Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZadkHcODzumZCbPPBl7e0hxCyxw.roa
File: ZadkHcODzumZCbPPBl7e0hxCyxw.roa (raw, json)
Hash identifier: bIiuPOuEI/oo1UeDnQhgl8RGjykemMblHCfUAzO2YKM=
Subject key identifier: 65:A7:64:1D:C3:83:CE:E9:99:09:B3:CF:06:5E:DE:D2:1C:42:CB:1C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019488C6F1918497310BA663FA16DB1372C2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZadkHcODzumZCbPPBl7e0hxCyxw.roa
Signing time: Tue 21 Jan 2025 12:12:06 +0000
ROA not before: Tue 21 Jan 2025 12:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:c6:f1:91:84:97:31:0b:a6:63:fa:16:db:13:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 21 12:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a7641dc383cee99909b3cf065eded21c42cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:da:e2:cd:d9:b3:d6:34:cd:67:21:72:e4:
8d:3d:88:a9:36:99:e2:cc:16:79:9b:0e:35:d4:69:
2c:f7:c7:fe:d4:28:6b:53:89:c3:e9:a3:80:79:c5:
22:40:1f:81:b9:e5:fc:02:52:d0:45:91:71:e3:2c:
3b:8b:64:a9:32:be:9c:42:c6:d0:b7:23:8a:f9:a5:
56:27:ca:d6:80:db:53:e6:8f:e5:6a:4f:5d:d4:86:
e1:4f:c3:d5:7f:bd:f0:95:af:70:4d:e9:92:31:74:
35:49:4f:e4:74:cf:7f:ec:39:c2:b2:4e:7b:d7:4f:
31:4f:f0:07:a0:ac:1b:77:48:96:c2:2e:bf:15:8d:
68:38:20:d3:f0:da:6d:01:e2:61:d7:cc:c1:96:81:
1f:1b:b5:ee:3d:fc:0e:12:90:34:2a:4e:c4:40:05:
30:10:c0:21:58:a2:ed:4f:94:08:47:60:bc:fa:da:
25:46:3f:19:bb:cf:ab:18:cc:6d:0a:0b:7c:53:5b:
84:18:ba:94:6b:09:d3:11:0c:55:d2:88:4a:d8:83:
93:51:a8:2e:7a:9f:60:b7:52:c2:60:5f:f9:8b:c6:
99:a4:28:4a:42:1c:f0:7d:47:6d:cf:ab:9d:d6:96:
5a:1b:73:aa:a8:b8:ab:12:ad:29:fc:57:75:25:d7:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:64:1D:C3:83:CE:E9:99:09:B3:CF:06:5E:DE:D2:1C:42:CB:1C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZadkHcODzumZCbPPBl7e0hxCyxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
3f:86:3e:6b:91:74:e3:d5:21:ed:bc:44:70:79:23:d5:dd:d8:
4f:52:49:d9:01:f9:bf:55:2c:ed:bf:4e:9a:2f:73:e2:15:73:
f5:4b:66:b5:43:2d:50:d4:95:9e:1c:2f:14:03:cf:2e:00:c9:
0c:d4:18:a4:5c:29:86:21:f5:d6:a5:40:34:67:fe:92:d6:35:
dd:ae:b9:82:de:a8:1c:d9:90:e1:f6:34:95:86:09:b8:52:9b:
69:01:02:e6:29:f9:51:fa:53:68:89:c7:cb:ee:46:db:ee:0d:
8c:35:54:a9:6c:2f:d6:33:04:c3:95:4e:ae:83:33:cd:e7:7c:
c9:cb:2d:e6:71:6c:a9:90:f4:a2:a3:6a:be:8a:3f:74:2f:42:
4f:22:a4:8c:8e:9e:34:5a:85:fe:a6:e6:e0:a0:04:ee:35:fc:
7e:76:b7:9b:5c:ce:5d:10:a3:87:03:64:e2:f8:89:df:48:41:
14:b9:41:bd:d8:30:49:ff:a3:0f:be:b7:b9:59:79:12:10:9f:
a5:26:c4:19:c8:13:0b:80:b4:32:f2:4f:47:69:e3:19:f6:11:
cc:f6:cb:28:e4:77:97:68:61:ff:bd:63:b4:69:d5:18:8c:01:
a6:5a:6c:1f:3b:8e:26:8e:f8:04:6c:27:35:70:00:b5:14:13:
1d:46:4e:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:02 2025 by rpki-client