Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/KzisFaAGCo_M29Hpg-XLavrmucI.roa
File: KzisFaAGCo_M29Hpg-XLavrmucI.roa (raw, json)
Hash identifier: wKhDmEmJvmyWEhFCmOYqNzdMcRmXiu+WrBZbcpRXXA8=
Subject key identifier: 2B:38:AC:15:A0:06:0A:8F:CC:DB:D1:E9:83:E5:CB:6A:FA:E6:B9:C2
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 019425FDAD1D0F6E16E37ACAB807A2E0A9E0
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/KzisFaAGCo_M29Hpg-XLavrmucI.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204926
IP address blocks: 2001:678:58c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ad:1d:0f:6e:16:e3:7a:ca:b8:07:a2:e0:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b38ac15a0060a8fccdbd1e983e5cb6afae6b9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:b6:d6:ab:47:90:7f:90:a1:5b:1c:d6:29:
f9:bb:55:35:5e:14:f6:d2:5b:29:34:a6:a7:30:ac:
9b:3f:05:7f:45:09:ea:ab:95:32:19:e3:b7:b6:1b:
f2:24:7b:78:f3:2c:9b:18:cc:7d:3e:0e:67:14:11:
49:00:1d:a3:16:2c:e6:9d:a3:8b:13:4b:06:da:5b:
55:61:9e:ed:ba:df:91:2e:8f:9d:86:8b:87:5d:51:
e7:a0:b0:12:1a:6a:76:ec:4c:d8:ef:12:a3:25:19:
78:43:f6:41:e0:98:91:98:25:28:77:88:97:c1:aa:
25:5a:63:b5:b5:86:1f:c6:34:fe:52:6a:9a:c5:72:
42:fe:b3:1c:37:ab:6e:81:09:5f:bb:ea:8e:d4:00:
55:66:60:66:fc:17:84:2a:54:bd:14:31:b9:9c:3f:
9e:94:68:66:3f:28:a5:97:b3:b3:4a:89:4b:2d:9d:
2f:44:ba:e3:68:30:8f:53:99:4f:6d:55:76:bd:26:
70:fe:2a:bf:dc:20:be:fa:58:84:ee:32:59:3d:c2:
08:5b:72:af:cc:b5:e2:bd:69:3b:a4:a9:3f:e2:db:
b5:2a:f4:e6:19:a0:72:ea:ae:d8:cf:4d:d5:76:38:
57:e1:95:ef:7d:b6:c3:86:b8:d7:d0:b4:2c:92:20:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:38:AC:15:A0:06:0A:8F:CC:DB:D1:E9:83:E5:CB:6A:FA:E6:B9:C2
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/KzisFaAGCo_M29Hpg-XLavrmucI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:58c::/48
Signature Algorithm: sha256WithRSAEncryption
02:0b:51:c8:31:cc:49:b5:04:ec:97:83:59:4b:88:f2:22:78:
f9:40:08:5c:51:5f:1f:d3:8d:45:d4:5c:86:fa:41:db:1b:4e:
1d:b0:88:be:d0:41:e8:95:2e:50:92:06:75:b2:f2:98:55:63:
ce:56:5f:03:17:17:d3:2a:b5:2b:0f:16:7d:4a:b4:25:44:ef:
f8:a7:6c:1b:4a:98:da:c9:48:64:02:10:61:3a:88:71:cf:bb:
40:cf:af:5d:40:1c:66:7d:f4:2a:9d:ea:ec:5f:23:0a:af:5f:
cb:22:31:cc:75:55:79:d7:fd:1a:85:0f:86:00:b4:12:54:a4:
30:65:d9:2b:fa:f9:bc:8e:64:30:be:6f:64:38:13:dc:f6:b5:
c5:61:ca:81:4e:68:aa:e2:c3:3c:f9:f2:a0:da:49:42:03:31:
ec:3f:22:2b:85:ba:ab:d7:e9:6a:88:82:c6:a8:47:ef:94:84:
cf:09:55:2e:d1:69:ed:d6:52:2b:43:83:df:61:13:7e:97:76:
4a:76:0d:00:ef:7f:ca:8b:d6:20:6c:2b:ce:c5:6f:37:95:49:
bd:0e:08:7a:cc:fd:a1:0e:21:64:12:05:6c:5d:ad:e4:45:86:
cc:82:18:93:89:6f:1d:39:58:b8:4a:aa:f2:c0:3a:db:7f:9b:
c4:9b:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:39 2025 by rpki-client