Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa
File: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (raw, json)
Hash identifier: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=
Subject key identifier: CE:51:F5:62:93:01:9C:D6:67:36:D1:61:80:1D:C7:D1:00:E4:1A:C6
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019423D7732EF18163D23BD245E2D8B22FC9
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214759
IP address blocks: 2001:67c:2c1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:73:2e:f1:81:63:d2:3b:d2:45:e2:d8:b2:2f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce51f56293019cd66736d161801dc7d100e41ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:20:e9:4d:ff:a0:66:b4:9d:fb:a1:cc:e6:
43:b6:2e:b5:f3:44:58:39:17:a5:82:3c:0b:04:37:
2b:48:47:f3:a0:74:f6:2e:6d:85:57:69:22:37:14:
8f:a2:88:08:46:0f:4a:83:05:f2:3e:fa:b9:bc:ed:
00:12:93:a1:92:03:b0:79:b2:6a:65:20:e6:a1:43:
7a:4b:2c:51:11:b0:d5:b9:90:2f:04:64:58:34:b7:
0a:3b:24:14:1d:92:fb:a6:c3:a9:7c:31:b0:9c:6a:
2d:fa:d9:e0:ae:2a:f3:c8:f6:49:6d:cf:41:8f:52:
93:02:e7:84:ca:65:ed:f1:10:ac:46:5d:9a:f7:cc:
7b:06:3f:a3:71:49:51:a0:cb:6d:76:7a:79:72:3c:
3c:52:5c:ae:9a:9f:a3:d0:62:a6:2d:18:0e:1d:a8:
57:05:8c:50:e3:63:b8:56:45:15:9d:7b:49:2f:68:
b4:4f:79:4c:7f:f6:22:d9:b4:a9:37:07:56:5d:22:
4d:ce:5e:46:5f:45:f5:c6:46:c5:07:90:db:88:05:
ca:b9:a9:02:69:64:3a:2b:14:2e:45:67:c1:0b:aa:
b6:d9:e7:dd:61:2d:41:24:69:c1:c5:0f:a3:da:55:
97:50:2d:f3:9d:47:5e:6a:5b:ec:ee:1d:f3:63:45:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:F5:62:93:01:9C:D6:67:36:D1:61:80:1D:C7:D1:00:E4:1A:C6
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c1c::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ba:62:cd:a2:40:c5:35:86:98:c5:b2:13:93:63:07:88:7c:
d8:5d:78:67:42:f7:b4:3c:b1:90:e8:17:5d:f5:5e:41:42:08:
e0:d7:ba:a3:ed:a5:ed:88:e1:04:8e:30:5f:a3:2f:92:ca:4e:
c4:98:74:47:ac:a9:39:3b:a2:51:95:e0:f5:12:8c:1b:e2:fd:
2a:82:e7:91:38:07:2c:12:63:54:a9:3d:39:31:f9:73:dc:cd:
22:b7:80:64:8d:bc:ce:79:41:a7:08:01:24:9c:1e:a8:86:b8:
45:a5:f0:59:83:46:d1:fa:74:90:53:22:67:7f:c9:e6:69:e9:
16:a3:ab:ba:70:d6:62:7a:aa:9a:28:ef:b8:84:24:27:49:d5:
f3:49:d5:57:b9:07:70:c7:df:25:af:c5:00:96:8b:75:3b:e3:
1c:b4:42:79:85:24:5d:5e:84:d0:3e:0e:04:72:64:5a:93:51:
5a:cf:79:0b:f2:18:ce:2f:4b:04:a6:85:1f:2b:69:be:96:46:
bd:94:2e:a0:89:2f:31:3a:8b:83:11:31:f1:61:3b:95:7c:49:
52:97:5e:59:ac:a0:44:eb:00:f6:44:3f:1a:1e:8d:c4:e2:bc:
6b:ff:67:b8:d7:14:23:01:73:d7:49:c3:f3:e3:8c:31:a5:20:
54:2c:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:25 2025 by rpki-client