Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/zJWHWedCzMF6uDnk-dKwx5D_tzs.roa
File: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (raw, json)
Hash identifier: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=
Subject key identifier: CC:95:87:59:E7:42:CC:C1:7A:B8:39:E4:F9:D2:B0:C7:90:FF:B7:3B
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 019424B3EEAAD00C8A756FBC326C5A6AE2B6
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/zJWHWedCzMF6uDnk-dKwx5D_tzs.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:2ccc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:aa:d0:0c:8a:75:6f:bc:32:6c:5a:6a:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc958759e742ccc17ab839e4f9d2b0c790ffb73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:4a:98:c0:fb:bf:c6:e2:06:6c:6e:a0:eb:
fe:b7:62:4f:eb:16:2f:e3:f1:92:2b:57:ca:20:90:
8a:bb:30:68:1f:78:50:d8:7d:18:85:58:9f:91:4f:
b4:c2:3b:43:61:0d:26:db:cc:54:92:38:4f:7b:b5:
23:d7:c1:7e:50:ba:0b:a0:ce:fb:75:84:91:9f:3b:
7b:d0:3b:79:ff:35:a5:b2:c1:7c:3f:90:14:44:f5:
c6:91:aa:2e:c0:b4:ee:f0:19:2e:36:fc:ef:eb:85:
2e:f2:b6:f3:de:6a:c9:bd:b4:a3:90:78:d8:81:55:
40:13:72:c6:d3:56:83:3d:9c:70:9f:29:da:3e:8f:
83:c7:37:9d:ba:aa:38:4b:8c:84:98:32:3c:d5:f2:
ef:29:22:9c:75:27:3b:98:36:26:08:4a:76:39:e7:
c4:65:e7:cc:49:9f:0e:59:b4:a7:c5:9d:98:d3:f7:
4c:cb:9f:9f:0b:d9:f1:14:a9:02:d8:1e:c5:71:a7:
59:6e:f0:7a:ac:78:3a:e7:f5:49:e0:de:03:bc:f9:
0a:1a:55:c0:8f:b3:4e:58:37:15:9f:a3:e6:8d:a6:
84:ee:97:ee:40:cd:19:b4:a0:26:5f:e6:2a:53:a4:
0f:a5:a0:c1:85:fa:08:c2:7e:b7:7f:57:28:e3:b9:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:87:59:E7:42:CC:C1:7A:B8:39:E4:F9:D2:B0:C7:90:FF:B7:3B
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/zJWHWedCzMF6uDnk-dKwx5D_tzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
b0:94:f1:ae:a6:9c:54:42:d5:21:e3:b7:cb:66:10:38:47:1e:
2f:d8:ac:93:f0:51:61:20:0f:06:97:ee:c8:49:2c:e4:f7:1f:
ac:dc:36:d1:f6:c8:dc:54:88:c0:da:73:e6:64:95:f7:a5:56:
fe:1e:dd:18:75:9a:21:0c:66:3b:a9:e9:30:3a:c7:61:d7:61:
84:93:7d:d4:35:a8:d9:e6:2a:32:bc:e3:04:b0:ba:f9:ea:54:
22:32:31:db:49:74:90:1f:f3:9d:07:42:55:db:7e:e8:90:51:
44:5e:ce:4e:21:4d:93:df:e8:88:d5:ca:f9:d6:1c:e0:7d:62:
a6:1c:44:ea:77:24:a9:af:03:50:e0:68:0b:42:a6:07:fb:8f:
52:c9:1c:74:8c:c0:7e:cb:69:58:21:81:7f:68:ba:0c:9f:d5:
4f:f8:64:06:6e:12:12:45:c5:b7:08:d1:4d:fd:ee:f2:f6:26:
48:8a:60:7d:f1:fa:e8:04:9e:b4:f7:16:c6:c6:bc:49:a8:0d:
dc:ba:7f:08:4b:c4:11:0e:af:fd:29:2d:49:a2:ee:bb:ea:7e:
51:fb:21:fc:67:da:12:cc:8e:b9:93:67:14:28:c9:17:bf:fe:
e1:e9:74:f2:e8:3a:e8:5b:a6:0c:38:6a:e5:9b:44:61:7c:70:
22:c5:a5:bc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQks+6q0AyKdW+8MmxaauK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTZhYzI4Zjk1NGUxM2RjYjdkYjY5YmMyMjJiNzg1YjRk
NzVmMmMwHhcNMjUwMTAyMDE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzk1ODc1OWU3NDJjY2MxN2FiODM5ZTRmOWQyYjBjNzkwZmZiNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArExKmMD7v8biBmxuoOv+t2JP6xYv
4/GSK1fKIJCKuzBoH3hQ2H0YhVifkU+0wjtDYQ0m28xUkjhPe7Uj18F+ULoLoM77
dYSRnzt70Dt5/zWlssF8P5AURPXGkaouwLTu8BkuNvzv64Uu8rbz3mrJvbSjkHjY
gVVAE3LG01aDPZxwnynaPo+Dxzeduqo4S4yEmDI81fLvKSKcdSc7mDYmCEp2OefE
ZefMSZ8OWbSnxZ2Y0/dMy5+fC9nxFKkC2B7FcadZbvB6rHg65/VJ4N4DvPkKGlXA
j7NOWDcVn6PmjaaE7pfuQM0ZtKAmX+YqU6QPpaDBhfoIwn63f1co47mAUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMyVh1nnQszBerg55PnSsMeQ/7c7MB8GA1UdIwQY
MBaAFL3mrCj5VOE9y322m8Iit4W0118sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEt
Y2FlNmM3MjVkOTJmLzEvekpXSFdlZEN6TUY2dURuay1kS3d4NURfdHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEtY2FlNmM3MjVkOTJm
LzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCzM
MA0GCSqGSIb3DQEBCwUAA4IBAQCwlPGuppxUQtUh47fLZhA4Rx4v2KyT8FFhIA8G
l+7ISSzk9x+s3DbR9sjcVIjA2nPmZJX3pVb+Ht0YdZohDGY7qekwOsdh12GEk33U
NajZ5ioyvOMEsLr56lQiMjHbSXSQH/OdB0JV237okFFEXs5OIU2T3+iI1cr51hzg
fWKmHETqdySprwNQ4GgLQqYH+49SyRx0jMB+y2lYIYF/aLoMn9VP+GQGbhISRcW3
CNFN/e7y9iZIimB98froBJ609xbGxrxJqA3cun8IS8QRDq/9KS1Jou676n5R+yH8
Z9oSzI65k2cUKMkXv/7h6XTy6DroW6YMOGrlm0RhfHAixaW8
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:25 2025 by rpki-client