Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/zyJdx9ZXUfydzGQuiLQr3TN0EM8.roa
File: zyJdx9ZXUfydzGQuiLQr3TN0EM8.roa (raw, json)
Hash identifier: ZepleNisOizaKray1ttDjRlrwViDDUfcIERrAC8/y2Y=
Subject key identifier: CF:22:5D:C7:D6:57:51:FC:9D:CC:64:2E:88:B4:2B:DD:33:74:10:CF
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 019425FD456CB1005D630BBFD3C9544FB23E
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/zyJdx9ZXUfydzGQuiLQr3TN0EM8.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48278
IP address blocks: 2a04:7f80:59::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:45:6c:b1:00:5d:63:0b:bf:d3:c9:54:4f:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf225dc7d65751fc9dcc642e88b42bdd337410cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:91:b3:ee:2b:ef:e1:cf:09:a6:56:84:15:
a1:94:83:ec:cc:a7:6a:ad:99:ae:c0:ca:f8:24:88:
5d:0a:fb:50:75:71:e2:27:0f:08:24:f6:af:3d:c0:
90:96:b8:ec:1c:ff:26:4d:6d:63:9b:fc:ce:db:95:
87:95:1a:59:c7:fa:4b:37:da:ab:d0:e5:5d:17:1b:
01:e6:ff:4c:7f:b3:e6:df:fc:d4:87:9c:75:f7:16:
14:8b:21:51:ed:71:06:ea:69:79:a0:db:d0:58:cc:
c6:5b:61:bc:3f:89:2f:21:3e:43:95:a1:ce:50:77:
5c:da:f0:26:48:2b:b4:51:05:bc:fe:b1:92:50:26:
4e:07:0f:ca:5f:f7:43:35:ff:5b:ee:06:b8:13:3e:
15:3f:70:2c:f5:bc:b3:dc:03:e1:52:30:5f:cf:9f:
85:c6:fb:f1:20:86:4b:53:9e:81:1a:48:37:de:5a:
6b:3b:e9:15:94:e0:24:66:4f:6b:e2:a0:10:6a:6c:
55:94:db:a6:2a:4d:0b:fb:fa:ad:58:e8:82:91:8d:
bc:58:15:82:91:ef:9a:ad:97:3e:bd:57:e6:30:c2:
ba:05:cd:e6:99:e1:b3:94:d8:c0:6e:3a:2c:c7:67:
a1:0d:80:d6:6c:e8:ae:77:bb:cd:99:ec:c4:bb:28:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:5D:C7:D6:57:51:FC:9D:CC:64:2E:88:B4:2B:DD:33:74:10:CF
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/zyJdx9ZXUfydzGQuiLQr3TN0EM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:7f80:59::/48
Signature Algorithm: sha256WithRSAEncryption
44:8d:f5:22:e6:e7:36:90:62:6e:8c:bd:d9:55:1c:95:5c:16:
28:df:8b:ff:85:22:a1:c0:d0:6d:c5:0b:74:fb:2c:e1:1d:e6:
4e:52:76:fe:d2:b1:50:dd:02:e6:da:21:a1:53:f3:cd:a8:59:
28:98:31:2c:42:f9:d1:6a:d6:4a:36:6f:ec:22:77:a2:e0:d9:
70:56:45:37:4c:47:aa:e2:27:ba:af:e0:3d:37:3a:dd:9d:d9:
7d:20:1d:f2:53:1f:84:07:84:22:99:de:6e:9d:7c:0d:2e:2a:
a4:f4:3a:d4:9b:4e:dd:c0:bd:e5:3b:6b:27:9f:5e:9f:88:21:
53:62:5e:6d:41:88:74:34:50:ce:0d:70:c9:a2:34:ff:9e:54:
1a:67:5e:04:b6:6a:65:77:d8:a4:9e:49:93:a7:ba:7a:93:c3:
e7:34:b4:72:0c:46:18:0d:67:ba:96:d8:7d:ed:13:ea:c8:86:
c3:eb:fe:86:d6:83:78:a1:a6:8f:69:a7:09:c9:de:4c:c7:35:
81:a9:1f:d8:a0:a3:cc:52:a1:eb:20:65:6a:13:6a:3d:80:64:
43:17:44:b7:e7:00:27:cf:a8:86:34:2c:92:72:3e:08:92:0f:
5e:d1:8d:15:11:95:28:12:7d:0d:6f:4c:e7:46:0e:19:05:b1:
9b:14:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:11 2025 by rpki-client on console.sobornost.net