Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/zUVgbIXYeTGVKXvGEymmIIswak0.roa
File: zUVgbIXYeTGVKXvGEymmIIswak0.roa (raw, json)
Hash identifier: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=
Subject key identifier: CD:45:60:6C:85:D8:79:31:95:29:7B:C6:13:29:A6:20:8B:30:6A:4D
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 01941FFA4B1DC61F6BC79D64C5615CE53BEC
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/zUVgbIXYeTGVKXvGEymmIIswak0.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41046
IP address blocks: 2001:67c:2d90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:1d:c6:1f:6b:c7:9d:64:c5:61:5c:e5:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd45606c85d8793195297bc61329a6208b306a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:37:3d:ef:2d:2f:30:b5:c7:a7:26:ab:bc:
18:cf:bb:3b:0a:3e:11:0d:1d:ca:17:f6:75:e7:c2:
da:c2:5c:97:b8:cf:45:d4:38:f5:c4:c4:bd:10:1d:
55:49:35:99:ad:40:13:b3:91:44:16:11:6e:ef:f3:
e7:f0:68:ee:c9:78:a8:26:79:56:35:ad:15:70:dd:
b6:55:08:2d:1c:1a:6c:4b:49:26:8c:03:dd:9b:50:
39:34:df:89:af:ae:64:23:39:91:ed:80:69:36:b6:
78:bc:d8:58:a5:fe:20:71:e2:53:62:69:3d:01:e6:
53:1f:0c:66:41:e8:da:89:26:f3:6e:cd:0e:07:2b:
39:29:fc:f5:40:d6:12:3e:31:37:10:63:d3:19:a1:
c8:98:4a:96:99:30:10:d5:cf:d3:cb:bb:c1:91:eb:
fb:a1:2b:e9:5f:94:59:95:49:68:89:f4:07:ba:60:
a0:3e:17:50:72:98:03:e7:f9:d3:3b:2e:e7:bc:fd:
1c:68:5e:ad:75:cb:e9:5e:03:d6:1e:48:7f:96:28:
b1:29:5f:5a:72:f4:b2:30:98:d6:24:04:a9:dc:70:
69:be:9f:5d:66:e8:e9:3d:ff:c7:63:49:ff:73:0b:
6d:bf:aa:78:87:77:33:cf:d8:bf:c3:5b:a5:f4:7a:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:60:6C:85:D8:79:31:95:29:7B:C6:13:29:A6:20:8B:30:6A:4D
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/zUVgbIXYeTGVKXvGEymmIIswak0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d90::/48
Signature Algorithm: sha256WithRSAEncryption
75:9b:66:d2:ef:3a:df:61:30:6c:af:78:43:dc:e0:5c:9f:81:
7e:bc:36:37:0a:05:62:b9:d3:d4:13:53:7a:2c:45:2c:34:94:
08:dd:fa:90:a7:97:eb:da:96:b0:56:cf:dd:a3:46:29:25:7e:
e7:a1:5d:ce:c2:05:60:ab:cd:4a:80:d2:a5:54:69:f8:48:c0:
3c:82:4c:78:76:7d:b4:ad:8e:a9:ed:03:96:81:f7:3c:88:db:
20:a8:bc:f1:eb:85:47:f3:ce:35:8a:a9:1e:df:7e:b5:3e:69:
81:8d:d3:ed:f2:b6:0b:c5:90:54:a8:07:b8:c8:10:89:fc:84:
56:74:e2:b4:43:37:7b:72:05:be:94:2b:13:78:3a:7c:56:fa:
a3:fc:61:78:4f:4a:03:1b:4c:39:4c:5b:15:bd:9b:4c:31:99:
d6:cc:53:31:12:c2:c5:6a:10:e5:c4:69:71:9e:1c:1d:2a:70:
17:45:f5:f7:9e:92:24:6e:45:cd:dd:26:8e:6b:42:47:3c:17:
07:1d:07:41:25:d5:78:a1:e3:cc:07:bd:85:ab:73:ff:ab:03:
50:08:7f:68:87:8d:62:b8:8b:5b:37:f2:af:a0:b5:15:29:c8:
1f:3a:37:6d:5d:46:c2:ca:6a:92:d7:9f:dd:bf:0e:78:6c:cd:
ee:d9:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:20 2025 by rpki-client