Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pZCET-yr_XSzL6jEyx72SzireG0.roa
File: pZCET-yr_XSzL6jEyx72SzireG0.roa (raw, json)
Hash identifier: eSKcmkPiu/CfcmKgQ1w34Gy1ZqxeQFFLHxQHUcjNVjE=
Subject key identifier: A5:90:84:4F:EC:AB:FD:74:B3:2F:A8:C4:CB:1E:F6:4B:38:AB:78:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856F26A58DAE09F4DD06E8472EB2AA07C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pZCET-yr_XSzL6jEyx72SzireG0.roa
Signing time: Sun 01 Jan 2023 21:04:41 +0000
ROA not before: Sun 01 Jan 2023 21:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 533333
IP address blocks: 2001:67c:64::/96 maxlen: 96
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:a5:8d:ae:09:f4:dd:06:e8:47:2e:b2:aa:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 21:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a590844fecabfd74b32fa8c4cb1ef64b38ab786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:e3:2e:7f:2f:30:b1:5c:81:56:f1:85:18:
d1:48:30:fc:4c:72:b9:d1:7d:c9:1f:d6:ce:40:c4:
cd:c0:50:9a:7b:0d:68:ac:28:a4:6b:32:14:07:7b:
8e:b9:7d:43:b5:57:c3:c4:3b:fb:a5:7c:6c:bd:3f:
5a:4c:c8:e5:d5:a9:33:1c:79:4f:a8:16:8d:7a:f8:
93:f5:e2:dc:83:90:45:a5:44:01:67:9c:73:fc:b4:
59:c6:c9:fa:37:87:00:06:2c:13:81:ba:1e:6a:29:
ff:10:ac:83:6b:2d:e3:b4:45:8d:80:1e:d4:7f:00:
b6:97:54:93:7d:6d:98:a9:3b:a9:a4:aa:46:8d:85:
be:11:10:9f:59:ca:f4:d8:9e:94:35:a8:90:99:82:
63:84:d3:88:c7:04:b8:f1:b1:4e:d8:07:54:4f:e4:
64:60:96:9d:85:3d:17:45:d2:5c:9a:5a:ff:05:5c:
06:84:e5:e6:53:89:bb:94:28:3d:67:06:d3:22:dd:
58:7b:b5:db:1f:a9:71:09:2c:db:06:fa:9d:08:49:
60:73:e5:27:9a:8c:e2:4b:0f:07:09:3d:dc:de:78:
90:2e:b4:a6:4e:73:39:a2:95:46:23:54:33:58:f1:
cf:f9:a5:92:8e:18:2a:d2:53:30:d3:17:61:ce:7f:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:84:4F:EC:AB:FD:74:B3:2F:A8:C4:CB:1E:F6:4B:38:AB:78:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pZCET-yr_XSzL6jEyx72SzireG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64::/96
Signature Algorithm: sha256WithRSAEncryption
18:c9:99:c1:57:eb:6a:17:2e:d3:de:db:67:5d:5e:c8:43:52:
57:20:ee:db:bb:80:2d:4a:63:ea:ba:09:27:14:8a:6b:a1:fa:
2f:f3:10:04:e1:7d:b9:2e:c6:40:37:12:64:2e:99:f1:e2:70:
d1:d2:5c:14:74:43:9a:6d:5a:f2:fa:c5:53:c2:d0:4c:18:55:
30:ca:f0:9b:e6:ac:47:46:6e:11:70:ea:d1:cc:3b:37:9c:56:
25:5a:e2:00:03:bf:44:ca:32:86:8f:ea:cd:4d:ef:02:c3:7c:
b8:94:3b:2a:e5:af:e9:76:23:de:03:6a:4e:0f:08:9b:10:35:
37:ec:49:12:cf:b9:f0:61:08:0a:ea:ab:9a:fb:0c:ec:fd:7a:
13:2e:be:37:e6:a8:3d:be:4d:0c:aa:4d:3b:65:2c:14:7a:22:
fe:c1:ae:70:9d:f7:0a:b3:50:9e:45:9a:f5:28:18:35:fa:a4:
c2:31:6a:cd:08:d7:56:18:8b:50:00:d8:dd:11:8e:93:ff:04:
b8:3a:80:8f:4a:cc:d3:80:7a:7d:76:06:f1:2b:be:f0:f6:61:
d0:fd:2f:18:d7:13:7e:95:a1:f1:74:95:43:e8:72:7d:b0:bd:
a3:3b:0f:78:30:40:2e:f0:76:69:d0:fb:72:af:e2:4a:4c:55:
b6:5e:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:05 2025 by rpki-client