Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/ZpHETbs_mb628Vvkity4w2NrOCU.roa
File: ZpHETbs_mb628Vvkity4w2NrOCU.roa (raw, json)
Hash identifier: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=
Subject key identifier: 66:91:C4:4D:BB:3F:99:BE:B6:F1:5B:E4:8A:DC:B8:C3:63:6B:38:25
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D63FCF7A7CDD792C01A8CD70E94A9D
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/ZpHETbs_mb628Vvkity4w2NrOCU.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211776
IP address blocks: 2a07:22c1:34::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3f:cf:7a:7c:dd:79:2c:01:a8:cd:70:e9:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6691c44dbb3f99beb6f15be48adcb8c3636b3825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:d9:03:90:92:19:91:6a:a2:21:30:fb:13:
02:69:73:51:b1:e9:46:65:7e:51:eb:7e:69:79:8a:
cc:31:6f:f4:70:93:67:f0:13:87:2c:20:f9:72:d8:
c7:0a:24:af:00:e7:c0:25:e2:33:3e:07:0d:f5:38:
c4:6b:1f:cd:79:08:11:dc:e5:db:cb:3f:20:26:58:
75:e7:6d:31:f7:a5:54:0f:2e:98:10:e9:bc:6b:24:
a3:b9:01:0d:26:78:e6:86:e8:31:9c:2c:b1:de:e5:
32:41:d8:a0:78:a0:2b:45:6d:e7:bc:73:a5:66:24:
b9:b6:a6:61:f7:cf:34:31:01:34:42:7f:cb:a1:77:
00:65:cc:5a:2d:3b:75:33:fd:6a:f9:52:bb:50:ad:
04:bf:40:07:63:71:b7:b9:ad:8f:f9:e3:16:1a:f6:
86:3a:97:9f:61:06:fc:85:b6:3a:b4:fb:a1:5c:da:
9a:b2:03:28:99:ec:4d:00:b0:d3:2f:8e:7e:22:5b:
b9:4d:91:6e:be:bb:77:07:91:90:83:6a:6b:ee:cc:
8c:ed:14:7d:87:a1:b5:d2:e0:49:4b:98:13:08:c3:
02:0b:1d:04:20:cb:4a:f4:be:65:dc:28:16:65:86:
d3:3e:84:b1:9f:38:f3:85:c3:b2:1d:a2:35:90:ec:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:91:C4:4D:BB:3F:99:BE:B6:F1:5B:E4:8A:DC:B8:C3:63:6B:38:25
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/ZpHETbs_mb628Vvkity4w2NrOCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:34::/48
Signature Algorithm: sha256WithRSAEncryption
70:04:b2:62:9d:08:f5:cb:c5:68:ad:b2:5c:41:1f:4c:d8:3e:
d8:b9:31:f9:c3:28:04:06:7a:70:b1:fa:50:33:36:68:43:fa:
f3:9c:ca:05:93:bc:c2:1c:26:a1:c4:38:55:2c:77:2f:c7:47:
7d:df:b4:97:79:26:35:ac:a0:f2:62:fd:df:63:15:68:3b:79:
0f:e2:fc:e4:b5:15:46:07:5d:9f:e3:d9:a5:fa:a3:83:dd:c1:
b0:6e:59:f5:61:bc:da:c3:9c:1a:c3:1a:bc:fe:b2:68:9f:21:
22:62:56:c0:e9:71:60:f2:8d:25:c9:4b:c1:e0:39:cd:30:88:
a8:c2:a6:2a:01:4e:ba:ad:01:ad:d8:c3:48:9c:a4:f7:c7:3e:
49:7b:a9:2f:55:2d:8f:c8:17:2e:a6:8d:d5:d8:da:22:57:63:
bf:ce:be:89:c6:34:8d:4f:2a:c6:49:65:6e:69:c7:b5:a8:4a:
ce:3f:42:4e:6e:9d:8d:12:0e:e8:b7:13:36:b4:01:4c:c9:80:
73:0f:f4:6e:af:68:ef:19:6e:06:6e:7e:02:32:a9:5f:ce:85:
19:48:a8:a5:d5:76:f4:17:5c:1f:bf:35:5a:08:82:0e:f1:b0:
70:12:a6:6b:6e:2e:fa:c0:09:c3:eb:d3:d6:99:ed:5b:cd:be:
88:e1:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:29 2025 by rpki-client