Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7ZDYTKvAvTNv12GuIpMzhz94tXM.roa
File: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (raw, json)
Hash identifier: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=
Subject key identifier: ED:90:D8:4C:AB:C0:BD:33:6F:D7:61:AE:22:93:33:87:3F:78:B5:73
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1E7BD39BA7C8748BD942E33C5501C
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7ZDYTKvAvTNv12GuIpMzhz94tXM.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57503
IP address blocks: 2001:6d0:4005::/48 maxlen: 64
2001:6d0:4009::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e7:bd:39:ba:7c:87:48:bd:94:2e:33:c5:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed90d84cabc0bd336fd761ae229333873f78b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:db:78:07:b3:0b:6f:b9:cc:9c:c1:69:b6:
31:1a:68:e8:ff:0b:b4:46:13:f7:27:d9:cb:4d:0e:
3c:2f:5c:d1:e1:92:78:5c:72:2c:60:ea:0d:f1:a0:
b9:e9:3f:97:f6:70:18:47:7d:b4:ed:6b:31:09:1e:
89:5a:3e:7c:f2:66:96:e3:ae:90:a7:11:e2:ab:26:
ec:45:66:8c:68:5d:61:e0:ff:e2:a2:84:ba:f0:5f:
80:b7:f1:13:0c:1a:59:2a:25:28:a7:b5:19:11:d4:
e4:05:82:f6:5a:7e:c7:ba:81:2b:8c:a0:ce:04:8a:
5b:8e:fd:6b:c0:55:b4:4c:bb:ff:38:bf:72:f2:d5:
c3:17:38:47:93:ce:36:03:e8:16:5a:e9:bd:01:5b:
7d:83:a9:28:29:0a:69:fd:38:9d:be:a4:20:d4:14:
ff:57:69:61:3b:07:1b:78:fb:1d:22:55:ea:91:59:
b4:99:94:64:c8:f2:27:2e:de:de:63:bf:45:40:4f:
61:50:0b:0c:5e:b6:55:cb:05:10:ce:bd:23:42:a3:
4e:34:55:ec:8f:47:f8:3c:2d:7e:0d:2a:f9:e8:29:
0a:d4:2b:fa:0f:34:d9:3a:8c:1a:1d:2b:19:93:3e:
d6:75:8f:45:32:f0:2e:12:87:e6:fd:3c:f7:30:41:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:90:D8:4C:AB:C0:BD:33:6F:D7:61:AE:22:93:33:87:3F:78:B5:73
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7ZDYTKvAvTNv12GuIpMzhz94tXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:6d0:4005::/48
2001:6d0:4009::/48
Signature Algorithm: sha256WithRSAEncryption
c2:80:ab:1c:7a:72:84:9d:8e:ec:bb:b1:76:67:3f:d5:5a:8f:
b5:30:be:f3:1d:bc:33:90:ba:5c:38:c9:93:20:a6:05:d2:7d:
27:dd:29:e9:16:db:1e:8b:1e:54:d9:21:8e:2f:97:74:19:65:
f2:b6:45:07:9d:e4:40:36:d4:a9:0c:31:07:a1:68:7b:93:b9:
08:ec:16:3c:8c:9b:a2:b3:a9:ca:d4:80:91:a2:56:9f:d3:78:
29:19:1b:76:f5:c2:d6:35:2f:fe:5a:b0:62:fe:c8:3d:59:17:
44:a9:c1:61:c8:5d:fc:f3:e9:1c:fa:76:50:42:dd:d0:da:cb:
74:4c:c4:94:9e:8c:f3:c7:51:05:78:d5:33:72:56:4b:bb:a6:
91:03:ee:5d:2d:df:41:a3:6b:82:a9:67:18:7d:23:02:c1:eb:
19:c8:b2:80:1a:6e:9e:ac:b3:bc:73:27:b9:b1:3b:6e:49:12:
2f:d8:16:26:e3:f8:b7:a9:76:70:65:38:55:a6:d8:a6:1f:ed:
91:48:b3:37:22:e3:7b:88:0b:07:be:a4:ee:fe:76:0f:96:e5:
0e:3b:70:30:57:6e:05:d8:6e:ac:95:d7:63:28:2c:ad:ea:20:
9b:78:17:59:24:c8:69:5c:c6:ea:7e:c3:a2:57:16:26:82:b1:
00:36:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:20 2025 by rpki-client