Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/zc9mGlUiEaGVC19iIgN2XDXM0oU.roa
File: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (raw, json)
Hash identifier: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=
Subject key identifier: CD:CF:66:1A:55:22:11:A1:95:0B:5F:62:22:03:76:5C:35:CC:D2:85
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 019423698641C9817FDFFECB607F62C0C2A1
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/zc9mGlUiEaGVC19iIgN2XDXM0oU.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:8440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:86:41:c9:81:7f:df:fe:cb:60:7f:62:c0:c2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdcf661a552211a1950b5f622203765c35ccd285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:4c:0e:84:a4:ca:35:f4:a5:f7:b4:a8:c7:
0c:a6:94:cf:ef:f3:6e:14:56:f4:91:bc:45:2a:34:
4e:16:1e:45:4a:34:58:a3:d4:00:5c:5a:79:de:00:
b0:b9:8f:08:7f:6b:97:6d:d1:f1:cd:5d:cb:93:56:
b5:32:c9:be:7c:2a:ec:b5:7c:13:37:42:bc:1b:f7:
0a:26:0a:ac:f4:cf:94:6a:d9:c6:b6:2a:84:74:9a:
d3:2c:72:27:37:0d:cc:fd:b0:87:9a:5d:3a:24:3b:
b6:44:bd:42:3e:34:61:c6:ab:75:c4:ea:7f:f1:f9:
9c:12:73:46:7b:ad:a8:03:a9:1d:66:2f:45:b8:7c:
60:dc:27:12:28:f0:f3:6f:65:08:dc:3a:1e:db:d6:
c5:ba:ce:37:59:35:8e:50:5d:a3:5f:39:e0:37:e6:
02:38:75:af:48:58:10:ba:6e:55:ab:a0:55:db:cd:
57:f8:33:31:62:9d:b1:29:7c:af:e3:95:2f:8d:9c:
ce:29:54:dc:a4:65:c0:14:09:f0:48:52:cc:e4:17:
48:ed:45:21:10:25:af:52:8e:7d:bf:3d:b4:7c:9c:
3a:62:c6:f9:70:42:c7:63:8d:73:01:6a:15:67:62:
32:96:93:17:42:b6:33:35:45:da:cb:e2:e6:5d:a3:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:66:1A:55:22:11:A1:95:0B:5F:62:22:03:76:5C:35:CC:D2:85
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/zc9mGlUiEaGVC19iIgN2XDXM0oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8440::/29
Signature Algorithm: sha256WithRSAEncryption
6e:ec:8c:e9:f7:0e:49:b4:b3:9c:59:02:88:9a:40:22:99:f8:
7b:93:58:35:9b:0a:da:61:56:ce:15:f0:9a:10:83:de:9d:4e:
10:07:d4:40:1b:fb:48:0d:36:23:98:e8:aa:d2:48:c5:0e:ad:
20:9f:32:9b:9b:6a:47:fc:29:69:cd:0c:d5:2d:5c:4a:0f:c6:
14:42:eb:a2:30:ee:04:49:68:a5:d7:f1:55:79:fe:1c:6c:82:
00:5b:e4:6c:7a:4a:dd:57:40:09:93:b4:85:47:df:fd:06:5b:
4d:7e:dd:61:e6:09:77:81:51:7b:8a:b9:e1:9e:44:e8:ea:cf:
94:6f:23:65:c1:4b:7f:ac:6d:fa:be:dc:1d:1f:72:cb:31:87:
47:a2:2d:96:ca:f5:cd:14:e5:ee:5a:50:69:4c:2b:fa:d1:80:
58:37:ae:46:fa:33:ae:16:c2:20:05:28:82:b3:fc:87:8e:c2:
35:1a:3c:e6:a3:71:50:28:90:bf:81:74:13:9d:9b:78:2a:8d:
8f:d4:5d:1d:37:26:ed:6d:1b:f3:c0:b6:b2:9a:67:c5:aa:e5:
39:82:e3:f4:b4:9f:06:d5:82:fe:7e:32:65:5e:0c:24:da:e4:
6d:0d:cd:c7:da:00:53:e2:d3:d1:02:e5:27:4d:a2:5a:74:19:
32:c7:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:21 2025 by rpki-client