Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/Zg1oQlfTlRGn4mPizarntNQVifQ.roa
File: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (raw, json)
Hash identifier: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=
Subject key identifier: 66:0D:68:42:57:D3:95:11:A7:E2:63:E2:CD:AA:E7:B4:D4:15:89:F4
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 0194252162A78CCE287173B13AC5D39E06B0
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/Zg1oQlfTlRGn4mPizarntNQVifQ.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205627
IP address blocks: 2a11:ac7::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:62:a7:8c:ce:28:71:73:b1:3a:c5:d3:9e:06:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660d684257d39511a7e263e2cdaae7b4d41589f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:2d:fe:b3:a2:50:b2:60:95:72:b1:53:fa:
ed:79:94:eb:ed:13:b0:2c:d8:d8:fe:72:1c:14:57:
b6:b0:33:55:ad:af:d5:94:c9:80:5d:eb:6c:9f:71:
63:84:0b:ad:4b:bd:b0:5e:12:b6:90:65:4f:3c:1d:
19:31:cf:62:8c:5b:b2:ab:a2:35:fb:ef:67:7e:82:
83:1f:27:93:54:a0:7c:67:d5:5b:23:e9:1f:7b:20:
c3:c3:95:e4:ba:4d:3c:ba:ce:bb:12:f2:1c:b9:98:
a8:da:c6:7e:f7:f4:61:68:c3:3c:0a:98:20:1b:b1:
87:19:b7:af:22:4c:e5:2d:75:9e:27:9e:63:b7:7d:
d0:d9:fa:b3:da:f4:f0:39:d0:76:28:1d:b3:f3:2b:
f2:ef:88:47:d6:11:38:ec:7c:84:e5:eb:18:69:7c:
e0:fe:59:73:eb:0b:42:04:02:bc:8a:b4:12:c0:5c:
4d:8e:94:9a:e0:d1:95:e4:74:0e:77:f3:fb:9c:b9:
76:4f:2e:ea:f7:5e:fc:72:56:1b:c8:4f:25:3a:1a:
e2:93:9b:1e:4a:9c:f8:0f:0a:48:94:a8:90:39:2f:
5e:cd:c6:73:48:6a:98:aa:1a:00:86:02:d1:38:7d:
ca:ed:11:ca:dd:0c:58:58:2a:d6:07:5d:d2:6f:51:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:68:42:57:D3:95:11:A7:E2:63:E2:CD:AA:E7:B4:D4:15:89:F4
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/Zg1oQlfTlRGn4mPizarntNQVifQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ac7::/40
Signature Algorithm: sha256WithRSAEncryption
4c:da:d5:00:f2:a0:43:98:4e:a0:cc:8a:ce:70:a5:86:5e:6e:
ce:f1:5c:e7:ff:14:0b:f3:d5:08:60:13:68:cf:57:41:a1:c2:
0e:68:25:4e:56:d0:da:bd:65:dd:1b:2c:97:d0:8b:29:d9:fe:
58:1d:a6:68:d9:ef:a3:96:82:be:87:61:75:ac:91:01:aa:46:
c1:02:e3:e0:3f:2f:1f:12:68:ed:9b:49:15:1e:f2:58:48:15:
6b:b2:38:f2:c0:d0:81:82:b9:08:23:5a:bb:4c:a3:16:f8:34:
a5:e4:e0:d6:e2:3a:75:e6:7a:08:55:4c:59:90:50:5e:d0:84:
4a:62:6c:26:30:30:c3:d5:3f:f2:3d:b1:90:95:e1:b9:f2:f8:
7c:c3:bf:21:ec:8e:f7:1d:24:90:37:c6:f5:31:74:46:c3:c6:
4b:56:cf:0c:fa:98:0d:d8:c4:09:03:cb:55:4e:44:f4:ae:a4:
8d:14:ff:db:c3:91:8c:20:5f:3b:49:76:e4:f6:b6:b2:92:32:
b7:43:a5:fb:8d:1b:67:90:26:86:67:73:eb:d4:65:50:07:96:
41:cf:cb:d1:d9:9b:a6:e6:73:c1:1d:e4:6b:7e:8f:1a:d1:ac:
d3:02:d5:76:38:98:48:94:0b:78:30:fc:af:9a:4f:79:7b:8b:
0a:c6:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:00 2025 by rpki-client