Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/zbHf3SPKUQqKlSY2p0HB9p9XL90.roa
File: zbHf3SPKUQqKlSY2p0HB9p9XL90.roa (raw, json)
Hash identifier: csBeTbNKWq57qRnNo/tNdPyrIrtIdDZKmu8r42Yia8w=
Subject key identifier: CD:B1:DF:DD:23:CA:51:0A:8A:95:26:36:A7:41:C1:F6:9F:57:2F:DD
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 0194258F7473A5E579A3A32CCAAA950FED2A
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/zbHf3SPKUQqKlSY2p0HB9p9XL90.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199714
IP address blocks: 2a05:400::/29 maxlen: 29
2a05:400::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:74:73:a5:e5:79:a3:a3:2c:ca:aa:95:0f:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb1dfdd23ca510a8a952636a741c1f69f572fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:e9:2b:87:dd:11:30:c7:76:9f:93:c7:fa:
c4:b2:af:bc:af:35:aa:98:6a:a3:1c:f8:32:7f:33:
ff:1e:8f:d6:c7:0a:68:37:25:3c:db:6a:ca:f5:4e:
b1:b5:3e:bc:0f:cf:f9:39:c4:b9:35:de:30:92:92:
6c:0f:c0:7e:f1:17:ec:37:8f:36:54:74:30:f0:6c:
90:cd:d3:9c:4c:dc:78:69:ad:9a:c4:cd:26:32:b9:
d8:c8:2b:4d:c2:9c:bf:f6:9f:f2:32:63:48:1a:6a:
e2:d3:74:a3:be:50:ed:a3:a1:89:36:48:e9:f2:96:
5b:80:3f:3e:a6:5b:ef:ef:c1:06:dc:43:71:c3:ec:
87:18:89:ea:8e:9f:0b:42:cc:5f:11:5b:4c:17:e1:
50:82:1d:dd:9b:95:c9:9e:de:a2:d3:51:f6:fc:8c:
39:4c:86:e1:6c:7c:b7:40:f4:d4:b2:66:0e:30:77:
7a:f4:ec:7b:0d:4d:81:09:36:61:2c:6d:4e:04:b5:
23:4e:44:58:07:e0:3b:ae:84:0c:d5:d9:a5:35:6a:
aa:0f:3c:0e:a6:e5:16:d9:9f:a9:ee:4c:8a:8c:75:
2f:d6:12:95:ef:9b:88:5e:d5:38:09:e4:f0:00:26:
c1:36:ec:16:64:5e:e2:84:28:15:94:26:8a:67:88:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:DF:DD:23:CA:51:0A:8A:95:26:36:A7:41:C1:F6:9F:57:2F:DD
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/zbHf3SPKUQqKlSY2p0HB9p9XL90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:400::/29
Signature Algorithm: sha256WithRSAEncryption
c7:25:ba:8f:b8:52:5d:13:0d:49:78:23:a6:21:a6:d1:bc:a0:
14:e9:da:8d:25:cb:36:36:e6:83:40:3f:56:e3:5c:36:ee:15:
27:9b:b7:db:f0:5b:21:b5:a2:56:a6:d5:d5:23:ff:79:61:c9:
f4:a1:ba:5a:74:bb:38:c8:ad:0c:17:a1:74:af:5d:b8:b0:69:
21:71:25:b1:94:ba:d9:3e:95:2d:34:a6:cf:73:82:4b:b7:4b:
70:c8:bf:98:50:9d:90:53:f8:c2:ad:99:72:8b:78:a7:40:b7:
66:24:8d:49:48:b5:86:25:68:e7:8f:e9:b3:33:64:2d:ee:4f:
97:9e:87:5d:22:71:33:9a:86:3b:2e:63:7c:5e:63:a6:18:18:
21:d3:5d:99:80:d3:7f:82:0b:b5:eb:50:e2:6e:af:79:75:0e:
03:bc:fb:77:9b:6a:69:af:14:6c:c7:ab:14:7a:0d:8b:ae:48:
5c:29:23:8b:f4:f2:12:6e:e4:c2:65:60:82:b3:1f:96:5d:2c:
b4:ca:6d:8e:30:e0:ad:95:96:41:54:e2:4e:9c:42:b6:bb:37:
69:e1:e0:58:88:38:7d:68:c9:b7:43:ee:f8:d6:05:98:9f:9f:
cc:0c:62:c4:cb:b2:10:92:ae:8b:d8:c9:90:59:f5:f1:e0:05:
76:ba:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:38 2025 by rpki-client