Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Zwu8LuILO5EUqvMts19uhM_gbv0.roa
File: Zwu8LuILO5EUqvMts19uhM_gbv0.roa (raw, json)
Hash identifier: cRTYUdN4lDHiXTpxw3+NknOwexORg3HO0Fzl1Q/prMk=
Subject key identifier: 67:0B:BC:2E:E2:0B:3B:91:14:AA:F3:2D:B3:5F:6E:84:CF:E0:6E:FD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195911C0E57B83FCDCA8A0011342C1F9658
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Zwu8LuILO5EUqvMts19uhM_gbv0.roa
Signing time: Thu 13 Mar 2025 20:04:49 +0000
ROA not before: Thu 13 Mar 2025 20:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:911b:e58e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:1c:0e:57:b8:3f:cd:ca:8a:00:11:34:2c:1f:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 20:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670bbc2ee20b3b9114aaf32db35f6e84cfe06efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:3c:2c:36:72:db:7d:1c:8c:c7:95:bc:ce:
0b:94:c7:bd:71:ee:4d:97:d0:96:49:e6:35:b5:33:
ac:40:65:27:73:f1:2b:79:0f:49:6d:53:80:c0:0d:
41:0a:b2:03:51:c1:87:3c:c3:ac:95:7a:91:7e:f4:
cb:86:31:8f:74:48:f9:75:47:05:60:6a:7a:a9:7d:
97:ae:9c:26:2d:da:d7:91:63:a5:4c:e5:0a:f2:35:
50:20:c0:6d:df:e1:42:82:59:7d:41:5b:67:08:40:
b7:82:ea:b6:26:2a:fa:93:e8:a7:f9:41:3b:17:9b:
e2:78:97:e2:7a:a9:47:0c:f5:07:ed:a6:2e:09:ae:
f4:88:39:23:30:16:b9:22:37:0d:0d:f3:cf:23:bf:
8e:67:7f:a0:77:c7:b4:2c:3c:81:8e:1d:ad:89:dd:
89:39:d6:d9:c6:70:40:6c:06:5d:32:94:19:8a:72:
c0:99:04:e4:34:c0:96:47:ec:a2:be:f8:19:87:5d:
70:b4:d1:a3:38:b2:86:bf:52:24:bb:85:bc:a2:17:
ee:6f:49:d7:d0:7e:0b:9d:77:af:9a:19:f8:42:fe:
28:f6:83:30:e4:da:d7:09:82:37:4b:b7:f8:06:17:
df:e6:e7:e9:d2:67:5c:d5:24:54:57:ba:c6:46:cb:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:BC:2E:E2:0B:3B:91:14:AA:F3:2D:B3:5F:6E:84:CF:E0:6E:FD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Zwu8LuILO5EUqvMts19uhM_gbv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:911b:e58e/128
Signature Algorithm: sha256WithRSAEncryption
5e:e1:f5:36:cf:ce:19:24:06:c8:4a:f5:de:e6:da:ee:d4:82:
ce:9c:19:7a:aa:83:bb:79:89:67:3f:c2:62:e9:bd:da:8c:d8:
2a:1b:f6:4d:f7:83:51:11:77:b7:fd:f8:fd:96:1b:11:c3:a1:
9e:00:ab:3b:39:27:3f:5e:c6:e1:86:d1:78:9b:be:ff:d3:7f:
70:17:17:a1:33:e4:16:17:1c:9d:45:57:72:8b:89:45:f8:74:
9b:a2:07:95:4e:5b:0f:27:4d:ae:16:55:40:d1:45:a8:12:fd:
f9:56:20:82:9f:fc:56:cd:f6:d4:37:50:d9:62:aa:9d:01:e3:
65:31:83:91:2c:f8:2f:db:3c:81:ea:1f:8d:e6:f6:c8:8f:c7:
27:a5:c9:44:b1:76:01:79:ef:99:3b:c7:64:1d:21:7d:01:63:
1e:0d:3c:24:1d:c5:af:f7:6c:c8:d2:04:ce:1c:fa:10:2d:a7:
b2:fb:9a:20:dd:af:7c:d2:32:72:36:40:67:7d:69:56:df:07:
65:7d:0c:7e:f9:be:3b:b6:dd:8e:3d:27:f0:ab:35:98:a3:ab:
15:75:bf:b7:8d:d1:49:3d:51:0b:c4:82:c1:b1:62:e9:f9:33:
28:80:a8:9f:bc:9f:c3:30:6c:b5:3b:75:8c:f3:22:d2:5e:d8:
67:69:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:58 2025 by rpki-client