Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/zbYDuh8SKc0rX1QMZj46TkmRDj4.roa
File: zbYDuh8SKc0rX1QMZj46TkmRDj4.roa (raw, json)
Hash identifier: oaXcRvc0jnyhB65ttUjdoC6bqmSyDX78SbKY2J4Qew0=
Subject key identifier: CD:B6:03:BA:1F:12:29:CD:2B:5F:54:0C:66:3E:3A:4E:49:91:0E:3E
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018BFC8A82F3B91DC5AA18E5843079C89403
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/zbYDuh8SKc0rX1QMZj46TkmRDj4.roa
Signing time: Thu 23 Nov 2023 14:16:57 +0000
ROA not before: Thu 23 Nov 2023 14:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef41:e000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:8a:82:f3:b9:1d:c5:aa:18:e5:84:30:79:c8:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Nov 23 14:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb603ba1f1229cd2b5f540c663e3a4e49910e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:53:65:f3:37:68:d9:73:2c:1c:46:aa:5f:
73:fc:3a:95:00:e6:ba:40:d8:a4:4a:66:cc:f9:72:
ed:fd:79:88:64:91:14:8d:a2:bf:69:9c:16:2c:f2:
3c:1f:0e:1c:87:e3:88:fb:85:0d:dc:58:b5:71:45:
57:62:5e:7c:89:9c:d0:97:1c:13:8f:cd:25:27:d6:
2f:9a:9c:44:30:33:6f:37:15:19:40:ed:55:ce:61:
6c:17:70:58:ef:da:43:9a:a6:f2:1f:89:b7:74:f7:
ee:e5:60:84:b3:48:cd:06:27:0f:1f:69:9b:10:39:
13:80:d3:5e:4c:80:60:ff:66:0c:50:2b:b4:35:e0:
4f:11:a0:61:e5:b8:4c:84:3e:a3:1e:6c:fb:d0:d3:
69:95:b8:2a:ad:f3:3d:89:a9:d0:9b:bb:4e:7b:e9:
50:15:8f:07:14:22:d8:ad:12:c3:54:fb:d6:a9:29:
4b:6e:69:fe:a3:93:7a:0a:04:46:2a:fd:d0:12:3c:
2a:58:24:5f:75:3d:61:46:e6:94:66:cc:5f:9a:70:
6d:6a:29:f3:e7:78:65:99:7a:9d:5b:61:1b:b1:71:
24:ec:f1:16:f5:aa:9b:be:5f:c1:b1:56:50:97:8f:
a2:e6:07:0b:cd:35:15:c3:d5:9e:9e:b2:d6:1b:ff:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:03:BA:1F:12:29:CD:2B:5F:54:0C:66:3E:3A:4E:49:91:0E:3E
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/zbYDuh8SKc0rX1QMZj46TkmRDj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41:e000::/35
Signature Algorithm: sha256WithRSAEncryption
8d:b1:b5:50:ec:27:24:1e:61:09:7e:74:59:cf:6d:a9:b8:35:
a5:04:8c:23:7f:53:73:35:95:e8:52:a1:4d:5f:0a:89:c2:03:
b8:fe:12:38:54:a8:23:18:7c:0e:b6:98:ca:b5:9b:5f:d5:4d:
bf:02:6e:d3:e8:c1:de:7e:81:34:d0:f8:2c:25:b0:d9:d7:a7:
74:1a:51:20:d5:83:ea:5d:d7:38:dd:ed:fb:f5:f7:d5:32:42:
2b:a2:92:50:b7:d5:0c:4b:e5:db:82:69:e1:2b:13:81:71:24:
40:ef:dc:19:3d:8f:b0:3f:03:a5:dd:11:70:07:f4:d4:16:2e:
6e:be:3d:56:c5:e3:80:dc:15:07:96:6e:08:a8:cc:0d:a6:77:
45:7b:9b:88:07:79:23:da:5a:fc:f9:dc:7a:a6:37:a7:3e:d5:
d2:08:75:13:03:1c:d0:f9:3f:0a:5b:39:83:95:56:c6:16:46:
61:76:05:1f:fe:62:28:34:a7:62:05:f2:92:3e:83:29:80:a5:
3a:c2:d8:9a:59:1b:74:57:a7:6d:53:e8:5c:46:84:23:10:e5:
6b:6d:e8:bd:2d:95:61:95:6a:ac:6f:15:8d:4f:32:e4:c2:0c:
ee:b7:b5:51:4c:33:52:f0:d5:5e:29:0c:5c:2c:a8:a4:35:cf:
fa:cc:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:00 2025 by rpki-client