Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/ZoKIl9YZFuoqn-M6l74COof5MHQ.roa
File: ZoKIl9YZFuoqn-M6l74COof5MHQ.roa (raw, json)
Hash identifier: PDlBi/GUPca2M+ClQHY6i6FrWZfP2ejkU5uyGLD6hR0=
Subject key identifier: 66:82:88:97:D6:19:16:EA:2A:9F:E3:3A:97:BE:02:3A:87:F9:30:74
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 0194CBD07FB45C4973737672389C98F2B43C
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/ZoKIl9YZFuoqn-M6l74COof5MHQ.roa
Signing time: Mon 03 Feb 2025 12:37:06 +0000
ROA not before: Mon 03 Feb 2025 12:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60591
IP address blocks: 2a07:f600:4010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:d0:7f:b4:5c:49:73:73:76:72:38:9c:98:f2:b4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Feb 3 12:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66828897d61916ea2a9fe33a97be023a87f93074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:2c:f1:6a:1c:07:19:16:21:60:50:de:60:
b0:1b:50:11:ee:68:1b:1a:97:be:6b:63:32:39:b3:
4d:24:5f:5d:27:42:ca:3a:b3:1a:6f:5e:3f:e3:62:
65:61:65:ab:40:03:59:b4:b7:25:48:70:fe:a7:05:
66:f7:1b:bd:3b:50:6a:0f:e6:93:c3:be:9d:00:87:
67:f6:f7:17:a4:97:a9:47:9d:ac:e9:fa:05:be:e8:
8e:c6:9b:45:18:b4:96:81:13:73:03:16:44:1a:2e:
51:6a:0e:c9:e7:6c:5a:1b:5a:85:d1:95:9b:e3:80:
05:b8:97:66:67:a3:99:26:04:81:b2:d3:fd:1e:25:
62:cf:bf:59:d4:49:87:1d:14:ba:c1:40:f0:2e:4c:
2a:b0:75:36:e3:94:1e:0f:00:ff:47:57:02:fc:00:
69:1e:d3:60:01:5a:1f:35:fb:70:2e:86:84:bb:95:
0d:cc:93:97:62:0b:24:cd:4a:cb:ef:c0:db:89:b2:
11:94:70:13:9a:ef:66:d6:84:a4:45:6a:55:bf:0d:
f6:56:99:79:5c:3a:2c:53:35:97:58:14:80:5f:32:
a1:61:1d:4d:f9:7a:e2:86:75:b9:55:37:af:8a:31:
81:04:47:c5:66:14:ac:01:6e:df:f6:75:e5:26:ad:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:88:97:D6:19:16:EA:2A:9F:E3:3A:97:BE:02:3A:87:F9:30:74
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/ZoKIl9YZFuoqn-M6l74COof5MHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f600:4010::/48
Signature Algorithm: sha256WithRSAEncryption
3c:ca:83:b4:4e:d9:e2:fd:fe:16:bf:20:62:f0:28:ca:87:e2:
e8:89:91:97:01:cf:62:6c:b0:ba:0b:a5:ae:cb:99:f4:61:ba:
a8:8d:37:2b:13:65:36:6a:3f:e1:10:e5:1c:67:3a:c7:34:4d:
76:67:60:01:f9:5a:7b:8e:9f:cd:0d:a9:58:df:20:a6:77:c2:
0c:73:03:af:b9:d6:ce:2c:9c:b6:90:74:0c:de:0c:8b:29:5c:
59:f8:19:cb:34:29:20:05:30:32:48:02:b7:d4:2e:85:96:70:
e1:c0:73:e0:11:0c:f2:63:d5:c3:fa:08:02:41:45:5e:b2:b2:
1f:ee:ec:fb:78:5a:85:76:25:c0:9a:a6:03:e8:de:00:b2:e9:
5f:01:d9:01:08:5d:ef:d8:76:29:69:a3:3c:e0:1c:40:45:72:
27:92:28:1c:e0:3e:cf:15:58:85:85:b5:0b:ed:de:39:7e:02:
0c:0a:79:0c:13:6e:16:db:3a:7f:8e:56:fe:27:da:12:12:4f:
1a:ed:58:b5:d8:ee:c8:6a:dc:00:c4:d1:d6:52:00:e0:6a:9e:
e4:43:cb:c0:89:4a:9b:89:8c:8e:5d:87:47:46:b0:96:c4:df:
db:4d:cf:98:38:91:d4:49:56:19:bc:b0:16:f2:9e:5e:dc:d5:
78:8f:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:00 2025 by rpki-client