Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/nZHdV3WJYYopwUGJLwL5bZm3VpI.roa
File: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (raw, json)
Hash identifier: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=
Subject key identifier: 9D:91:DD:57:75:89:61:8A:29:C1:41:89:2F:02:F9:6D:99:B7:56:92
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8E0550F1B341105B716883F4EFF2
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/nZHdV3WJYYopwUGJLwL5bZm3VpI.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2486
IP address blocks: 2001:660:3005::/48 maxlen: 48
2001:660:3006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8e:05:50:f1:b3:41:10:5b:71:68:83:f4:ef:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d91dd577589618a29c141892f02f96d99b75692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:b8:46:55:04:56:d7:6d:54:1d:0e:d9:b7:
3c:f8:00:3d:17:0b:0c:16:35:82:ee:64:a3:cc:e4:
d9:e2:ee:96:09:5e:1e:d7:f8:ba:d4:a2:3d:27:63:
e9:bd:70:82:69:44:0e:e6:2e:de:0b:dc:36:75:e8:
6b:8c:e1:df:a5:da:cb:a9:5b:3d:24:a1:b8:9d:27:
1f:e4:b4:77:9e:a5:67:03:f8:ef:77:c6:61:07:c8:
b9:3f:07:3d:aa:21:1a:71:37:ab:88:f1:4e:40:a1:
42:a5:0b:d6:a3:a2:90:44:d9:87:65:6f:f4:48:db:
f7:af:72:ff:5b:9a:d1:cd:c7:e1:4a:09:5d:f1:4a:
f7:87:57:c3:95:c1:34:5f:23:de:97:bd:5c:08:cc:
76:70:6e:41:07:ba:bd:77:2a:39:d2:33:47:18:d8:
4a:73:4e:aa:1b:a0:24:3d:51:2c:54:5f:6e:2b:3e:
5f:d5:8a:1a:fd:17:73:e5:09:6f:d6:e2:d2:6b:f8:
8c:be:e4:9d:c4:64:71:3f:a0:b7:2a:3f:46:f2:7d:
53:43:3b:36:5c:38:c5:06:38:f2:b8:51:0e:be:b1:
d5:ea:d4:4a:4f:ea:93:68:6c:96:5e:33:a1:0c:36:
78:bb:17:67:9a:98:aa:c7:1c:1f:5d:d1:b2:21:35:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:DD:57:75:89:61:8A:29:C1:41:89:2F:02:F9:6D:99:B7:56:92
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/nZHdV3WJYYopwUGJLwL5bZm3VpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:660:3005::-2001:660:3006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3b:82:69:ee:4f:45:ed:8c:6f:59:4a:ff:70:33:70:e4:30:04:
03:65:b3:3a:37:a2:54:31:e7:2c:ce:71:f8:fc:78:4b:19:f8:
d5:1c:a7:08:b9:44:35:45:12:8f:2a:9d:54:d5:d1:86:26:b1:
fb:c9:27:9e:ee:ee:e3:7c:3f:93:e4:7e:20:cb:40:bf:49:8e:
e1:9f:b6:b9:b0:e8:9a:30:31:4f:4c:8e:1f:be:20:d4:29:89:
63:83:0e:c4:9a:41:a8:94:2a:4c:94:63:25:e3:ae:62:fd:bb:
c6:69:32:1b:d5:bc:15:68:23:cb:5c:89:1f:51:4d:d2:8a:eb:
36:45:1f:3b:5c:43:f0:2b:9a:a7:48:cc:28:78:4c:f1:04:bb:
23:53:25:92:8a:38:13:8d:26:9d:c5:76:a5:2b:59:4e:2f:b1:
5f:0a:2a:1c:fb:2c:f6:29:69:fc:9e:39:22:1d:d1:85:f8:17:
e8:fa:b7:c0:8f:11:43:77:e2:38:0c:78:25:46:e9:b5:22:00:
b1:a5:1e:90:78:7c:41:20:d9:2f:3e:11:0b:bb:18:2a:07:fc:
48:6c:c7:09:a0:f4:d4:22:3c:85:ca:ac:46:16:92:3e:32:f8:
4f:11:7b:57:6c:ac:1f:49:23:de:ab:d5:3d:3d:bb:30:88:f6:
9a:a8:34:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:46 2025 by rpki-client