Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/z9wFFZP_zA_tDeAiN8JtnO6v01o.roa
File: z9wFFZP_zA_tDeAiN8JtnO6v01o.roa (raw, json)
Hash identifier: i8cRhIUjXH5IXxi+AFlUMsquHQWq5em4btklWiJYWAQ=
Subject key identifier: CF:DC:05:15:93:FF:CC:0F:ED:0D:E0:22:37:C2:6D:9C:EE:AF:D3:5A
Certificate issuer: /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial: 01942143BE2512E5D2381847DB6483EA0B54
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/z9wFFZP_zA_tDeAiN8JtnO6v01o.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200056
IP address blocks: 2a13:79c7:1700::/40 maxlen: 48
2a13:79c7:17a0::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:be:25:12:e5:d2:38:18:47:db:64:83:ea:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfdc051593ffcc0fed0de02237c26d9ceeafd35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:da:23:dd:2b:91:5d:e6:c6:21:23:da:f2:
5a:2e:a9:dd:bc:17:39:c8:db:da:d3:2b:6d:7d:d8:
b9:15:cf:5a:4c:aa:f0:c4:e8:ad:eb:06:88:87:57:
0e:67:48:c4:5c:14:9a:c2:df:74:b3:62:7a:cb:b8:
fc:be:28:e0:da:87:d8:e5:b3:ff:00:49:fb:0c:4d:
8c:cc:0f:d5:4c:0f:70:ba:f8:06:86:18:07:ec:93:
a0:db:0a:75:a2:25:47:4f:5c:23:4e:bd:6c:24:81:
44:3d:a9:3d:71:11:ef:87:5d:52:49:5f:fe:ac:33:
37:fe:9a:4b:82:e7:1c:38:e8:98:4f:d3:b5:f6:9f:
57:ee:e7:51:60:d4:8c:6a:b8:1e:57:e1:55:3e:da:
1e:15:ef:c6:55:d3:2f:15:c3:fe:b4:f8:59:5d:c6:
d8:50:09:02:4f:06:ad:74:42:5d:16:4f:f9:54:59:
7f:20:d3:7c:0f:e0:cc:d4:34:ea:31:d3:f3:e4:d5:
1f:f1:6d:cf:c9:43:34:63:4d:55:34:77:f4:b8:df:
c2:40:8e:11:37:3c:11:62:e2:70:5e:3d:f5:fb:0d:
72:5c:78:87:33:54:ef:9d:29:80:bb:f3:b6:1a:d7:
32:8e:41:20:c9:81:1e:df:2b:7b:35:cc:f3:ab:d1:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:05:15:93:FF:CC:0F:ED:0D:E0:22:37:C2:6D:9C:EE:AF:D3:5A
X509v3 Authority Key Identifier:
keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/z9wFFZP_zA_tDeAiN8JtnO6v01o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:79c7:1700::/40
Signature Algorithm: sha256WithRSAEncryption
0c:ce:b3:fa:6b:80:10:d3:97:3b:4b:c2:6f:c7:36:b5:e8:cb:
c0:58:0c:46:58:74:6a:f4:bb:d2:27:21:fd:be:f5:c4:bc:8c:
02:32:9e:04:d4:49:04:f1:35:07:4f:fb:b9:c7:44:25:60:8d:
6d:8e:8b:0e:dd:0f:ff:df:f3:41:1e:0d:2e:f1:42:4f:8d:a6:
2f:d6:a3:c3:a2:86:10:2e:0e:86:a9:0c:3f:f3:4b:39:19:42:
06:88:b0:d8:85:6c:4f:c5:11:61:16:5f:c0:45:18:c0:f9:ff:
2f:81:b7:0e:b8:a7:b9:99:1a:67:1a:d1:f4:18:f8:41:46:61:
99:da:94:f3:15:ec:db:c2:40:b6:0e:6b:ff:b3:b1:e8:76:f4:
9a:b1:e0:45:f4:f4:54:36:ff:37:d1:d5:38:6b:52:ff:2a:d8:
3b:13:e5:e9:e7:35:3b:9d:4b:42:69:de:e6:8f:30:8f:60:de:
d9:a2:ef:08:f5:b2:6f:40:a6:b7:29:2c:0b:1c:80:5f:78:96:
cd:b7:93:f2:c8:5f:4f:66:e2:35:49:ca:77:16:b1:3a:56:02:
55:6e:e9:4f:2e:1a:7c:0a:91:e5:70:70:5d:bf:71:3b:d7:b0:
2d:e0:43:9a:18:e8:92:12:dc:c1:16:88:ae:26:7f:7e:01:2b:
05:0d:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:48:55 2025 by rpki-client