Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/Zd_BbmRztdATTgA1m9K3yLfmY3E.roa
File: Zd_BbmRztdATTgA1m9K3yLfmY3E.roa (raw, json)
Hash identifier: d+FcDffGShtW1D3p4F/YLcTa6Rg4AFasZWJ72G0r2+M=
Subject key identifier: 65:DF:C1:6E:64:73:B5:D0:13:4E:00:35:9B:D2:B7:C8:B7:E6:63:71
Certificate issuer: /CN=922fbdff15c9bec0fee7309be592e5d86dd9408a
Certificate serial: 01856FD4FA695DFC866F4FAC86E1C9D52BCF
Authority key identifier: 92:2F:BD:FF:15:C9:BE:C0:FE:E7:30:9B:E5:92:E5:D8:6D:D9:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki-9_xXJvsD-5zCb5ZLl2G3ZQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/Zd_BbmRztdATTgA1m9K3yLfmY3E.roa
Signing time: Mon 02 Jan 2023 00:15:06 +0000
ROA not before: Mon 02 Jan 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49271
IP address blocks: 2001:678:dd0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:fa:69:5d:fc:86:6f:4f:ac:86:e1:c9:d5:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922fbdff15c9bec0fee7309be592e5d86dd9408a
Validity
Not Before: Jan 2 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65dfc16e6473b5d0134e00359bd2b7c8b7e66371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:3d:2f:ed:1f:67:21:96:3f:59:aa:91:5f:
d5:4a:8f:d7:e3:f3:e5:94:78:8a:1c:45:b3:e3:90:
58:bf:54:79:ef:70:72:5c:1a:54:5c:1f:4c:d1:a0:
76:23:39:33:30:ab:e0:dd:48:37:9c:7a:99:ca:57:
12:4b:97:cf:45:8c:5f:ad:c7:bd:50:86:fb:23:22:
03:a7:16:a7:f6:2c:94:b4:48:ea:cc:8a:98:c3:7b:
5a:00:43:53:ee:e9:3c:ba:30:67:2a:34:44:be:58:
b2:21:e9:cc:c3:86:9f:f8:f7:be:63:c4:7f:bb:a7:
41:7a:b4:b0:d4:0f:f1:d9:45:5f:92:ae:7d:07:7e:
48:c6:6f:12:9c:c2:60:0a:96:4b:ba:3f:cc:0f:28:
df:54:dc:bf:d1:97:a4:7c:37:be:60:50:6c:27:77:
5b:4c:1a:97:14:fb:7d:67:b2:c9:38:aa:23:9b:6f:
d0:9e:51:0b:04:10:40:a6:cb:6c:44:18:63:81:72:
87:55:fc:6f:e2:e9:85:69:a0:03:b4:4f:4f:50:fb:
6b:c1:b9:01:60:bf:d3:7c:86:3b:9c:53:e3:01:9c:
10:bd:61:c4:97:6f:48:41:a5:c4:3e:2e:a4:ed:90:
06:a2:8b:1a:fa:8f:d8:cd:7c:ce:bc:3a:1d:27:fd:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:C1:6E:64:73:B5:D0:13:4E:00:35:9B:D2:B7:C8:B7:E6:63:71
X509v3 Authority Key Identifier:
keyid:92:2F:BD:FF:15:C9:BE:C0:FE:E7:30:9B:E5:92:E5:D8:6D:D9:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki-9_xXJvsD-5zCb5ZLl2G3ZQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/Zd_BbmRztdATTgA1m9K3yLfmY3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e882-0350-46e7-8c69-ff37c9a84110/1/ki-9_xXJvsD-5zCb5ZLl2G3ZQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dd0::/48
