Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/Ix4P_zSSw5Kfs7nW9cHRoqc-oYU.roa
File: Ix4P_zSSw5Kfs7nW9cHRoqc-oYU.roa (raw, json)
Hash identifier: mY7IzT7TZXcV4jXselfA5oYlrfU8nZn9s1tJybo1XAI=
Subject key identifier: 23:1E:0F:FF:34:92:C3:92:9F:B3:B9:D6:F5:C1:D1:A2:A7:3E:A1:85
Certificate issuer: /CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Certificate serial: 019407BD7BFB0B3B49D8932749A79DDFC5BB
Authority key identifier: CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/Ix4P_zSSw5Kfs7nW9cHRoqc-oYU.roa
Signing time: Fri 27 Dec 2024 10:50:46 +0000
ROA not before: Fri 27 Dec 2024 10:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3242
IP address blocks: 2a01:65c0::/32 maxlen: 32
2a01:65c0:100::/48 maxlen: 48
2a01:65c0:101::/48 maxlen: 48
2a01:65c0:200::/40 maxlen: 40
2a01:65c0:e00::/48 maxlen: 48
2a01:65c0:e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:bd:7b:fb:0b:3b:49:d8:93:27:49:a7:9d:df:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Validity
Not Before: Dec 27 10:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=231e0fff3492c3929fb3b9d6f5c1d1a2a73ea185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:4c:f1:54:58:09:7b:25:ee:99:7c:7d:c2:
35:64:a7:10:f9:28:4f:66:31:0d:b9:49:04:e1:00:
37:0d:1b:bd:af:bd:5d:49:ed:4c:61:4d:52:58:85:
ba:f6:b4:cb:78:61:b4:5b:c4:06:82:83:80:50:03:
ba:ae:9e:d6:1d:e7:3b:84:0e:16:95:0a:92:8d:72:
ab:35:9d:f5:3d:db:ec:49:32:6d:ed:41:f9:01:c3:
7e:94:f6:3d:7d:43:ac:d4:dd:aa:78:4e:e3:27:9d:
01:0b:da:2c:37:75:96:33:fd:e6:44:48:0b:77:27:
08:8b:bd:39:68:fb:7d:e1:c1:96:e7:78:5a:f4:cd:
a6:26:39:67:a3:13:5e:2f:3c:c6:fb:fb:d9:52:a0:
75:29:a8:94:d1:fc:95:4d:6f:2a:e0:fa:20:8a:52:
14:c4:9c:dc:11:d7:74:cd:5b:07:9b:12:9c:68:7d:
a6:72:6e:b8:e9:f6:94:5f:cd:8a:ef:b0:be:b4:a7:
07:a0:0d:b6:cf:ea:79:ad:3a:0b:e0:a2:85:84:c8:
51:9c:8c:f6:cb:f3:99:d0:25:98:e7:6a:88:6f:5e:
d2:8f:b8:4f:c6:28:73:a4:78:e8:cb:26:bb:bd:5d:
61:d7:94:79:8c:9b:52:84:d2:b0:eb:b8:f2:df:ea:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:0F:FF:34:92:C3:92:9F:B3:B9:D6:F5:C1:D1:A2:A7:3E:A1:85
X509v3 Authority Key Identifier:
keyid:CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/Ix4P_zSSw5Kfs7nW9cHRoqc-oYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
21:41:58:30:84:62:7f:41:ea:63:0a:e4:ad:58:f8:68:ee:76:
7c:a5:04:7a:83:65:5c:bf:78:6c:a7:eb:f3:7b:49:cf:0c:34:
f6:72:e3:b3:79:b4:5b:19:ff:d7:ba:04:ec:f3:fc:78:d7:3f:
01:c0:57:2c:4e:23:e6:3d:3b:36:b2:8b:4e:b9:1a:a7:e1:0a:
2c:28:9a:b0:3f:b7:39:f7:f4:37:34:3b:37:33:c8:7a:5b:36:
6c:7d:0a:f6:79:07:0a:09:16:6f:df:29:06:4c:a0:c8:23:a2:
00:48:be:72:a0:07:a9:f6:71:ac:bb:5a:eb:11:de:3f:29:3a:
a3:51:88:2c:ed:30:d2:8e:e8:a1:d5:96:cb:f9:e3:f5:fe:48:
65:d4:e4:f5:8e:4d:58:48:9d:22:8c:d7:8e:24:fb:be:fe:6c:
17:e8:ec:f6:7b:d1:e3:90:a8:b6:79:d8:a9:8e:04:cb:bd:59:
b1:c8:f8:93:87:7d:b6:1d:4c:a9:42:18:ab:ce:76:49:1a:21:
2b:90:7a:27:52:cc:c2:10:94:d9:0f:b3:44:18:df:4b:85:7f:
e3:e8:14:98:50:51:7a:ac:41:ff:9e:53:b1:e4:70:17:e2:ba:
a9:21:de:54:19:cf:dd:d1:29:46:bd:5b:26:c8:09:80:c8:d8:
b6:b9:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:14 2025 by rpki-client