Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/ZYhttRWwRR-QF8jloAZFKuhooqE.roa
File: ZYhttRWwRR-QF8jloAZFKuhooqE.roa (raw, json)
Hash identifier: eO0V42mhSgtEZOqn/NTkR+4pbvAmlZ4nSZ0JyynFqN4=
Subject key identifier: 65:88:6D:B5:15:B0:45:1F:90:17:C8:E5:A0:06:45:2A:E8:68:A2:A1
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 019421446F8DD7A9FF421BF99C80CC19D4EC
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/ZYhttRWwRR-QF8jloAZFKuhooqE.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207947
IP address blocks: 2001:67c:964::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6f:8d:d7:a9:ff:42:1b:f9:9c:80:cc:19:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65886db515b0451f9017c8e5a006452ae868a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:0b:55:c2:af:71:62:c0:9d:18:15:9b:49:
83:8c:56:5f:7f:67:1b:4a:6a:62:0a:95:d5:8b:d7:
a2:95:55:7d:02:a4:e5:d5:98:39:cd:74:bc:9e:30:
86:50:bb:80:65:88:11:b3:ef:2b:5b:17:d8:5c:d7:
60:e8:d2:69:e3:c1:28:19:89:03:f4:b3:c5:9c:a3:
b5:dc:9d:ce:1f:e3:0b:5a:3c:3a:72:a7:9f:4a:a2:
5f:5d:1c:49:be:3b:a5:5a:41:45:11:5c:d9:a4:c0:
e3:0f:99:c1:9d:3a:b0:19:7a:92:d3:bd:53:58:ce:
21:b8:a8:51:fe:5d:e2:f3:b5:fc:d8:d5:1c:62:4f:
9d:cf:5b:6b:4f:6b:5b:f4:13:e4:6c:3c:14:19:4f:
93:7e:25:bf:44:7a:5a:9a:8a:3b:94:94:17:64:d6:
11:53:11:35:60:87:a4:e3:05:a4:7a:60:26:77:c3:
ce:77:5b:a4:0a:94:00:e2:1e:ce:62:b6:ab:cc:7f:
90:57:e7:d4:10:af:bb:14:31:32:d7:d7:4a:f2:5d:
9f:f3:32:97:b8:eb:ab:1b:04:3c:85:f8:be:ce:9f:
a0:3f:04:cc:66:7b:d0:30:9d:25:8e:f2:25:59:2e:
c9:c2:54:94:f3:2d:0a:de:73:7a:71:21:f3:a9:13:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:6D:B5:15:B0:45:1F:90:17:C8:E5:A0:06:45:2A:E8:68:A2:A1
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/ZYhttRWwRR-QF8jloAZFKuhooqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:964::/48
Signature Algorithm: sha256WithRSAEncryption
3b:b1:b3:f2:22:6e:4a:49:8f:76:b7:6b:12:db:db:87:90:55:
8e:d8:5f:8f:cd:64:59:b8:47:2d:e6:be:af:cb:24:7a:cc:6a:
d7:74:25:ef:6e:83:66:96:26:d9:c9:ed:15:f1:00:7e:7b:f4:
8d:05:9b:4a:37:2e:6b:50:60:b1:98:8b:ef:b7:31:a3:c5:ae:
ab:ba:8f:41:64:09:f3:c7:1f:9a:77:11:9c:a6:f6:e6:9a:ad:
28:ff:a4:98:a5:05:60:e0:04:53:08:ff:07:28:6d:12:8d:41:
86:be:d8:33:e1:80:cf:98:7a:1b:98:52:d6:5a:bd:43:4b:04:
dd:78:11:13:e8:b6:5e:85:50:78:2b:78:a2:1b:04:30:0d:88:
ad:88:35:e5:f6:08:08:45:0b:64:1d:fd:31:e2:c0:e1:eb:33:
b2:cf:8d:b6:2e:07:c0:95:e5:d2:4c:1d:8c:d1:b0:95:91:00:
5f:a6:8f:57:61:ba:7a:e5:e5:85:b7:e3:e3:aa:a2:f5:95:0f:
d6:e6:d4:d3:48:8e:e7:5f:7a:f4:db:1a:79:70:11:8c:8a:8e:
fa:5d:07:f0:6e:4f:aa:d8:af:6d:9c:94:6c:a3:a6:d2:8c:04:
e3:7b:70:ea:d1:33:c5:a5:12:2b:64:2a:d6:f8:aa:33:3f:13:
5f:67:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:11 2025 by rpki-client