Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa
File: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (raw, json)
Hash identifier: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=
Subject key identifier: 35:94:B0:FB:02:D0:FC:DE:74:CE:0D:D9:3A:B7:BB:C9:39:16:91:74
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0194221F4ED2B0069DD793B0BF4AF6EEAA1A
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa
Signing time: Wed 01 Jan 2025 13:47:44 +0000
ROA not before: Wed 01 Jan 2025 13:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199591
IP address blocks: 2001:67c:bf4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4e:d2:b0:06:9d:d7:93:b0:bf:4a:f6:ee:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3594b0fb02d0fcde74ce0dd93ab7bbc939169174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:de:19:76:e2:15:e6:70:88:c5:e5:22:33:
ed:80:54:c7:f4:d8:a6:bd:ac:cc:34:04:c7:77:d8:
b5:7c:4b:58:19:19:0d:af:8f:75:91:dd:20:e2:11:
41:96:f2:20:36:aa:70:6b:b0:28:30:40:cb:9a:2e:
f8:61:ec:1a:8f:37:f4:88:5b:ef:0a:27:33:e7:52:
78:7b:3d:e6:5a:d9:02:17:50:e9:90:e6:b2:88:8b:
17:c2:ae:74:87:b6:5d:5b:3b:9d:61:61:fd:3a:26:
19:f1:6c:55:1a:08:3d:bf:93:b5:35:dd:dc:23:18:
aa:7c:34:63:35:1f:1a:46:35:42:9e:88:cc:f4:04:
d3:94:55:5d:e2:4b:17:96:e0:b9:95:cc:89:13:55:
07:fc:50:30:05:b8:50:cf:3b:c2:e4:7a:95:de:d5:
3f:6e:32:98:3d:7b:6d:7f:c5:be:90:38:d6:b7:d6:
00:c0:b2:0b:e1:64:61:7c:3c:c8:a2:4c:0b:df:63:
04:bb:ba:80:c4:5e:40:e8:5f:18:c1:bf:c4:2a:84:
32:e4:60:02:f4:21:6b:c1:cd:c6:84:d5:64:48:47:
de:d2:f2:c2:43:83:6b:1f:b9:bb:34:b5:ed:92:64:
95:f7:51:91:4d:6b:d2:48:f9:61:41:c1:2e:73:f1:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:94:B0:FB:02:D0:FC:DE:74:CE:0D:D9:3A:B7:BB:C9:39:16:91:74
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:bf4::/48
Signature Algorithm: sha256WithRSAEncryption
41:9c:3e:12:62:3b:1b:36:6b:d1:b3:79:09:f4:91:2c:46:a7:
16:d9:a7:fe:b5:6a:fe:e9:9a:ba:fa:43:4b:89:b8:a7:b3:e5:
26:28:cd:b6:7f:05:de:55:c1:bd:ee:bd:e8:b2:77:8e:73:7e:
9c:89:e6:5c:58:c2:8a:0d:22:fd:23:74:06:b1:82:2d:12:db:
bb:5f:f5:b8:18:ac:08:76:09:a5:96:b5:f4:3b:ef:4b:4e:52:
83:7f:34:34:00:b3:2f:40:b6:3c:2f:75:45:72:5d:39:53:17:
ea:51:d2:03:6b:90:0f:6a:a5:1d:d6:69:46:ca:cc:1b:32:e0:
ca:53:ad:9d:44:c2:7f:b7:84:f0:14:18:dc:1a:94:bb:62:c8:
11:ff:36:d2:cd:8b:f3:79:ba:a8:54:5f:8c:89:92:7e:d1:8f:
bc:4b:81:fa:84:74:a0:5f:67:37:33:f2:2e:17:96:b6:ab:24:
32:44:5d:9f:d8:fb:0a:0a:71:72:f8:80:56:7b:fe:83:57:a3:
85:3f:d4:6a:cf:d3:9b:1e:f1:b5:a2:0f:99:96:11:05:99:2a:
9e:e5:85:8d:0e:b5:c3:33:e7:8c:32:8b:10:a5:5a:51:0d:d7:
cf:49:34:06:be:83:41:e7:77:a6:4d:f5:9e:71:b5:5b:a6:07:
4a:36:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net