Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZMWlQGi0BmL_-mWGsn0qdRfbzag.roa
File: ZMWlQGi0BmL_-mWGsn0qdRfbzag.roa (raw, json)
Hash identifier: 4T/7acEoLqNi5Tyw0EpCEej+YjcoV5Zw2mntKdD8npE=
Subject key identifier: 64:C5:A5:40:68:B4:06:62:FF:FA:65:86:B2:7D:2A:75:17:DB:CD:A8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01946BCF2A65F1B9CE2178EC127369BC66C7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZMWlQGi0BmL_-mWGsn0qdRfbzag.roa
Signing time: Wed 15 Jan 2025 21:12:06 +0000
ROA not before: Wed 15 Jan 2025 21:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:cf:2a:65:f1:b9:ce:21:78:ec:12:73:69:bc:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 15 21:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c5a54068b40662fffa6586b27d2a7517dbcda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:df:93:9b:cf:0a:a7:93:5e:96:f3:1a:cf:
7d:e0:23:6a:bc:c8:92:ac:c3:36:92:a8:92:ad:af:
a3:5b:4c:6e:e2:62:c3:bd:4c:1b:13:b7:8c:fa:05:
34:c0:88:68:3c:79:8c:b7:28:7e:b9:40:11:aa:01:
4c:1d:7a:48:92:93:cc:2d:7a:ca:3a:a2:38:99:a7:
51:7e:2d:b9:16:dc:d6:a3:ac:11:a8:66:04:d6:99:
cb:7c:38:c9:a0:4d:fa:c3:14:83:52:a8:0f:99:bc:
c1:f8:c5:47:d8:94:66:37:4e:f3:97:a0:b3:e5:ee:
30:f8:68:60:b2:2c:08:3c:4c:ec:ad:c3:1f:3f:b4:
01:0a:4d:69:6b:0d:2d:31:12:49:91:c1:10:9f:a3:
8d:0d:77:68:03:19:3d:be:04:8d:c7:1f:d0:8b:7a:
9d:5d:a2:ab:4e:6b:60:5f:c2:a4:86:09:4a:a8:31:
68:99:66:19:68:37:52:e2:e8:30:e2:e7:01:2a:02:
8e:bc:e7:f3:f7:ff:fc:7d:0c:b9:97:c5:ae:98:b1:
58:28:94:66:45:98:cf:5b:13:d4:f8:80:af:25:e2:
69:46:a6:ba:88:73:7d:06:64:a2:be:bd:c3:f8:f4:
e9:b0:2e:d7:7a:8c:34:d6:d5:51:7e:4e:77:e9:5a:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C5:A5:40:68:B4:06:62:FF:FA:65:86:B2:7D:2A:75:17:DB:CD:A8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZMWlQGi0BmL_-mWGsn0qdRfbzag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
81:ac:e6:9d:71:58:ca:92:27:44:c3:38:ee:2b:e5:5a:d7:cb:
63:72:2c:e5:a8:1f:49:74:4f:d3:2f:3f:28:c2:74:90:6e:b0:
54:9b:fb:04:ef:8c:e3:bd:5b:2a:dc:d3:98:54:af:b3:4d:b9:
6c:eb:37:c0:74:08:f9:81:5f:a7:8a:76:d0:c5:f6:2b:3d:99:
31:e8:16:1f:94:42:ad:79:2e:86:da:45:4c:d3:f2:5a:8c:9c:
f0:05:5e:3e:9b:28:df:6c:0a:d1:79:9c:10:03:59:2b:fb:18:
00:09:9a:f6:16:a5:25:3b:ba:3f:8a:17:af:d0:20:e8:f8:a0:
b3:41:0f:2d:de:33:63:6c:43:5c:57:b1:58:dc:22:5d:3a:cb:
5a:a1:f3:ea:c7:05:8d:5c:40:48:ce:04:1b:b8:38:d4:8e:b5:
aa:34:8b:4c:af:5e:19:f0:2b:f7:5c:44:7b:90:75:ec:7f:b5:
a1:15:a1:7a:f9:5a:c7:fe:ac:6d:c3:5e:67:5e:bd:58:d9:be:
aa:e4:5d:a1:ec:fd:e4:f6:13:77:41:08:04:4c:d1:b8:24:7f:
cf:d9:66:08:d7:ec:37:32:b7:07:91:a6:62:4b:f1:dc:a4:43:
05:79:87:5b:52:5e:db:9d:e3:7b:2b:5e:49:20:4c:36:17:16:
a0:08:ff:e7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZRrzypl8bnOIXjsEnNpvGbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE1MjExMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGM1YTU0MDY4YjQwNjYyZmZmYTY1ODZiMjdkMmE3NTE3ZGJjZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uDfk5vPCqeTXpbzGs994CNqvMiS
rMM2kqiSra+jW0xu4mLDvUwbE7eM+gU0wIhoPHmMtyh+uUARqgFMHXpIkpPMLXrK
OqI4madRfi25FtzWo6wRqGYE1pnLfDjJoE36wxSDUqgPmbzB+MVH2JRmN07zl6Cz
5e4w+GhgsiwIPEzsrcMfP7QBCk1paw0tMRJJkcEQn6ONDXdoAxk9vgSNxx/Qi3qd
XaKrTmtgX8KkhglKqDFomWYZaDdS4ugw4ucBKgKOvOfz9//8fQy5l8WumLFYKJRm
RZjPWxPU+ICvJeJpRqa6iHN9BmSivr3D+PTpsC7Xeow01tVRfk536VoE2QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGTFpUBotAZi//plhrJ9KnUX282oMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWk1XbFFHaTBCbUxfLW1XR3NuMHFkUmZiemFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAgazmnXFYypInRMM47ivlWtfL
Y3Is5agfSXRP0y8/KMJ0kG6wVJv7BO+M471bKtzTmFSvs025bOs3wHQI+YFfp4p2
0MX2Kz2ZMegWH5RCrXkuhtpFTNPyWoyc8AVePpso32wK0XmcEANZK/sYAAma9hal
JTu6P4oXr9Ag6Pigs0EPLd4zY2xDXFexWNwiXTrLWqHz6scFjVxASM4EG7g41I61
qjSLTK9eGfAr91xEe5B17H+1oRWhevlax/6sbcNeZ169WNm+quRdoez95PYTd0EI
BEzRuCR/z9lmCNfsNzK3B5GmYkvx3KRDBXmHW1Je253jeyteSSBMNhcWoAj/5w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:28 2025 by rpki-client