Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa
File: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (raw, json)
Hash identifier: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=
Subject key identifier: 66:6E:6A:F8:E0:07:17:C5:CC:96:44:C6:45:9D:28:72:F6:68:D2:45
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67E2F2CF02DA0718660CF4736272D
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa
Signing time: Thu 02 Jan 2025 15:50:58 +0000
ROA not before: Thu 02 Jan 2025 15:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18680
IP address blocks: 2a02:26f0:880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7e:2f:2c:f0:2d:a0:71:86:60:cf:47:36:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=666e6af8e00717c5cc9644c6459d2872f668d245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:4e:67:c4:97:3a:3b:a7:81:b8:a5:ea:8c:
c2:f6:58:ce:30:da:18:78:aa:3a:30:6d:20:54:cf:
31:95:83:69:4f:26:c7:c0:1d:9b:c2:34:7f:f8:db:
1e:bf:e1:6b:0b:0c:f6:0c:2f:6b:d9:7c:0d:00:f2:
a9:02:3d:df:37:66:89:4b:af:a7:73:80:cb:f3:78:
90:a2:97:61:28:9a:f9:6e:7c:d1:d1:ca:36:e9:0a:
27:81:01:7e:01:13:ea:07:aa:60:07:03:e7:ce:e0:
9f:fe:eb:6e:33:a9:c3:bf:92:18:8e:3c:7b:0e:be:
ab:d6:e7:78:2f:7d:46:f8:a0:88:ed:13:78:aa:8e:
e6:90:ed:21:fb:b9:cf:42:1e:64:05:12:63:08:db:
1a:5d:15:e2:04:55:12:d3:8a:d9:58:43:c1:f8:e9:
44:d8:b9:b8:95:01:42:13:fa:c5:5f:4a:b5:6a:85:
8b:99:26:df:03:b9:6e:69:4d:f6:2a:19:f5:95:ec:
74:1f:92:27:10:fd:89:de:d4:ca:6e:9f:4b:e0:57:
78:d3:33:a5:88:f2:cc:e7:5f:a9:e2:b5:d8:22:61:
47:49:1c:78:cc:87:4b:cc:85:9f:1e:65:a7:4f:d8:
bd:58:30:32:0e:4a:d3:7f:f4:2c:4a:0b:bf:1d:3b:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6E:6A:F8:E0:07:17:C5:CC:96:44:C6:45:9D:28:72:F6:68:D2:45
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:880::/48
Signature Algorithm: sha256WithRSAEncryption
3b:0d:1f:92:60:e1:e0:5f:56:45:82:33:af:ed:47:47:55:33:
c1:9a:f8:3f:55:a1:de:b0:97:c4:6d:be:91:ba:03:bf:98:2f:
29:7f:f1:0c:3f:bc:02:31:ee:be:0e:39:0f:64:1e:c3:e6:7b:
7a:a3:cf:05:97:21:5c:ab:97:31:45:c6:c7:11:5f:74:13:a6:
b0:67:62:2b:3e:f0:6c:9a:d5:ef:7f:48:a1:8b:91:8d:2e:58:
90:85:3b:cd:b5:15:42:f7:e4:d3:3e:10:ac:f1:6e:60:d5:18:
31:1a:98:23:8d:2b:0a:34:f0:e9:ee:d8:40:4a:50:ab:b3:00:
5c:db:62:da:c9:46:e8:bc:65:45:e0:ea:6f:45:31:d0:32:b8:
8a:7b:36:4c:9a:48:76:63:35:eb:08:b4:31:69:41:61:dc:59:
87:1e:11:ee:b9:02:fa:15:33:ac:c3:a4:d1:47:e4:f7:e8:22:
5f:4e:7f:34:87:1f:0e:59:72:99:47:23:6e:0c:5c:49:df:ce:
2b:da:2e:be:f6:76:00:de:98:6b:25:a9:78:0a:e9:7b:59:fb:
78:2a:4d:b9:fb:3f:cd:ae:5e:b6:68:4a:47:89:b7:e8:23:6d:
b4:32:ab:5f:1b:25:bd:5f:d2:78:db:56:fe:b2:6a:32:a4:c3:
01:19:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:08 2025 by rpki-client