Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/zO99S-j_1FZSZc-d3wPOk_r9aws.roa
File: zO99S-j_1FZSZc-d3wPOk_r9aws.roa (raw, json)
Hash identifier: fbkA7GRWdBwzPVsGQcjMlHBtp/6gNaDm1Z08rE3xQtM=
Subject key identifier: CC:EF:7D:4B:E8:FF:D4:56:52:65:CF:9D:DF:03:CE:93:FA:FD:6B:0B
Certificate issuer: /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial: 019423D6B9ADB65E7D69791E9A4255B3D844
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/zO99S-j_1FZSZc-d3wPOk_r9aws.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57199
IP address blocks: 2a0b:cbc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b9:ad:b6:5e:7d:69:79:1e:9a:42:55:b3:d8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccef7d4be8ffd4565265cf9ddf03ce93fafd6b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:ca:c7:09:d5:92:51:dc:f0:d1:db:69:3f:
90:33:c5:94:45:54:db:00:f8:dc:d9:2d:c3:3e:22:
c0:49:63:b2:0f:c2:08:09:50:82:23:ef:33:bd:77:
eb:d9:8d:95:10:c2:c5:ea:90:e3:ad:9f:68:56:d2:
20:18:ef:49:23:c7:44:37:f7:52:95:c4:d7:a7:78:
8b:0d:8f:6a:ec:02:23:10:1d:0d:8a:18:a1:24:d2:
3b:8e:b9:14:97:09:a3:8c:0e:84:ab:dc:af:86:ab:
cd:0c:d7:d7:fd:3b:d0:3d:69:3f:cf:e1:7f:d5:ab:
06:83:db:e1:e0:f4:2f:f0:a8:ae:48:23:36:8b:f1:
32:2b:13:b6:69:6a:4a:e7:a2:12:23:04:93:3f:4c:
9a:6f:da:d7:83:48:13:a4:62:14:d5:79:00:59:0d:
a4:21:04:19:71:d0:33:92:dc:2e:06:83:e7:ce:b1:
65:bd:6a:67:80:63:46:37:99:08:72:6c:fb:60:ee:
bf:f8:37:22:b8:7f:6e:9f:ee:b0:db:2f:0a:78:14:
e4:fd:fc:d1:c5:bf:fc:2e:80:04:6f:87:14:19:f4:
c2:72:f3:bd:d6:a9:f5:70:23:ad:db:c7:a7:4d:22:
03:d3:4c:d6:2b:ed:0c:79:6b:7c:31:d8:bc:b4:8d:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:7D:4B:E8:FF:D4:56:52:65:CF:9D:DF:03:CE:93:FA:FD:6B:0B
X509v3 Authority Key Identifier:
keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/zO99S-j_1FZSZc-d3wPOk_r9aws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ba:61:06:ae:17:24:65:47:c0:7e:0e:35:0b:d3:37:43:08:
cf:5d:e1:2b:79:70:0d:a1:be:b0:c4:dd:7d:99:56:53:84:60:
28:20:c1:38:59:c0:ab:84:17:cb:8d:50:6a:ba:e7:a4:e6:58:
3c:9b:b4:6e:b6:47:9f:7f:87:b9:17:37:d8:0e:51:f8:30:93:
cd:05:e5:ea:86:02:18:cf:13:cd:92:dc:15:14:98:84:a8:df:
85:58:9d:78:3b:9c:0e:2d:76:c3:d8:a2:b2:91:9b:f2:06:8d:
3c:67:85:39:44:40:0c:b0:c5:f5:1b:bc:c8:d5:1d:c2:a0:22:
12:52:58:03:67:dd:aa:1f:2d:b0:06:63:07:fa:a8:fb:af:7d:
89:e0:cf:a4:b0:c2:cf:62:94:df:16:aa:7f:73:f2:c6:63:bb:
86:4f:ce:d3:79:48:79:18:41:eb:2d:22:49:23:ee:be:85:55:
5a:6e:84:92:3b:45:18:d2:8a:7e:b7:00:0b:1b:27:91:1c:49:
0d:54:d8:ca:c0:03:0a:f9:18:66:26:e3:8b:e5:6a:99:34:0e:
fb:65:ce:22:e1:0a:50:c7:7f:47:a5:bc:c3:3a:11:bc:56:35:
6c:da:d6:89:6d:ec:43:52:9b:4b:ec:52:43:87:7f:dc:57:35:
43:9a:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:53 2025 by rpki-client