Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/4ZYZW9-kqUG51-lrbNFwI3mTWKQ.roa
File: 4ZYZW9-kqUG51-lrbNFwI3mTWKQ.roa (raw, json)
Hash identifier: r700ezAcyuuOPxnXEw/JRolQZJzm5uSaZxPf9qWUP+M=
Subject key identifier: E1:96:19:5B:DF:A4:A9:41:B9:D7:E9:6B:6C:D1:70:23:79:93:58:A4
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 01890203E5189AD22FD4A672B8015FF9DE26
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/4ZYZW9-kqUG51-lrbNFwI3mTWKQ.roa
Signing time: Wed 28 Jun 2023 12:39:16 +0000
ROA not before: Wed 28 Jun 2023 12:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a0c:4184::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:03:e5:18:9a:d2:2f:d4:a6:72:b8:01:5f:f9:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jun 28 12:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e196195bdfa4a941b9d7e96b6cd17023799358a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:dd:6d:e8:77:d8:79:5c:2c:92:85:16:9f:
5f:ab:8f:39:c5:64:64:24:58:d0:c1:20:35:cb:df:
59:11:89:71:57:b5:39:9b:e4:bf:6d:f0:b6:b8:93:
da:88:10:3f:87:91:79:34:45:40:48:db:a5:cc:7a:
68:67:3d:35:7d:bd:77:26:6e:36:ed:80:a8:eb:12:
3a:f0:b5:59:a6:94:03:f1:5d:12:94:1f:67:73:30:
27:51:64:75:81:4c:73:14:47:d6:ec:24:50:6e:22:
7a:1a:88:20:56:b0:4d:8e:0e:45:f7:4c:10:93:00:
30:23:92:68:9e:77:32:5e:e7:67:23:38:b4:3b:fa:
7c:6b:82:a0:07:3a:1e:bd:67:9f:03:6e:1a:6e:61:
b7:05:c0:44:b6:63:ca:9c:43:87:49:f4:6f:3d:eb:
0b:b6:4d:58:6b:de:21:7f:22:d4:27:99:c0:4d:54:
63:b9:54:bb:51:98:1a:1a:55:b9:79:18:aa:00:19:
48:f7:00:02:39:0a:18:70:55:29:da:eb:4d:1c:e3:
db:a2:ad:42:58:e6:4b:b2:69:83:5d:be:2d:54:ef:
8c:7b:03:29:e9:c1:7a:03:bb:b2:b6:2f:e2:69:5a:
b1:7e:00:6b:fd:f5:3b:a8:60:87:83:15:79:38:8c:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:96:19:5B:DF:A4:A9:41:B9:D7:E9:6B:6C:D1:70:23:79:93:58:A4
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/4ZYZW9-kqUG51-lrbNFwI3mTWKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4184::/32
Signature Algorithm: sha256WithRSAEncryption
62:4c:1c:cf:df:9d:58:e4:4e:79:2d:67:80:9a:81:5a:91:f4:
70:c0:61:f4:a3:97:ad:dd:fe:8c:6c:b3:b4:4d:40:3b:be:49:
b3:8d:08:06:ce:f4:78:71:04:8b:09:72:45:28:c4:c4:33:87:
e2:f3:ac:dd:cf:71:65:99:7f:4a:d6:65:a0:16:3a:a6:98:c7:
45:06:33:53:3c:be:62:43:6c:9d:bf:e6:0e:fe:b6:88:70:a8:
0e:21:bb:50:c4:ba:e7:05:f9:d9:bc:a4:ea:b7:a4:f3:48:e6:
64:30:c3:e5:03:f1:d2:eb:1a:0d:51:1a:d2:62:ec:9f:cf:ed:
d0:fc:5b:16:37:39:e9:14:9b:a9:83:eb:b3:a8:11:2a:07:81:
94:5e:fe:67:db:9d:05:da:ab:2a:ea:e5:27:d9:5e:0b:30:5d:
33:1c:81:e8:82:04:ef:b7:11:a6:aa:d6:79:3b:96:9d:bd:12:
8a:bb:4b:5e:14:de:36:96:ce:48:56:78:78:db:c8:ff:3a:76:
e5:4b:8d:0e:af:d9:e8:c8:9a:ab:47:ea:b6:64:05:8f:0a:f6:
2a:6a:de:ad:60:eb:e4:78:f7:d8:b3:e0:9c:df:af:cb:5d:81:
41:17:b1:23:f0:34:e9:d6:c1:54:7a:84:fd:f4:c8:37:86:e3:
a2:78:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:21 2025 by rpki-client