Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/jzVnUTG6216ziazQ2R_tQlr5Kio.roa
File: jzVnUTG6216ziazQ2R_tQlr5Kio.roa (raw, json)
Hash identifier: LSAho2f/1DvD4vpLYmCx9yF/j9RQysaovtQo7z+Fu0Y=
Subject key identifier: 8F:35:67:51:31:BA:DB:5E:B3:89:AC:D0:D9:1F:ED:42:5A:F9:2A:2A
Certificate issuer: /CN=6e076b504cb95e5dfdde794c8981c8f6c9c9505d
Certificate serial: 0185723A0B34AC4A73F95A3C8BC33E5EC230
Authority key identifier: 6E:07:6B:50:4C:B9:5E:5D:FD:DE:79:4C:89:81:C8:F6:C9:C9:50:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgdrUEy5Xl393nlMiYHI9snJUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/jzVnUTG6216ziazQ2R_tQlr5Kio.roa
Signing time: Mon 02 Jan 2023 11:24:44 +0000
ROA not before: Mon 02 Jan 2023 11:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57436
IP address blocks: 2001:678:118::/48 maxlen: 48
2001:678:110::/48 maxlen: 48
2001:678:114::/48 maxlen: 48
2001:67c:88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:0b:34:ac:4a:73:f9:5a:3c:8b:c3:3e:5e:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e076b504cb95e5dfdde794c8981c8f6c9c9505d
Validity
Not Before: Jan 2 11:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f35675131badb5eb389acd0d91fed425af92a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:bf:6d:01:0f:2b:5f:86:46:77:c7:dc:7a:
e5:81:37:f9:58:5a:94:7d:d7:91:48:c4:15:7a:29:
72:a4:c9:cd:91:74:85:f3:d9:c9:34:fe:16:64:63:
56:67:8b:4e:83:79:cc:38:33:93:cb:15:5d:34:4c:
50:2e:b3:c4:4c:f7:16:28:37:52:19:26:23:94:ab:
0c:c6:70:25:74:9c:c7:c1:60:39:73:7b:bf:05:79:
9b:a7:1e:2a:55:d0:28:09:0a:4b:a3:b9:99:89:d4:
ed:b7:bf:46:e3:2c:b8:92:4c:b2:96:ec:27:59:55:
07:f4:2d:e0:a8:11:2a:f4:cf:bc:ab:eb:80:7f:02:
de:58:e3:9d:43:87:04:f4:55:e9:0b:40:94:1a:71:
3a:25:60:d6:6f:ce:3f:69:54:58:cc:4b:2c:e9:e3:
7d:87:fa:d1:6e:18:f1:72:12:ef:e2:2a:ae:80:41:
89:b4:e3:c1:d2:82:f0:d0:89:78:82:68:4d:4c:04:
eb:f3:cf:4a:83:17:12:a2:90:3c:6c:13:f5:a9:68:
0f:9b:2b:0f:9c:fb:28:a8:fc:89:3f:cb:91:51:25:
36:b5:cc:76:66:19:d3:30:e2:12:1d:47:9b:e9:84:
a6:8a:9d:a2:30:3b:96:d1:f7:9c:70:36:bb:4c:ea:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:35:67:51:31:BA:DB:5E:B3:89:AC:D0:D9:1F:ED:42:5A:F9:2A:2A
X509v3 Authority Key Identifier:
keyid:6E:07:6B:50:4C:B9:5E:5D:FD:DE:79:4C:89:81:C8:F6:C9:C9:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgdrUEy5Xl393nlMiYHI9snJUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/jzVnUTG6216ziazQ2R_tQlr5Kio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/bgdrUEy5Xl393nlMiYHI9snJUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:110::/48
2001:678:114::/48
2001:678:118::/48
2001:67c:88::/48
Signature Algorithm: sha256WithRSAEncryption
8d:4c:42:c5:ad:c2:b2:d4:e6:9c:32:e3:b9:d7:be:54:07:7e:
e1:e8:3b:1a:27:79:ec:b3:54:e8:63:bf:d2:68:51:63:24:32:
e5:1d:59:64:71:db:3f:a1:8a:cd:ac:d4:aa:59:c7:d4:26:2e:
92:ad:cd:e6:f2:30:f4:00:70:aa:30:a1:d9:68:c8:42:dd:a0:
2f:1c:aa:36:88:4c:19:c7:c1:24:c4:99:42:1d:9d:76:f2:64:
e8:a3:6c:5b:61:08:02:67:93:52:3d:c7:0b:35:0d:03:75:16:
c4:1f:ed:48:17:d4:a4:27:d5:d3:86:8f:e9:64:95:40:8d:eb:
10:17:e6:6d:17:ea:71:89:c4:09:ad:7f:dd:c6:c8:ff:85:b9:
73:fd:d9:77:13:b2:5f:82:15:53:a2:bf:90:7a:0f:f1:42:b1:
5b:a3:57:ed:16:24:02:8e:21:e3:f5:96:bb:17:0c:45:30:a7:
b9:aa:1d:4d:f7:c6:44:e4:38:b9:4b:35:d1:a9:f1:65:52:6f:
21:d9:df:2a:23:cf:84:a2:5e:48:bd:d5:48:17:71:ec:b3:cb:
88:21:49:b6:5c:4f:77:8c:e0:f9:07:0c:70:86:f8:36:61:20:
16:8b:26:38:11:88:70:be:c6:93:6a:78:b7:22:db:f6:b9:51:
f4:eb:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:23:57 2025 by rpki-client