Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/zto4NeQB1_I3QORAJXQ-oNO5db0.roa
File: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (raw, json)
Hash identifier: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=
Subject key identifier: CE:DA:38:35:E4:01:D7:F2:37:40:E4:40:25:74:3E:A0:D3:B9:75:BD
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01941FFA70B5EBA18BBE45E837576F670BF7
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/zto4NeQB1_I3QORAJXQ-oNO5db0.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214083
IP address blocks: 2001:678:db4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:b5:eb:a1:8b:be:45:e8:37:57:6f:67:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceda3835e401d7f23740e44025743ea0d3b975bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:64:ff:b7:ee:84:91:a7:76:14:ce:49:de:
48:25:4a:6d:ac:a0:89:b0:c9:62:80:4c:5f:03:5a:
e6:40:93:77:f8:05:1d:7e:b4:08:c0:14:65:24:10:
49:5a:52:c3:fd:49:81:68:2b:1c:1a:12:ea:bd:34:
0c:b3:e9:73:fa:d2:57:f9:0d:03:0b:6e:fb:63:86:
39:86:41:67:0a:14:ef:dd:0d:54:d6:03:70:d1:2f:
2c:10:48:c9:47:76:3f:f6:9a:b7:10:db:52:63:82:
11:86:6b:dc:7d:81:27:87:95:60:37:81:e8:01:e6:
1e:75:9f:27:d8:6a:82:96:01:1b:e6:3a:54:d3:42:
32:ce:f0:97:0a:33:3e:34:1d:5c:96:59:86:7a:3c:
bd:ce:be:c7:bb:b7:4d:c4:62:a6:3a:63:85:a2:6e:
1c:e7:86:a7:f0:da:08:fc:df:af:22:f1:f9:c3:16:
48:05:be:bb:90:b6:ce:80:9e:ed:a2:9e:c7:96:bd:
5c:91:95:f2:45:ef:28:50:d6:d2:84:4b:03:22:86:
5a:e4:a2:d4:4f:42:19:bd:c8:4a:ab:28:a9:33:95:
94:8a:e9:4b:13:0a:cd:c5:92:d2:46:96:84:d3:75:
bc:0b:09:b3:3b:44:20:65:5b:47:24:77:37:ae:4a:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:38:35:E4:01:D7:F2:37:40:E4:40:25:74:3E:A0:D3:B9:75:BD
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/zto4NeQB1_I3QORAJXQ-oNO5db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:db4::/48
Signature Algorithm: sha256WithRSAEncryption
e4:dc:f3:d3:e6:74:13:f0:f9:b4:c8:a7:5f:da:f1:12:bc:91:
da:e5:0c:ea:a7:56:14:b8:4c:0e:d7:da:2e:30:a4:30:e2:ba:
13:d8:fb:90:b4:02:52:b2:52:ff:d4:9c:07:fd:63:de:64:9e:
a2:b2:14:4c:aa:66:86:74:e6:82:b5:71:ee:13:ba:b7:58:49:
52:72:d7:c6:46:68:71:1b:9e:e8:6b:e8:db:a4:47:1f:64:86:
c4:f6:08:7c:c9:ef:ab:6d:5f:9a:74:53:ca:b4:a6:f9:6c:30:
bb:87:ed:dc:09:80:69:09:30:3c:33:7c:d3:74:a8:00:d5:29:
96:86:b9:7f:aa:33:02:04:4b:f7:55:5e:b7:75:bf:88:ba:ba:
a9:0a:46:9e:64:dc:e1:8b:24:de:23:a9:97:e8:4a:2d:80:26:
99:84:32:8b:78:0e:59:f7:40:b3:20:06:18:10:44:0e:09:53:
fe:3c:ea:c6:99:c3:96:51:d8:11:2c:09:4e:5c:f2:b5:2b:c0:
9e:66:b4:66:2a:1b:59:38:11:e6:10:a3:e5:41:0a:09:e7:cb:
6a:fa:17:f6:ee:29:23:20:96:aa:c2:27:3d:fc:90:81:1a:5b:
72:ae:dd:92:69:ab:d9:f4:e7:d7:1b:fe:87:0e:39:6e:2a:c9:
40:8d:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:30 2025 by rpki-client