Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/zej-kJR4FefqDTLDtYq0r_AsUbY.roa
File: zej-kJR4FefqDTLDtYq0r_AsUbY.roa (raw, json)
Hash identifier: nIbqfVaLjBMpmJgoXLdRJXDa6mUrtLF7n4hNbWacUKw=
Subject key identifier: CD:E8:FE:90:94:78:15:E7:EA:0D:32:C3:B5:8A:B4:AF:F0:2C:51:B6
Certificate issuer: /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial: 018572E81112F01D5FE97E1583CC5008A759
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/zej-kJR4FefqDTLDtYq0r_AsUbY.roa
Signing time: Mon 02 Jan 2023 14:34:49 +0000
ROA not before: Mon 02 Jan 2023 14:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:fc80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:11:12:f0:1d:5f:e9:7e:15:83:cc:50:08:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Validity
Not Before: Jan 2 14:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde8fe90947815e7ea0d32c3b58ab4aff02c51b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:a5:8e:ab:80:c6:ae:36:98:5a:a1:1b:c8:
b4:a8:2b:71:91:c1:80:30:28:a0:f8:e5:a9:48:75:
49:45:fc:b1:5b:2f:68:3d:3e:12:d7:c6:3a:e3:73:
00:86:b5:b2:10:e1:54:40:0a:c2:f2:9e:d6:d9:38:
eb:52:39:f1:d3:51:30:d6:39:10:8c:eb:8f:23:b1:
67:f4:92:18:3f:84:81:65:51:c0:c7:c9:02:be:1a:
7c:aa:8d:94:39:91:c3:c0:9a:f0:eb:c5:4d:d4:1e:
bf:ea:f8:7e:6e:64:9c:43:5c:b0:b5:7f:f5:ce:8f:
60:03:c1:9d:6e:98:f9:38:1b:63:be:c8:de:38:54:
5b:69:c9:9c:55:00:df:24:0e:b5:f4:0a:75:ee:2e:
20:42:7c:0c:87:72:86:5d:6b:9b:9e:46:4c:d9:e5:
42:4f:a8:16:05:5f:61:52:0f:47:fc:fb:ec:36:39:
cb:fb:dd:77:a9:40:a3:ec:d4:ec:53:a4:d9:60:64:
2d:ba:6b:7f:78:a6:55:e3:1c:1c:98:03:32:60:ac:
b8:72:78:51:dc:f4:7b:59:71:c7:2e:bb:ca:52:d2:
98:3b:92:4b:75:4d:e2:09:9b:3c:e7:55:54:2b:24:
5d:ca:d4:4d:cd:08:85:d7:00:8c:e3:3e:67:95:53:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:FE:90:94:78:15:E7:EA:0D:32:C3:B5:8A:B4:AF:F0:2C:51:B6
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/zej-kJR4FefqDTLDtYq0r_AsUbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
45:c3:26:e6:67:95:43:a3:b3:0f:8d:d9:3e:51:b9:4d:ba:d0:
c4:14:65:d5:62:74:c5:6f:84:5e:71:da:0c:c9:c4:04:96:15:
33:e1:df:28:72:4b:43:0a:4f:68:89:3f:69:22:50:5f:f7:38:
a4:35:a7:0b:43:84:9b:60:6a:8a:ca:71:c8:ae:17:d5:dd:c2:
61:d3:3a:f3:9b:4d:16:fe:4f:54:36:c2:ba:64:89:f6:78:6f:
4f:a9:b9:ed:e8:61:a7:b2:31:81:dd:f8:68:98:9d:89:31:9c:
7c:5e:bd:cc:6b:6b:3f:4a:75:c9:78:2a:53:bc:ab:c7:8d:d9:
8c:0e:00:97:12:dd:b2:cc:89:6c:f4:4e:b9:93:9e:05:bb:43:
34:bd:f6:7e:c8:fb:5f:51:62:7d:43:d7:b9:88:e4:2d:33:4b:
c1:9b:ce:3b:8a:de:f9:c3:5f:ac:c2:8f:dc:62:f8:3c:05:0a:
0f:ab:e7:67:43:96:47:eb:36:13:15:c7:89:de:04:64:ae:68:
03:26:fe:a1:fc:e4:2e:7e:1a:52:7c:32:48:c0:64:c8:d6:67:
7a:cb:62:3d:27:b1:c4:e9:2c:99:2d:ec:0d:78:e9:b5:cf:9e:
48:44:21:dd:30:b0:e8:8a:ea:ae:bc:95:26:14:0d:6c:3d:25:
90:79:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:45 2025 by rpki-client