Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZQuymNirMDsro4nllBwJuiVW8co.roa
File: ZQuymNirMDsro4nllBwJuiVW8co.roa (raw, json)
Hash identifier: paJZgEaqnZssSghsk7TNgosdiXv37TQimLdIikX415A=
Subject key identifier: 65:0B:B2:98:D8:AB:30:3B:2B:A3:89:E5:94:1C:09:BA:25:56:F1:CA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191CB842CC7F0B25CB1D0A55EABD87A8773
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZQuymNirMDsro4nllBwJuiVW8co.roa
Signing time: Sat 07 Sep 2024 08:05:22 +0000
ROA not before: Sat 07 Sep 2024 08:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:cb83:5da7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cb:84:2c:c7:f0:b2:5c:b1:d0:a5:5e:ab:d8:7a:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 7 08:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650bb298d8ab303b2ba389e5941c09ba2556f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:59:d1:f1:1a:93:11:be:65:1c:26:7c:a2:
9d:a4:3e:92:b1:71:fa:49:e5:77:ea:ed:d1:23:48:
ea:c7:e1:e1:90:6c:1e:fd:5f:bf:0b:cb:e8:58:9a:
21:42:89:c2:40:85:f4:34:67:5e:fc:bf:e8:7b:58:
e3:0a:b2:1c:2d:1e:ce:10:36:bb:4e:ee:5f:0d:58:
a6:89:65:95:6b:88:fc:d7:7c:50:6c:a2:3a:41:88:
99:1e:ac:d8:d3:ba:36:dd:00:74:87:81:84:c8:8e:
e3:b7:fe:cb:2d:21:54:a9:33:7f:44:a5:ff:b2:0f:
5e:f7:6e:35:5d:41:e2:21:3a:d5:e4:27:78:0a:b2:
92:cd:f0:92:70:59:0e:5c:c5:ab:90:0b:c0:90:f1:
24:f4:9f:01:93:62:84:f7:bd:72:6e:33:51:fe:75:
6d:39:a6:24:cc:06:aa:33:5c:53:c6:ad:cd:93:8b:
82:9d:8a:27:3a:77:2c:a2:dd:af:51:8d:6a:f6:c6:
39:b5:1e:98:31:e1:b8:12:f4:15:91:a6:93:b5:41:
62:c0:4a:b5:0a:ca:20:5f:98:b0:eb:99:9a:1c:92:
dd:22:e5:9b:19:c5:f7:aa:b0:b8:44:62:f6:78:a6:
d7:d9:2a:35:71:d3:3c:51:d5:12:0e:48:83:21:08:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:B2:98:D8:AB:30:3B:2B:A3:89:E5:94:1C:09:BA:25:56:F1:CA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZQuymNirMDsro4nllBwJuiVW8co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:cb83:5da7/128
Signature Algorithm: sha256WithRSAEncryption
83:e3:66:b4:ec:75:c9:3c:cc:4c:e0:96:dd:7d:0b:cd:e0:64:
e5:43:52:db:07:f8:b2:f1:62:6c:f6:80:28:ff:da:2a:d7:10:
fe:87:b3:48:63:ab:5c:f0:75:f3:a8:62:f4:05:d6:02:1f:9f:
b6:b0:52:74:ed:b2:c0:95:39:4e:89:ab:45:c4:67:ea:4b:1c:
79:35:47:aa:d4:3e:3e:48:bf:a8:fa:57:90:0d:e8:4f:8a:83:
76:33:79:f8:7b:fb:d8:43:29:00:15:5b:75:26:3b:2b:0d:b6:
db:41:c4:ef:48:ee:ea:8b:1c:5b:03:ce:db:9f:d3:ca:f9:60:
73:97:55:0a:e8:25:8d:be:a7:3b:6e:c3:24:f8:52:2e:4f:5a:
17:f6:14:20:4f:94:c2:95:09:f3:bd:bd:41:ea:d8:85:da:9b:
a0:9d:25:ea:cf:5f:88:4d:f6:65:30:8b:ba:a4:db:fa:21:c8:
a3:41:04:e3:f8:6d:0a:19:33:43:10:be:3e:4a:77:78:e2:78:
d3:d9:8e:4f:59:31:e8:f5:5c:b9:e1:70:1a:c7:f9:a1:70:2d:
2d:49:12:aa:d2:51:c0:b3:60:f2:f0:74:eb:15:e9:93:eb:85:
23:16:7a:5d:70:e8:ec:7f:c0:66:99:99:dd:dc:37:a9:91:5e:
d4:02:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:15 2025 by rpki-client