Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/zG9XxxQlqlxxRTrzJqj2XS3UnfA.roa
File: zG9XxxQlqlxxRTrzJqj2XS3UnfA.roa (raw, json)
Hash identifier: vYQppFTSQKtjIVYuEZ0gbRK43YX/Evix9UWCg+DCaXQ=
Subject key identifier: CC:6F:57:C7:14:25:AA:5C:71:45:3A:F3:26:A8:F6:5D:2D:D4:9D:F0
Certificate issuer: /CN=bb09489b611085b902f15b78e597ba914337acf5
Certificate serial: 0188337D06E6944E9772CC738E81130E7B6C
Authority key identifier: BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/zG9XxxQlqlxxRTrzJqj2XS3UnfA.roa
Signing time: Fri 19 May 2023 10:10:11 +0000
ROA not before: Fri 19 May 2023 10:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44286
IP address blocks: 2a02:2410::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:7d:06:e6:94:4e:97:72:cc:73:8e:81:13:0e:7b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb09489b611085b902f15b78e597ba914337acf5
Validity
Not Before: May 19 10:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc6f57c71425aa5c71453af326a8f65d2dd49df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:18:e2:ab:1d:3d:7c:d3:6e:cc:0f:41:5c:
3d:05:24:04:9d:c6:a7:2c:e2:23:53:be:23:aa:02:
33:f3:7e:24:00:bf:9a:4e:ae:e0:c2:91:96:8f:9a:
0f:af:2b:9a:26:65:83:25:78:e6:60:e6:6b:94:82:
0f:51:3d:f0:07:04:f7:9e:f3:53:a0:8d:ec:9b:a2:
71:d6:ad:db:a9:da:72:90:4e:b2:8c:d9:ca:67:55:
a5:ef:40:ba:91:8d:79:d6:e6:44:ab:8f:87:61:c3:
8d:30:ec:dc:e0:5e:53:18:30:ec:e0:ba:c9:d8:50:
3b:07:85:a0:06:d3:4a:e0:25:30:b3:e5:bc:64:39:
57:c7:fa:d5:ce:2f:84:97:4f:4e:22:16:79:e3:0e:
30:59:14:81:98:f9:87:48:7b:4b:18:9d:a4:87:24:
94:50:7e:0b:f8:2a:fe:5a:fc:17:95:ba:ba:cf:0d:
34:e1:d5:68:fc:4c:37:3e:b6:11:2a:6c:3e:5b:53:
ba:98:3b:a1:02:74:e1:19:15:6f:a8:97:ef:b3:53:
ab:23:be:fd:89:73:04:7e:97:c2:f9:92:e5:de:ec:
2d:6f:47:93:f7:ef:34:8c:0e:2a:cc:c9:77:ad:7b:
6f:9d:60:c5:84:5b:a4:45:dd:9b:80:53:43:f8:f2:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:57:C7:14:25:AA:5C:71:45:3A:F3:26:A8:F6:5D:2D:D4:9D:F0
X509v3 Authority Key Identifier:
keyid:BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/zG9XxxQlqlxxRTrzJqj2XS3UnfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2410::/32
Signature Algorithm: sha256WithRSAEncryption
0d:48:f5:3a:32:a5:bb:26:04:7c:e5:75:4e:19:af:32:77:c2:
fe:1a:71:63:ff:1f:94:82:9b:4b:2f:10:c4:ad:82:1a:78:8e:
c5:24:84:1d:ce:5a:74:7f:79:22:74:57:c1:88:30:e7:46:2e:
84:71:ae:0b:b7:c5:f3:44:f3:c4:16:a4:23:8c:8b:73:10:80:
9d:09:23:99:63:0d:16:69:c9:9e:b2:61:fe:3d:9a:48:0b:1f:
31:f9:d6:21:52:96:1d:b4:4a:aa:e8:3c:5a:9c:71:3d:2a:b4:
2e:1b:99:d9:a6:e3:45:4b:24:d1:d4:47:7e:73:46:fe:b4:29:
bc:71:ef:33:72:28:a6:79:d7:9d:57:29:64:88:fb:4c:6a:6d:
89:78:8a:da:2f:24:bc:6a:7e:ba:ae:ba:a0:b6:fd:f6:72:a3:
9b:53:11:b6:d5:a7:39:e8:f6:1d:c6:6a:e3:1a:76:61:78:a6:
a3:bb:75:86:64:27:f2:6a:1c:c2:02:ba:76:88:13:06:74:f0:
3b:2c:81:33:f1:a2:ca:97:2d:f7:51:32:71:12:d8:62:4e:1f:
0e:b0:43:be:7e:88:c9:0a:6b:65:1e:8b:f3:cc:cf:cb:29:52:
d9:02:c0:b5:ba:8c:15:f3:85:a2:50:2a:db:64:1f:bc:ee:17:
6f:1a:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:59 2025 by rpki-client