Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/ZgXd4-iRm-6EfiiRbptDsH9YV00.roa
File: ZgXd4-iRm-6EfiiRbptDsH9YV00.roa (raw, json)
Hash identifier: IdlINd8LGSye4C+J8uo8raNO879fzxKpQdAtnUj3Zr0=
Subject key identifier: 66:05:DD:E3:E8:91:9B:EE:84:7E:28:91:6E:9B:43:B0:7F:58:57:4D
Certificate issuer: /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial: 019425FC39776AEC6FA50892932F5E481F1A
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/ZgXd4-iRm-6EfiiRbptDsH9YV00.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35332
IP address blocks: 2001:678:5b4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:39:77:6a:ec:6f:a5:08:92:93:2f:5e:48:1f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6605dde3e8919bee847e28916e9b43b07f58574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:01:51:8e:cb:a4:cf:de:2d:0e:b3:75:19:
b8:af:21:6b:ca:ff:64:c6:82:5d:e1:eb:95:9c:e5:
dc:b8:8e:c3:1c:62:3f:8b:d1:84:53:1f:de:8e:29:
fb:c9:78:cc:38:1b:ee:b7:61:e7:27:3e:1d:a2:7f:
c7:42:38:26:68:49:88:a8:16:67:0c:0b:29:6f:12:
67:bf:5e:03:73:78:19:9b:fe:07:6d:3d:51:aa:62:
5b:40:7d:d7:02:cf:10:80:1b:f4:e6:a4:d7:b3:fd:
29:56:a6:65:36:9f:b4:74:af:40:52:ae:4a:4d:ca:
bb:69:0e:c5:dc:f0:76:89:c0:05:c7:19:83:cd:53:
f9:ff:90:f2:1d:26:cc:99:52:f6:91:16:5a:52:ae:
dd:e3:00:b6:7e:e8:91:32:de:39:01:ea:dc:97:dd:
fc:f2:53:e7:d9:7c:b3:31:f0:de:9e:7b:5a:69:d7:
ab:fc:8e:b6:c4:8b:26:88:d5:07:09:3d:b3:28:46:
46:75:cf:74:3f:d4:a3:3c:05:65:3f:e6:a2:11:48:
0f:96:21:41:dc:4c:aa:91:a8:8b:33:89:3c:3c:ac:
26:3f:d3:77:bc:57:c4:60:15:ef:13:c1:3b:20:35:
4b:79:30:28:e9:45:53:bf:05:b3:91:31:c1:56:16:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:05:DD:E3:E8:91:9B:EE:84:7E:28:91:6E:9B:43:B0:7F:58:57:4D
X509v3 Authority Key Identifier:
keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/ZgXd4-iRm-6EfiiRbptDsH9YV00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5b4::/48
Signature Algorithm: sha256WithRSAEncryption
0b:f7:17:2e:38:a0:77:3d:51:48:80:83:48:1d:13:e0:5b:2b:
09:60:91:e0:b0:d5:69:5d:e4:83:bd:4f:23:cb:bf:3a:b8:41:
c5:79:fd:5d:e4:8d:7b:9b:af:93:0b:fd:26:c7:1b:e3:fe:4f:
70:63:73:f2:e1:c6:5d:65:a5:96:9f:1d:6e:b3:21:85:ad:74:
1e:22:09:66:b3:e0:bd:ca:2e:c3:a4:d1:3a:52:d3:64:6d:f5:
84:c4:33:82:20:96:e6:10:14:52:8a:55:8d:5c:67:b7:6c:eb:
1d:eb:99:b1:03:0f:48:62:ca:11:ad:8b:6a:06:36:2b:33:e8:
73:be:7d:a1:b6:71:de:21:65:c2:45:e2:e8:eb:f1:a4:36:7a:
e8:07:a5:87:28:cd:f6:96:3a:dc:ec:d0:38:e4:b3:c0:b7:db:
45:56:25:0c:73:fb:df:6c:6c:aa:04:ec:1f:0b:bd:10:09:14:
0a:f8:0d:2e:a0:b3:b8:1e:35:03:a1:16:a1:ad:6b:a8:08:35:
f0:03:d8:1e:df:18:b0:a4:d6:d4:14:88:87:25:8a:d7:4a:f3:
2c:39:f7:f6:37:38:c0:40:f2:c5:36:34:d2:6a:35:de:91:0f:
60:3b:47:d6:73:09:ed:79:0e:5a:41:e3:36:c5:a8:85:2d:2e:
92:1b:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:45 2025 by rpki-client