Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/zyiCyDxnwMGQe-nsuAU18F43klk.roa
File: zyiCyDxnwMGQe-nsuAU18F43klk.roa (raw, json)
Hash identifier: swpE3Ii+DvjAFZtVPcCt/ep3TrzTDkizc5BfjYpOk9M=
Subject key identifier: CF:28:82:C8:3C:67:C0:C1:90:7B:E9:EC:B8:05:35:F0:5E:37:92:59
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018570306D6F2A94749C4AA029EA55C6281B
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/zyiCyDxnwMGQe-nsuAU18F43klk.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56434
IP address blocks: 2a0c:4181::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6d:6f:2a:94:74:9c:4a:a0:29:ea:55:c6:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf2882c83c67c0c1907be9ecb80535f05e379259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:9c:19:d3:98:23:de:b3:67:59:67:03:a7:
82:29:b2:99:50:09:b5:16:df:51:f0:f6:81:7b:bf:
19:3d:ac:b7:63:eb:5f:29:cf:32:34:94:fc:c5:b3:
53:bd:b4:a5:69:8f:fe:bf:85:02:fb:7b:0a:96:95:
30:1f:f3:98:26:d8:e6:e8:c9:b0:fb:f9:9e:c4:af:
0c:bd:b6:e2:ab:64:d6:98:dc:34:cd:ac:15:b6:5d:
3e:e0:19:8f:2c:1b:69:c7:2e:f3:2a:f3:15:c9:7e:
16:21:8d:db:e1:79:e1:92:6a:00:23:8d:c3:d8:e1:
eb:37:7f:54:d1:99:94:3b:08:02:1e:f0:c4:0c:49:
48:13:82:d1:e0:1f:02:d1:83:1f:31:42:23:06:5e:
f2:1b:db:d8:f7:f2:87:c4:4c:8e:74:ac:f1:22:5c:
1d:83:47:33:41:25:48:42:29:a5:1e:0a:df:ef:f8:
9c:73:ae:8c:d1:fc:ac:3f:01:86:22:ba:e0:e7:ea:
cc:a4:b6:66:a1:67:4e:0a:dc:e7:e9:b9:69:b5:49:
9d:a3:60:a7:b9:9f:fc:f1:9e:21:1d:df:1d:9b:f3:
22:e8:78:e4:a7:72:87:46:27:2d:14:53:cc:1a:c8:
9f:f4:70:b0:68:a5:80:f1:3b:02:fe:50:24:c6:4f:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:82:C8:3C:67:C0:C1:90:7B:E9:EC:B8:05:35:F0:5E:37:92:59
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/zyiCyDxnwMGQe-nsuAU18F43klk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4181::/32
Signature Algorithm: sha256WithRSAEncryption
75:86:53:d9:6d:f6:6e:ed:17:9e:7d:73:73:a2:9a:96:86:2c:
8e:47:41:88:65:ab:8a:e0:1d:ba:0d:9e:b1:cd:4d:f5:18:fc:
33:5a:e9:9d:2f:5a:53:6c:36:cc:01:64:f2:69:75:45:4e:da:
2e:b1:6d:e0:df:db:b3:bc:94:ea:ee:35:90:ce:fe:cf:6b:0e:
c4:59:0c:1d:c3:5e:1d:80:97:41:4c:eb:21:c5:71:2a:63:f0:
b1:39:45:52:b0:44:a6:0b:3a:a4:dd:6f:89:11:0c:91:27:5f:
95:f9:7f:60:79:03:3c:72:57:4d:be:ed:52:19:65:7c:54:b5:
25:99:c0:60:13:a4:98:b8:dd:30:21:2f:25:be:30:f4:74:a2:
5e:1d:87:5a:29:6d:42:88:94:82:b5:a2:a9:5b:0b:e5:03:45:
d9:a7:f7:ca:97:e8:8d:fe:56:0f:7d:45:15:20:f3:bb:97:be:
cb:83:a6:3a:e8:e9:4c:aa:93:d3:e2:c7:6e:42:0b:ff:84:cb:
78:26:57:a2:b1:eb:9c:8f:4f:2b:7c:6a:54:98:5d:0b:4b:b3:
c4:21:93:68:0a:c2:33:ef:5c:8b:24:2b:85:68:8a:a0:bb:69:
0b:bd:f8:14:19:1a:ed:48:5d:37:9e:40:6e:8d:6a:ad:43:e3:
c1:54:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:38 2025 by rpki-client