Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/zx-t61_kXPwT-e1GD9KuzQhAD3M.roa
File: zx-t61_kXPwT-e1GD9KuzQhAD3M.roa (raw, json)
Hash identifier: P5NwrfIVwxJS1gGHZLhsENX6bymamhJBxg2Elrs08Vk=
Subject key identifier: CF:1F:AD:EB:5F:E4:5C:FC:13:F9:ED:46:0F:D2:AE:CD:08:40:0F:73
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018543BFCDC5977115E7AE246411008F4B4A
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/zx-t61_kXPwT-e1GD9KuzQhAD3M.roa
Signing time: Sat 24 Dec 2022 10:48:41 +0000
ROA not before: Sat 24 Dec 2022 10:48:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211703
IP address blocks: 2a12:62c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:bf:cd:c5:97:71:15:e7:ae:24:64:11:00:8f:4b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Dec 24 10:48:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf1fadeb5fe45cfc13f9ed460fd2aecd08400f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:68:d8:f4:67:d3:89:b9:d5:3b:9a:fa:be:
31:e3:0e:df:9d:af:2a:fc:75:4c:52:46:9f:f0:cf:
89:58:8e:a8:07:6e:01:19:a1:25:0d:99:1d:7c:ab:
01:4e:52:89:98:ee:9c:21:2a:01:a0:f2:7d:fd:32:
97:d9:3e:5d:54:49:85:1a:c4:6b:66:bd:e1:2a:42:
5b:21:bc:93:7d:f2:84:96:40:b8:43:31:2a:05:de:
df:9b:1a:e5:a1:6e:e1:c2:63:be:8b:5b:7b:50:12:
44:d5:23:a0:21:39:33:43:c1:ba:c4:06:9f:81:c0:
6d:93:e2:e2:69:93:7d:d7:0f:f2:b4:a2:df:db:a6:
16:8d:2d:17:63:c5:ec:e4:ea:92:5b:ac:00:fc:0a:
05:9e:2b:99:f1:a8:5a:b8:a7:6b:fe:14:94:c9:f6:
2b:86:d0:fa:bf:b4:a4:61:34:09:15:14:d5:63:5e:
f2:94:e9:d4:08:83:28:b8:45:8e:a3:da:73:9c:26:
1e:02:f7:67:ed:5d:ae:7b:33:5e:4c:71:c9:78:0d:
ee:ca:df:c3:e8:3d:83:ac:ca:1c:42:36:52:3c:13:
db:67:89:b2:f7:97:b8:92:97:13:fd:ec:f4:88:fb:
56:76:f4:a0:b1:52:2d:27:a0:23:bb:4d:62:1e:1d:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:AD:EB:5F:E4:5C:FC:13:F9:ED:46:0F:D2:AE:CD:08:40:0F:73
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/zx-t61_kXPwT-e1GD9KuzQhAD3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:3e:91:cd:e2:2d:4a:e9:fb:a6:cb:77:eb:b6:e4:a0:10:8d:
cb:7f:71:21:e7:54:17:b9:28:ac:dc:be:1c:ab:f9:a5:0e:bf:
54:b3:b2:22:7a:03:33:43:f2:27:c3:1b:8f:77:bd:2c:8b:f2:
f9:df:cb:48:2c:f0:44:3c:1b:45:c4:d4:41:5d:c6:8c:23:5d:
2e:70:85:c3:62:db:ad:8d:d4:b7:67:73:e7:2f:f8:1c:cb:cb:
dd:38:65:14:c8:09:51:d8:a3:7a:16:3d:07:c0:72:d1:06:38:
3b:e2:97:be:f4:11:43:1b:94:ac:69:75:c0:de:4b:53:0f:07:
68:6a:c3:19:14:85:9f:b9:59:41:d4:cf:47:6e:93:80:a3:d5:
35:63:df:26:55:8f:af:0b:ab:67:a2:a5:5b:56:d4:b2:cf:0a:
c1:be:01:d7:5f:0f:38:7c:ca:29:e1:5b:11:a9:45:4d:9a:ac:
ff:53:4c:45:96:ba:cf:a9:c2:72:a2:d0:89:7f:66:15:c9:aa:
77:cd:b7:75:38:42:d9:c3:f1:3f:68:ec:e0:4a:7f:78:c5:97:
98:45:60:c3:99:a9:84:0d:4d:58:bd:c4:82:c9:09:6b:32:e5:
c9:a9:95:c8:d6:b0:d6:e9:75:a2:d8:2b:a6:c6:17:ff:c3:e7:
60:f1:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:19 2025 by rpki-client