Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ZsmXPlFCvdWsAj6XlayAUqzZzWc.roa
File: ZsmXPlFCvdWsAj6XlayAUqzZzWc.roa (raw, json)
Hash identifier: 5WlMfywzj60bCVInMiSsPUKm5ydsCW0b7MGKOWilIQo=
Subject key identifier: 66:C9:97:3E:51:42:BD:D5:AC:02:3E:97:95:AC:80:52:AC:D9:CD:67
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F518DD367270F69FACF4704108277
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ZsmXPlFCvdWsAj6XlayAUqzZzWc.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 128.65.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:51:8d:d3:67:27:0f:69:fa:cf:47:04:10:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66c9973e5142bdd5ac023e9795ac8052acd9cd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:70:b2:71:de:a5:a6:09:b7:fb:ed:85:b8:
67:3b:4d:19:bf:d2:08:00:5c:d5:17:31:7f:e6:9d:
13:d8:e7:ac:51:99:ae:98:f1:b8:45:0a:9e:67:fc:
a0:7a:74:21:b9:44:19:bb:bb:5e:be:d9:82:65:3a:
e2:6a:bc:28:c8:4d:09:52:83:0a:ce:41:4e:92:be:
87:27:cb:1f:21:50:e1:f4:55:95:70:8d:06:a3:cc:
60:b4:75:f9:2c:0e:8f:44:9e:f7:3d:81:c5:67:98:
eb:a5:70:39:75:31:d0:e6:43:19:1a:6e:b4:a9:48:
8f:ef:a0:6c:74:0a:aa:e3:88:98:9c:4e:b0:0e:7c:
4f:78:d6:d3:f0:9c:22:9a:41:78:f3:7a:ef:ca:59:
80:d9:c4:fb:47:00:67:48:7d:70:f7:29:a2:15:ed:
89:68:c1:c3:3f:0c:ed:82:a2:ee:71:a9:59:3f:66:
15:9b:29:d6:6d:45:7e:59:8a:40:cf:91:17:03:c6:
81:c1:88:4d:b0:9b:62:82:5b:92:80:a0:ee:7c:37:
07:fc:36:40:8a:6f:eb:4a:b6:bf:47:15:b0:9d:ad:
ba:97:40:48:95:0e:33:be:c9:bd:f8:c4:0e:39:c0:
d4:bf:ad:dc:5e:4e:da:9a:6e:d6:6f:35:a7:2b:0f:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:97:3E:51:42:BD:D5:AC:02:3E:97:95:AC:80:52:AC:D9:CD:67
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ZsmXPlFCvdWsAj6XlayAUqzZzWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.168.0/22
Signature Algorithm: sha256WithRSAEncryption
16:dd:88:86:9c:75:a2:53:45:9f:f8:91:6f:39:86:4f:ce:91:
0d:5b:89:13:eb:da:47:90:0e:9f:47:01:10:ce:0f:06:df:0f:
ca:de:62:e3:7d:e0:19:ec:05:a9:e9:73:ad:d7:e5:a4:c0:09:
96:7a:31:b4:92:21:bf:13:0c:02:25:ea:c9:d6:95:60:50:49:
52:98:3c:c6:23:bb:99:24:2b:3f:4d:12:b1:df:f1:3d:93:84:
ca:16:3f:b3:59:d3:ea:3b:13:a2:df:46:6b:36:d6:b8:fa:32:
c7:43:54:02:47:f2:99:20:99:05:69:6a:67:6f:f1:5e:f5:d6:
85:fe:df:ac:96:e6:e4:8a:7f:80:d1:7f:50:3e:1c:8f:aa:22:
c8:26:81:0a:34:c9:b2:97:44:fd:3a:9c:cd:b9:f8:89:2b:f3:
aa:71:0a:4c:70:cd:60:d3:5c:84:24:ad:cc:0a:c4:d9:c5:92:
c3:a9:bb:2e:22:06:cb:f1:c3:ba:e5:98:c2:d9:e5:44:00:22:
1e:f0:42:fc:77:41:7c:67:49:93:69:1d:47:51:62:3c:b0:68:
df:e0:76:42:91:fc:e6:64:8e:04:71:95:1b:7e:fd:27:8c:02:
48:de:c8:0c:3c:a0:a8:a9:11:bd:8b:ac:37:6c:1c:86:57:e2:
42:c1:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:42 2025 by rpki-client on console.sobornost.net