Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/pzp2YbmxKGY3emuRRda4ms43xXo.roa
File: pzp2YbmxKGY3emuRRda4ms43xXo.roa (raw, json)
Hash identifier: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=
Subject key identifier: A7:3A:76:61:B9:B1:28:66:37:7A:6B:91:45:D6:B8:9A:CE:37:C5:7A
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 0194282715ADE5978DC73446C2AA1AD03F18
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/pzp2YbmxKGY3emuRRda4ms43xXo.roa
Signing time: Thu 02 Jan 2025 17:53:57 +0000
ROA not before: Thu 02 Jan 2025 17:53:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137509
IP address blocks: 2a0e:46c4:2c20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:15:ad:e5:97:8d:c7:34:46:c2:aa:1a:d0:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73a7661b9b12866377a6b9145d6b89ace37c57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:68:77:7c:8f:af:a5:03:a0:85:c4:2e:11:
e1:c7:4a:0a:2d:3c:23:de:65:4a:49:b0:1f:5a:30:
36:f8:98:40:cc:8a:39:45:cc:32:be:dd:ab:97:12:
d2:c0:fb:d5:95:a1:69:33:f9:6a:d1:8d:36:38:1e:
2a:57:a9:4a:f0:ae:3a:24:fb:42:35:e4:b7:de:82:
3c:bf:bc:61:fc:f7:46:a4:49:88:66:67:a2:90:a4:
80:3c:fd:d7:e3:31:4a:39:ca:51:7c:35:9f:39:01:
7e:e9:ee:1c:9e:b4:78:ac:a1:f3:a7:9e:6b:74:76:
8f:38:b5:f0:aa:5f:74:2d:d3:6b:cc:0f:6e:69:4c:
b9:22:39:80:49:11:02:1d:3f:db:8e:86:7d:f7:92:
7d:76:29:7b:f1:d0:1a:7f:12:4e:2b:8d:1f:61:7b:
e3:92:19:02:3d:e9:35:6b:f5:4b:2b:20:e3:4d:a3:
a4:42:66:e0:7a:39:82:7d:a4:c4:93:47:82:a8:08:
93:52:b4:72:e0:58:0a:bf:95:05:d3:d6:13:63:98:
3d:dd:e6:61:90:69:bb:0f:a5:dc:70:f4:34:4c:24:
df:a3:d6:4b:dd:1a:00:c2:ed:86:6e:ff:66:6b:2a:
d0:aa:b5:49:5c:45:ab:5e:c1:06:06:9d:5b:c6:7d:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:76:61:B9:B1:28:66:37:7A:6B:91:45:D6:B8:9A:CE:37:C5:7A
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/pzp2YbmxKGY3emuRRda4ms43xXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c20::/44
Signature Algorithm: sha256WithRSAEncryption
03:a8:af:cd:64:c8:7b:2d:a5:1e:06:dc:09:fd:c0:07:7a:7f:
b6:d2:13:93:a3:4f:64:e4:1e:59:00:a1:54:c2:a8:d0:7d:50:
76:28:9a:73:42:60:03:1c:79:b2:85:00:92:97:3d:bf:a2:10:
56:c8:50:8e:bd:ad:74:33:a0:6e:43:3f:b0:85:38:84:e6:37:
75:8a:c0:a9:d2:66:40:aa:8d:22:54:6a:2b:03:1d:31:b1:47:
92:5d:97:d0:69:3f:6d:e0:10:7c:26:18:2e:f8:4a:a9:89:6e:
7a:e8:79:20:7d:71:ab:e7:c9:87:b6:22:f1:3b:e7:ae:7d:25:
14:6b:33:02:86:b5:17:50:b8:61:03:81:fe:a2:6b:24:ca:1b:
95:87:e0:1f:d1:6c:1f:79:d3:bf:f3:f3:0b:11:f1:e5:74:dc:
bb:9e:82:a3:6c:f5:2b:b6:99:6a:ab:de:cf:e2:f2:b0:0d:fe:
0b:04:b5:32:9a:49:5c:6b:1d:36:08:a9:c9:f9:fe:e7:6d:06:
44:89:94:6e:32:d9:d0:f0:74:a0:62:61:1b:62:5b:7c:ec:5c:
93:04:cb:c8:88:d6:db:ae:45:b5:fa:76:a7:e5:18:9f:26:d7:
dc:2d:ae:b2:f8:6d:cb:0d:37:4e:7e:ca:9c:42:91:4a:81:15:
9a:3b:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:15 2025 by rpki-client