20:60:
33:d1:0b:63:81:cd:79:48:59:c3:ef:63:60:c9:64:d9:81:45:
be:4a:ec:dc:8c:d0:79:db:73:7a:75:f1:35:83:d1:85:70:ba:
f0:ae:4a:af:89:63:ae:fd:29:51:11:64:c0:21:c1:2e:b0:a8:
e2:b2:91:91:66:73:a5:06:26:99:94:8f:95:fd:c3:75:33:0e:
7b:86:d4:5a:ad:18:9d:5e:45:4c:36:d1:dd:15:64:e4:54:a2:
4f:09:49:26:fd:3f:fc:7b:73:90:f1:78:01:30:13:43:fb:bd:
c8:d7:af:23:9e:92:ae:60:48:1c:c6:03:02:ae:bb:b2:87:bb:
39:2f:d5:d4:32:0d:b5:a4:b2:68:62:39:30:37:42:37:12:e1:
9b:d8:8d:4f:e3:66:d8:8d:0e:f4:d5:02:0b:76:ac:db:55:21:
11:a1:2b:ae:07:ca:a2:c4:1c:bd:f4:3c:af:41:40:63:5d:49:
1e:15:7a:aa:7a:4b:93:06:87:d8:4f:44:06:40:2c:31:17:47:
81:9c:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:56 2025 by rpki-client