Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/zGn0AuXq4ghzrdrVUoHvTilcv8U.roa
File: zGn0AuXq4ghzrdrVUoHvTilcv8U.roa (raw, json)
Hash identifier: quB3gwoY09uSTIR6L5V4AMYqxKjwkWO4sqkvcRiycgE=
Subject key identifier: CC:69:F4:02:E5:EA:E2:08:73:AD:DA:D5:52:81:EF:4E:29:5C:BF:C5
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 225DB810
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/zGn0AuXq4ghzrdrVUoHvTilcv8U.roa
Signing time: Wed 11 May 2022 12:17:48 +0000
ROA not before: Wed 11 May 2022 12:17:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213324
IP address blocks: 2a07:3500:1a50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576567312 (0x225db810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 11 12:17:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc69f402e5eae20873addad55281ef4e295cbfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:91:b1:3b:10:62:f5:e8:a3:e4:43:95:f5:
d5:e9:6d:fe:fb:29:a0:90:83:a8:76:3a:c1:f8:45:
98:55:4f:48:bf:e5:f9:8d:c2:ab:6c:6a:3f:41:77:
91:23:16:8e:91:2f:02:af:14:87:1b:37:6f:37:6c:
08:c7:a0:2a:6a:90:b6:1a:9d:52:c4:d5:2b:69:b7:
49:ba:f1:1a:25:b9:d5:4f:11:be:80:6d:fe:24:13:
7c:10:0b:2d:2e:0a:9b:15:f0:2f:7e:3d:d4:39:19:
5e:1c:bc:77:f4:00:cd:c2:2b:b4:37:be:98:25:df:
6a:75:01:a5:04:72:e7:85:25:29:66:47:ad:03:5d:
ab:66:f4:03:f0:74:fb:b4:4d:e9:4e:d7:1a:ba:4c:
15:3b:54:29:84:08:fd:7b:86:04:4c:7c:ea:5a:28:
2c:62:85:b2:c5:c2:b1:10:43:f3:8d:1e:b1:fe:bc:
4a:32:9b:d7:e3:72:3a:f7:56:26:7b:3c:56:3e:dd:
e2:24:7a:8f:75:fe:ce:93:00:ac:28:10:37:fd:3b:
17:59:c7:10:24:30:bc:90:94:63:d3:ab:ed:ee:92:
81:8f:dd:ce:b1:9d:77:f4:fb:87:74:a8:55:d0:5f:
23:20:fc:f0:fd:e3:d7:fa:6c:5d:3d:bc:33:25:87:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:F4:02:E5:EA:E2:08:73:AD:DA:D5:52:81:EF:4E:29:5C:BF:C5
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/zGn0AuXq4ghzrdrVUoHvTilcv8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1a50::/48
Signature Algorithm: sha256WithRSAEncryption
be:47:3e:07:76:a8:33:37:b0:c3:6a:8d:c9:96:ff:90:42:d3:
8b:c7:0a:c2:70:11:d9:dc:e0:29:85:17:3b:5c:df:5d:d3:fa:
9e:52:32:84:0f:11:8c:89:f8:53:3d:38:3a:84:54:e9:88:99:
79:c0:4a:4f:51:0d:5e:db:81:fc:eb:b0:27:17:b2:77:b3:10:
52:77:0b:a2:70:da:b1:92:0c:8a:e4:2f:8d:38:2e:93:04:1c:
b7:41:88:50:e7:cd:4b:ab:85:9c:5b:de:86:21:93:06:ff:03:
ed:ca:fd:a1:c2:24:34:31:a9:6e:71:21:11:e0:c5:c9:13:d7:
32:3e:e6:59:1e:57:30:0b:2b:68:4e:6e:18:ee:71:8a:d0:3f:
53:dc:dc:ec:60:e8:7b:29:87:f4:dc:1d:d5:ba:c9:89:c8:09:
0c:05:1a:6b:59:96:a0:c5:39:66:82:52:c7:74:a7:be:47:49:
c9:f4:57:ab:60:b8:fb:a5:6c:5d:b7:13:54:b7:7d:e5:07:b8:
83:0c:f1:1e:b7:bd:87:4b:82:e5:2c:76:b3:89:cf:77:78:9d:
ce:41:64:ad:b1:53:39:6a:6d:8a:07:2f:c2:f6:31:bb:6e:5f:
ea:05:e4:0a:64:90:fa:d4:2d:a7:cb:f5:57:ef:fe:b4:dd:3c:
ff:5d:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:58 2025 by rpki-client