Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZJO23NRNQNCApR18aIA9gg_Zwp4.roa
File: ZJO23NRNQNCApR18aIA9gg_Zwp4.roa (raw, json)
Hash identifier: weLFcZRdtckXtQH7/USmyafRpc7HAmku5lt/6jFyVrw=
Subject key identifier: 64:93:B6:DC:D4:4D:40:D0:80:A5:1D:7C:68:80:3D:82:0F:D9:C2:9E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C1AACFA793A456E462C1295D77F8F2CC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZJO23NRNQNCApR18aIA9gg_Zwp4.roa
Signing time: Thu 05 Sep 2024 10:11:22 +0000
ROA not before: Thu 05 Sep 2024 10:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:aa:cf:a7:93:a4:56:e4:62:c1:29:5d:77:f8:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 5 10:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6493b6dcd44d40d080a51d7c68803d820fd9c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:b5:52:03:9e:20:6a:8c:cc:ba:1a:64:eb:
5b:c3:cf:ad:1e:40:00:df:a1:c7:19:1f:f6:18:2e:
12:85:47:d6:b6:32:27:6a:e0:8b:8c:fb:88:fe:0a:
ff:88:c7:07:cc:ee:2b:20:21:40:ae:48:e9:39:b6:
ed:70:a3:52:b1:ca:6f:27:c0:e7:da:0f:dc:8a:47:
76:fd:7c:33:57:18:e3:57:86:51:d0:ec:7a:15:cb:
da:e3:c3:e9:6f:f1:2e:b9:56:7b:a6:c0:4f:75:f8:
93:1b:77:03:4b:dc:28:aa:f7:c0:b2:44:e7:b1:c2:
8e:77:a0:7a:0e:7f:5f:f8:a2:e6:1b:6e:f0:20:b5:
78:30:cc:c2:71:fd:aa:74:72:b4:e8:28:c8:0a:3a:
85:c2:ee:ea:43:ba:ca:84:bd:77:8b:f7:53:e3:d1:
55:56:1d:8f:2e:06:3d:3a:cc:cb:37:a4:64:82:3d:
bf:c0:7b:41:21:a0:26:10:f9:24:6d:18:6f:63:6f:
54:2f:da:23:06:75:47:01:f8:d3:4e:56:99:c5:49:
45:65:64:ab:ea:27:82:27:9e:3f:eb:dc:19:16:45:
8b:82:57:54:9c:9b:6e:ed:d1:7d:11:a3:4d:2b:25:
56:c4:bb:c4:31:b9:f8:34:35:25:a0:be:ab:11:ef:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:B6:DC:D4:4D:40:D0:80:A5:1D:7C:68:80:3D:82:0F:D9:C2:9E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZJO23NRNQNCApR18aIA9gg_Zwp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
0b:b5:60:01:dc:ba:52:5d:cc:8f:55:2b:7a:d9:95:26:57:04:
d0:1c:a7:ca:09:e7:8d:48:82:67:b1:ac:94:dc:c5:1c:05:78:
bc:20:f6:b5:4a:f6:3e:20:37:98:c3:60:51:09:03:d0:41:ef:
9d:85:72:03:92:80:cb:16:73:dc:9f:b0:9e:3b:43:7c:99:91:
b7:64:92:24:06:f4:34:a5:2d:55:a2:7a:3e:a3:67:78:47:ec:
fe:9d:79:2b:06:ee:20:c1:96:91:96:08:8d:c2:49:42:7c:ce:
d5:ad:42:db:99:e8:4d:e2:c8:74:fd:74:63:4d:f1:88:be:fe:
53:d3:3c:23:f1:56:87:96:66:41:a8:f0:9b:73:2a:ab:1d:6b:
48:c7:19:ee:e9:cb:2f:be:cc:bd:8c:75:a5:88:38:50:42:36:
65:b4:32:47:38:e5:46:9b:f7:fd:58:b9:0c:7a:d2:c6:88:68:
34:ec:8f:9a:88:c3:9d:55:10:7d:7f:24:2d:c3:ab:a0:ec:24:
7f:6a:78:46:ae:e3:6a:39:bd:6c:56:e4:33:63:f2:12:80:4c:
7c:82:2c:09:bf:21:6e:41:25:06:b9:71:ae:ad:2b:21:8d:d3:
22:3e:c6:e2:4e:e0:73:0c:61:4a:94:c1:6e:c6:d4:00:41:50:
33:b3:ab:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:44 2025 by rpki-client