Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/z-0CrEqUXAoUcisoviCwDteNUEU.roa
File: z-0CrEqUXAoUcisoviCwDteNUEU.roa (raw, json)
Hash identifier: lFkuxwfffEskjMEdfakNhlymEzyTB8krTfzuZVtheeQ=
Subject key identifier: CF:ED:02:AC:4A:94:5C:0A:14:72:2B:28:BE:20:B0:0E:D7:8D:50:45
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0195C8FF01E6B7DA076CFAC749BCD7013321
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/z-0CrEqUXAoUcisoviCwDteNUEU.roa
Signing time: Mon 24 Mar 2025 16:31:50 +0000
ROA not before: Mon 24 Mar 2025 16:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207781
IP address blocks: 2a09:e1c1:efc0::/44 maxlen: 48
2a09:e1c1:efc0::/48 maxlen: 48
2a09:e1c1:efc1::/48 maxlen: 48
2a09:e1c1:efc2::/48 maxlen: 48
2a09:e1c1:efc3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:ff:01:e6:b7:da:07:6c:fa:c7:49:bc:d7:01:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Mar 24 16:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfed02ac4a945c0a14722b28be20b00ed78d5045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:b8:11:68:1d:7b:1a:aa:b3:cc:34:f3:8d:
01:46:78:21:26:b4:b5:21:1d:d2:d4:51:c1:73:4d:
ec:a9:a3:3b:e2:ea:c5:38:16:42:8f:1d:30:5a:25:
08:16:24:b6:5d:df:1c:d8:60:af:3a:7e:37:16:d7:
31:5b:d6:83:67:4e:2a:65:78:0f:d6:6e:a7:bc:81:
69:10:9d:a7:ab:57:34:28:8d:30:88:9e:c0:bd:33:
dd:12:f0:2d:45:f5:47:42:76:97:1a:4b:3a:ec:78:
c9:08:0b:78:cf:c7:67:d9:60:66:ee:fc:2e:d8:79:
b3:a5:54:87:7a:29:4b:33:78:0d:da:85:38:6c:46:
97:9f:7b:cd:e2:da:22:1e:27:8d:e1:29:6b:0c:1a:
77:0a:1a:d1:89:05:2b:82:10:14:bd:c1:9c:10:75:
2a:ca:ab:17:55:fb:61:80:d7:ca:c7:8d:67:2c:1e:
4f:f0:09:3e:9c:b9:00:04:03:b0:7f:11:9e:44:8b:
25:c5:fb:c5:eb:16:98:e6:28:34:ca:a2:ac:dd:90:
1d:27:f8:9d:f3:34:bb:45:57:11:a0:4c:63:d3:c8:
91:6a:83:01:fd:5a:89:15:1c:6d:67:4a:ae:b0:bc:
09:22:b2:fa:5f:69:75:9f:79:d7:d1:62:c9:f8:f7:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:02:AC:4A:94:5C:0A:14:72:2B:28:BE:20:B0:0E:D7:8D:50:45
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/z-0CrEqUXAoUcisoviCwDteNUEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:efc0::/44
Signature Algorithm: sha256WithRSAEncryption
3e:37:71:02:19:e7:36:50:c4:ae:a8:a0:a8:f5:bc:bc:96:ed:
10:c8:03:2e:e7:59:a3:65:30:5c:d5:55:64:2d:31:1f:2b:c5:
e7:8e:0a:2b:23:c2:4c:78:a4:95:37:52:a9:d8:eb:99:a3:db:
7d:5d:35:18:f9:b3:c2:59:9c:70:f8:61:0b:f1:65:27:9f:b8:
73:89:b6:69:db:9a:36:a3:2c:10:d4:07:bf:1f:d5:4f:3c:fc:
0e:f7:df:2a:c0:35:86:6a:40:37:53:49:08:e0:36:d6:6d:47:
9f:b0:1b:f7:04:9d:53:eb:8b:0b:98:e2:e7:6e:e5:7b:73:e9:
b9:ed:b6:9f:8a:f4:a4:15:a4:e3:56:fe:09:f9:10:b1:07:c9:
71:04:02:f2:27:fb:a8:e3:8f:73:8b:5f:99:32:0a:e7:6c:a4:
8f:f1:40:c2:ca:98:cf:a0:e6:91:ba:10:f0:29:7e:42:00:f0:
7b:d9:c6:15:04:c7:45:2b:50:30:5b:53:27:eb:00:72:00:fb:
8c:0f:78:06:4e:4d:4e:fa:22:49:21:f0:2a:99:bb:70:04:57:
d0:9a:99:bb:5d:d2:52:4e:72:05:6d:23:3b:48:8e:37:82:84:
f4:60:a5:a0:7b:22:48:98:fb:8a:c0:1e:b5:1b:2d:fc:f5:f0:
55:0a:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:15 2025 by rpki-client