Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/zafrxblJXV6D1L6rsPVTYMWCIdw.roa
File: zafrxblJXV6D1L6rsPVTYMWCIdw.roa (raw, json)
Hash identifier: m5QqgrBPhPePJOk7E7AbMhIbo3HMXxRmuirRZuU61Ls=
Subject key identifier: CD:A7:EB:C5:B9:49:5D:5E:83:D4:BE:AB:B0:F5:53:60:C5:82:21:DC
Certificate issuer: /CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Certificate serial: 01939C0484519C3BE5A553FB010B08736689
Authority key identifier: 7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/zafrxblJXV6D1L6rsPVTYMWCIdw.roa
Signing time: Fri 06 Dec 2024 12:49:21 +0000
ROA not before: Fri 06 Dec 2024 12:49:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200567
IP address blocks: 2a0f:6dc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:04:84:51:9c:3b:e5:a5:53:fb:01:0b:08:73:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Validity
Not Before: Dec 6 12:49:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cda7ebc5b9495d5e83d4beabb0f55360c58221dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:c5:7a:e4:54:64:37:b4:fa:0f:9c:94:e2:
f2:7b:47:d5:6a:90:ea:ba:78:2f:bb:b3:34:24:3c:
47:73:0d:05:eb:8c:16:15:db:a3:2a:b0:9c:65:8f:
eb:02:b5:35:08:43:e3:0d:9e:f8:93:4a:98:84:a4:
57:f6:06:f1:30:3f:68:bb:cb:39:1e:ed:02:d8:00:
b1:ba:57:96:32:75:84:49:e8:55:4c:6a:a0:e4:48:
2a:f7:27:8d:02:69:a2:09:02:72:53:3b:86:33:90:
d3:e3:71:e7:c0:6e:ba:ed:dc:95:3e:60:99:1b:a7:
bc:d1:fc:18:ff:ee:cb:22:4a:5e:2f:a7:e4:0e:69:
89:5e:98:97:26:65:16:f7:b1:0d:be:1c:e8:2d:38:
48:a8:f8:60:93:ad:0c:e6:06:88:08:be:29:33:02:
85:73:60:09:0d:7a:fb:2c:8a:61:4a:72:36:4a:60:
af:53:00:83:2e:5f:c6:9b:1a:74:1d:dc:cb:7a:ec:
32:37:2f:54:b6:6a:7e:76:50:2e:7e:ab:07:84:6d:
62:bd:9b:92:b9:ec:93:6d:bd:47:f4:48:56:7a:09:
d5:8a:1d:d5:74:74:ab:bf:43:5c:fa:e2:6b:ae:0c:
0f:53:22:3f:d5:df:3b:8f:b4:7d:a7:29:0e:b0:e2:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:EB:C5:B9:49:5D:5E:83:D4:BE:AB:B0:F5:53:60:C5:82:21:DC
X509v3 Authority Key Identifier:
keyid:7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/zafrxblJXV6D1L6rsPVTYMWCIdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
02:62:12:71:7f:58:18:45:1c:89:23:7a:c7:4c:d1:e5:73:28:
bc:4a:84:11:c9:f0:23:15:45:53:40:c2:be:a0:28:e4:0f:6e:
43:bf:9d:b2:0b:68:5b:18:c2:03:00:d2:66:d8:cb:8c:20:85:
68:b2:92:34:d4:f0:31:30:6c:6d:bb:39:c6:16:dd:10:cd:f2:
b7:51:43:57:dc:7d:88:b8:29:f2:c2:61:c8:13:66:d9:c7:22:
5c:a9:ca:d6:48:8c:5e:22:04:d4:f5:77:bf:40:2e:45:c6:7a:
1f:14:90:e8:1c:a5:99:af:89:82:83:7e:72:d9:48:f8:de:d5:
42:7a:dc:45:24:26:d3:e5:e8:05:8b:45:02:dc:96:ed:c3:50:
ac:ef:f1:f4:3d:de:e5:82:7c:ce:6e:7d:64:94:2d:f4:e9:54:
8b:d3:1c:a7:e3:b1:00:ac:3d:a6:66:17:24:70:dc:b6:b1:bb:
3b:98:fb:76:34:72:d1:a9:5d:87:9e:3e:bd:e4:5d:d7:81:c8:
1f:a1:fd:eb:e0:66:5f:96:19:2e:fe:e4:ef:09:02:60:ee:02:
84:48:ab:e9:e1:38:54:67:4c:d4:79:0e:23:84:2a:a9:b0:f7:
29:23:6c:ed:ed:55:3b:a0:09:f2:98:84:4f:9b:f3:54:0d:98:
13:b9:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:37 2025 by rpki-client