Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/zEiKY5IhiMFoe5zY89Uyt22u_qk.roa
File: zEiKY5IhiMFoe5zY89Uyt22u_qk.roa (raw, json)
Hash identifier: N/8LUTyZXsuNqPJSa00eDqkeGKTS4QmoFy1WgcFflgk=
Subject key identifier: CC:48:8A:63:92:21:88:C1:68:7B:9C:D8:F3:D5:32:B7:6D:AE:FE:A9
Certificate issuer: /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial: 019421B194960D22C2B3DA51BB171AF149E5
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/zEiKY5IhiMFoe5zY89Uyt22u_qk.roa
Signing time: Wed 01 Jan 2025 11:47:53 +0000
ROA not before: Wed 01 Jan 2025 11:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214998
IP address blocks: 2001:67c:e8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:94:96:0d:22:c2:b3:da:51:bb:17:1a:f1:49:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
Validity
Not Before: Jan 1 11:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc488a63922188c1687b9cd8f3d532b76daefea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:02:b9:d1:dd:7b:e0:42:55:b7:4b:99:d4:
4c:0a:eb:ba:19:b9:43:da:d4:19:38:8b:52:b0:fd:
d4:f0:99:7d:5a:b9:80:df:e6:15:c8:a9:e5:6c:7b:
b1:53:50:b4:c5:27:45:26:ba:05:b1:6d:fe:cb:b4:
67:40:ec:16:d1:76:11:8d:11:d8:6e:4d:16:e5:45:
d1:f1:48:ff:62:a4:b2:c2:90:95:5a:36:5b:92:44:
ff:ae:a4:b8:fa:a3:75:84:5d:40:25:c6:5d:a4:5a:
26:a3:a8:43:6b:14:22:df:58:db:c5:80:81:d9:18:
8b:20:30:9e:f9:69:3d:4f:8d:7a:f8:2c:6c:eb:98:
79:bc:6d:0a:fb:fa:38:3f:49:fc:95:88:71:e4:76:
30:be:00:a0:3a:bb:cc:8f:75:f4:19:64:a2:64:b8:
45:6e:a5:87:42:c3:9a:fc:49:6c:1d:a8:d2:fd:c4:
6b:9d:9e:96:11:05:e4:b8:29:2f:f3:61:51:f1:b2:
33:6b:83:12:04:bf:bc:8a:2a:c4:53:e4:9c:16:0f:
fe:0d:a4:97:f0:5b:48:b2:e6:df:1b:6f:66:56:60:
84:fb:36:85:53:0e:6d:5a:da:cb:d3:83:84:a9:2f:
54:b3:05:33:4a:84:50:2e:6e:bd:7c:39:7e:ea:5c:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:8A:63:92:21:88:C1:68:7B:9C:D8:F3:D5:32:B7:6D:AE:FE:A9
X509v3 Authority Key Identifier:
keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/zEiKY5IhiMFoe5zY89Uyt22u_qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e8c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:f8:36:18:8a:ba:9b:62:2b:23:52:7f:5d:0e:aa:89:d4:84:
7b:d8:32:53:bb:64:b3:17:cc:9f:7c:44:bb:60:8b:1d:98:51:
e6:40:2c:24:0a:77:35:e8:e7:f7:91:37:e0:5c:81:a0:ac:7d:
b8:76:70:4c:32:c6:15:1c:4a:4c:c9:1b:48:69:43:dc:f5:bd:
1a:06:88:18:1d:84:45:e5:6b:93:45:87:be:7e:7f:24:d7:fb:
4a:fc:b9:81:e8:53:30:8a:76:b9:de:a3:b1:9b:d4:e3:59:3e:
38:6a:cd:6c:58:3d:0e:7a:2c:9f:72:96:a6:55:37:78:dd:52:
e0:28:43:3c:f6:ce:f6:41:9a:5e:3b:f2:89:fe:0b:4c:2e:60:
b0:e8:7a:ea:c2:da:ee:93:fb:8d:dc:89:b6:e5:43:7c:f2:4b:
c8:48:4e:ef:a5:48:5b:38:99:51:30:aa:20:58:9b:76:fc:bb:
e1:f2:87:6a:1f:f0:59:91:17:49:7c:a7:3d:12:12:30:d7:e9:
48:06:5c:e6:32:6a:26:df:dd:aa:4a:08:9c:f0:63:9b:5a:8d:
41:6b:cf:9d:43:0c:a5:74:15:eb:bb:28:7a:63:6b:85:b1:33:
18:e7:66:34:fa:8c:38:43:00:43:3a:74:2c:be:af:76:5c:fd:
60:23:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:30 2025 by rpki-client