Signature Algorithm: sha256WithRSAEncryption
12:f3:2a:70:f2:44:a0:82:f8:c6:aa:b1:4d:49:22:8c:2b:02:
73:ae:82:a1:e0:75:77:c5:90:27:c5:51:4a:8e:ec:e4:29:7b:
8a:3a:a7:02:33:68:08:e7:8a:4c:98:43:d9:c6:43:ae:c5:8c:
3d:a5:57:b5:7b:61:0c:1d:6e:f0:a2:53:00:65:3b:8b:e5:47:
38:1a:60:15:2d:ed:c4:94:4d:3a:e1:13:45:89:d5:f0:f7:97:
0c:d5:23:68:46:1e:17:d7:9f:e0:60:40:24:fe:7d:c7:d1:24:
ac:98:bd:e9:3e:a6:d6:10:03:a4:41:22:f5:ba:78:38:c3:83:
54:81:52:3c:83:c3:30:33:92:cc:aa:0c:88:87:41:7a:35:74:
b3:6b:49:9c:51:4f:3c:14:a4:dc:1e:08:6e:aa:ad:cd:87:11:
8a:1c:be:4b:bb:9d:18:14:4e:14:2f:bc:f2:61:a8:a9:e6:de:
b4:cc:10:5e:68:bd:fe:60:e4:e1:d6:08:f9:f2:67:16:21:3a:
34:de:fc:82:66:17:43:fe:d1:96:fe:2b:64:0f:96:0a:99:a0:
d7:08:92:e4:e0:c9:38:15:cc:2a:dc:e9:e6:7f:ab:07:7d:31:
a9:fb:65:5d:6e:7d:12:ca:0b:4f:6e:d9:b8:4f:36:41:63:cb:
33:4a:73:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVv1PppXfyGb0+shuHJ1SvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmZiZGZmMTVjOWJlYzBmZWU3MzA5YmU1OTJlNWQ4NmRk
OTQwOGEwHhcNMjMwMTAyMDAxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWRmYzE2ZTY0NzNiNWQwMTM0ZTAwMzU5YmQyYjdjOGI3ZTY2MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTM9L+0fZyGWP1mqkV/VSo/X4/Pl
lHiKHEWz45BYv1R573ByXBpUXB9M0aB2IzkzMKvg3Ug3nHqZylcSS5fPRYxfrce9
UIb7IyIDpxan9iyUtEjqzIqYw3taAENT7uk8ujBnKjREvliyIenMw4af+Pe+Y8R/
u6dBerSw1A/x2UVfkq59B35Ixm8SnMJgCpZLuj/MDyjfVNy/0ZekfDe+YFBsJ3db
TBqXFPt9Z7LJOKojm2/QnlELBBBApstsRBhjgXKHVfxv4umFaaADtE9PUPtrwbkB
YL/TfIY7nFPjAZwQvWHEl29IQaXEPi6k7ZAGoosa+o/YzXzOvDodJ/347wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGXfwW5kc7XQE04ANZvSt8i35mNxMB8GA1UdIwQY
MBaAFJIvvf8Vyb7A/ucwm+WS5dht2UCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ktOV94WEp2c0QtNXpDYjVaTGwyRzNaUUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NmU4ODItMDM1MC00NmU3LThjNjkt
ZmYzN2M5YTg0MTEwLzEvWmRfQmJtUnp0ZEFUVGdBMW05SzN5TGZtWTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NmU4ODItMDM1MC00NmU3LThjNjktZmYzN2M5YTg0MTEw
LzEva2ktOV94WEp2c0QtNXpDYjVaTGwyRzNaUUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAS8ypw8kSggvjGqrFNSSKMKwJzroKh4HV3xZAn
xVFKjuzkKXuKOqcCM2gI54pMmEPZxkOuxYw9pVe1e2EMHW7wolMAZTuL5Uc4GmAV
Le3ElE064RNFidXw95cM1SNoRh4X15/gYEAk/n3H0SSsmL3pPqbWEAOkQSL1ung4
w4NUgVI8g8MwM5LMqgyIh0F6NXSza0mcUU88FKTcHghuqq3NhxGKHL5Lu50YFE4U
L7zyYaip5t60zBBeaL3+YOTh1gj58mcWITo03vyCZhdD/tGW/itkD5YKmaDXCJLk
4Mk4Fcwq3Onmf6sHfTGp+2Vdbn0SygtPbtm4TzZBY8szSnMc
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:18 2025 by rpki-client