Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2hz_zAH407yU8Hu0FOPyV4_ihqc.roa
File: 2hz_zAH407yU8Hu0FOPyV4_ihqc.roa (raw, json)
Hash identifier: wiA/Ge8ecAlORF2Ob22n3CnMM2eGT2SFFMYNUZ/GZZU=
Subject key identifier: DA:1C:FF:CC:01:F8:D3:BC:94:F0:7B:B4:14:E3:F2:57:8F:E2:86:A7
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0189B11D30A69A3F3F30450BBD6443C6DC57
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2hz_zAH407yU8Hu0FOPyV4_ihqc.roa
Signing time: Tue 01 Aug 2023 12:40:27 +0000
ROA not before: Tue 01 Aug 2023 12:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197433
IP address blocks: 2a0f:7803:ff10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:1d:30:a6:9a:3f:3f:30:45:0b:bd:64:43:c6:dc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 1 12:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da1cffcc01f8d3bc94f07bb414e3f2578fe286a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:bd:d1:7c:1e:34:c9:df:1f:9e:35:56:6d:
0b:82:ec:3a:b2:8d:6a:43:75:00:7b:18:a2:45:aa:
f7:c0:ac:8c:56:58:cf:6b:63:13:aa:c4:3b:27:a9:
45:62:d2:ea:ba:17:82:a0:33:a5:7a:4c:7d:36:bd:
62:cd:bf:05:4c:07:18:86:4a:46:c1:10:a9:3b:7f:
7e:df:17:52:4a:f5:1f:bb:7b:5c:02:64:34:35:93:
d4:0b:d0:a8:4a:a1:a2:55:22:82:cc:14:ec:82:33:
61:0c:f5:e6:f7:08:2c:4c:5b:53:71:d7:8e:f0:6f:
25:a4:fb:9a:e9:0a:31:77:dc:32:59:5e:ca:29:22:
46:c9:65:4a:2d:ea:3a:fd:b3:71:cd:77:bd:3b:02:
4b:d0:bf:bf:5e:5b:c2:f6:53:8b:88:13:c5:dc:97:
2a:50:03:3f:64:26:31:08:8c:00:2e:5c:ce:ef:a1:
0a:e6:1b:99:90:b9:2d:61:f0:97:cc:17:5a:12:c2:
dc:b4:f1:82:b9:c6:a3:6e:d1:f9:57:63:8f:d6:2f:
3e:e6:9e:fb:36:db:92:e7:d7:72:01:fc:1e:da:a2:
d9:d3:e8:45:cb:6f:51:d5:8f:a6:3e:62:9e:63:71:
75:f2:bd:29:ba:7d:c7:6c:94:58:49:dd:d0:94:3a:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:FF:CC:01:F8:D3:BC:94:F0:7B:B4:14:E3:F2:57:8F:E2:86:A7
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2hz_zAH407yU8Hu0FOPyV4_ihqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff10::/48
Signature Algorithm: sha256WithRSAEncryption
52:a3:11:a3:b8:72:a3:57:e9:85:f3:a4:a4:fc:3c:6c:4f:00:
c4:55:fc:a5:cb:8a:88:4b:23:75:85:66:53:da:58:25:ee:f2:
72:3e:25:af:6e:b8:b8:6d:75:38:64:d7:d4:63:36:40:6f:0d:
8c:b7:46:1a:ce:c0:87:32:8f:9b:35:bf:a3:b4:c6:88:34:93:
f3:ee:62:5d:35:8c:46:a3:4c:78:f2:82:48:39:39:dd:f9:a7:
e8:29:43:c1:5b:60:4d:69:db:7d:64:f2:e3:95:fc:8b:c2:3c:
da:5d:30:2e:57:e9:f9:49:44:27:d2:e5:92:f4:db:6d:b8:76:
a2:9d:ea:9b:8f:83:20:7d:a3:bd:dd:b2:1d:fa:fd:d1:c2:4b:
93:25:60:00:34:a0:ce:b6:22:3c:d7:2e:4f:fc:5c:ba:88:ff:
c2:88:04:72:69:8a:f7:75:7e:97:6d:4c:87:14:c6:40:21:d8:
fe:37:db:a6:93:9c:6a:7d:7e:5f:e7:87:07:0d:81:fb:d7:c8:
0d:ce:6f:dc:a0:17:34:b6:fc:1b:88:18:80:19:c2:8a:43:50:
c8:29:ae:64:b4:c7:e2:82:5a:05:0c:55:52:6f:c4:44:86:b6:
3d:30:d5:83:92:b3:fd:b6:e2:03:70:52:fa:90:59:3c:d0:41:
35:6c:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:23 2025 by rpki-client