Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa
File: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (raw, json)
Hash identifier: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=
Subject key identifier: CC:56:51:0C:B6:0B:D1:FC:F4:4E:BF:4A:39:36:EF:B7:91:A2:D9:3F
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019427B3CF773015CF8BABD2286F74F805DC
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa
Signing time: Thu 02 Jan 2025 15:48:02 +0000
ROA not before: Thu 02 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197942
IP address blocks: 2001:678:ae4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:cf:77:30:15:cf:8b:ab:d2:28:6f:74:f8:05:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Jan 2 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc56510cb60bd1fcf44ebf4a3936efb791a2d93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:4c:7d:d9:7e:3e:0a:68:3a:9b:1a:51:a9:
99:3f:cc:c4:91:16:c9:b1:0e:06:7b:64:1a:43:76:
00:90:19:8c:f1:a4:c2:73:f2:a9:7e:b7:ba:43:c2:
98:a4:86:d5:c5:6c:c5:0d:0d:9f:9b:af:09:bd:69:
3a:3c:7c:08:36:f2:cc:93:6d:fb:3e:be:23:09:a1:
f3:b9:55:ac:2b:82:46:cf:73:08:ff:04:da:5d:10:
e8:00:4a:cb:ba:51:96:c0:e4:0f:56:cf:0b:80:95:
57:de:62:8d:c9:d2:cd:11:3d:e7:e3:47:1e:e8:4a:
f4:c9:de:80:3c:79:fa:d5:fc:07:09:08:0f:55:50:
bd:38:92:34:d6:77:bd:fc:6a:fe:40:1b:61:2c:89:
db:1b:65:c4:de:ac:36:f5:1d:f2:1e:13:1d:91:aa:
0a:00:00:68:7d:6d:91:ec:4c:17:f0:ea:c5:0b:42:
3f:78:9f:6a:61:cb:7d:16:a3:c7:c6:d5:b3:c4:b1:
59:c6:5a:c5:13:6b:6e:e8:92:80:4f:ca:d4:25:d6:
ab:a1:33:9f:a4:3e:96:3c:6b:20:59:d2:88:0d:dc:
a3:df:90:01:b9:e1:30:9b:14:64:a6:de:14:14:b2:
28:37:61:49:37:9b:5d:de:fb:a3:7d:b9:60:d9:d8:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:56:51:0C:B6:0B:D1:FC:F4:4E:BF:4A:39:36:EF:B7:91:A2:D9:3F
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ae4::/48
Signature Algorithm: sha256WithRSAEncryption
98:54:8a:c9:6d:eb:ea:7e:3b:6d:00:1e:a0:57:8d:bd:0c:4e:
e0:bc:94:fa:db:ee:11:46:a8:58:15:71:1b:9b:0d:58:a8:5f:
e1:f0:71:62:74:d3:2c:f8:fb:2d:7a:01:40:84:bd:20:be:38:
c8:3c:62:c0:54:ab:ba:85:ce:58:d9:b3:59:6d:f2:4f:da:0f:
94:9b:36:80:66:a2:92:29:14:e0:b9:0d:99:e0:1d:87:c3:12:
8f:a7:54:a4:de:c6:17:73:5b:7d:8d:e0:44:57:7e:01:48:74:
81:41:d9:e6:f9:d8:4d:83:18:19:6d:97:18:bf:cf:1a:ed:51:
87:d9:99:c3:49:5f:00:af:71:08:05:ec:08:c2:0e:66:54:3d:
4b:8d:cf:71:c2:92:cb:11:18:c7:39:51:ae:67:ea:f9:80:ff:
eb:d4:87:da:b8:31:84:15:e8:33:7d:3c:05:a7:db:e8:dd:88:
cb:82:f9:7d:2e:94:f5:88:8f:a8:58:97:82:6b:05:e9:24:06:
ac:67:49:be:5a:28:e5:eb:94:c2:e4:ad:bd:81:ee:d8:3d:f4:
60:ce:c6:4c:17:14:c3:10:66:83:68:80:85:be:18:9f:00:03:
1d:4a:23:5b:a8:10:cc:73:9e:de:ad:83:48:93:7b:04:44:87:
cf:65:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:48:41 2025 by rpki-client