Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zj1IF-U1NfbDKp-C4myGvBku8Os.roa
File: zj1IF-U1NfbDKp-C4myGvBku8Os.roa (raw, json)
Hash identifier: mB2YqFtPC2q4BgRVScJEEfkKBF7S4kSaeukyHMG0leY=
Subject key identifier: CE:3D:48:17:E5:35:35:F6:C3:2A:9F:82:E2:6C:86:BC:19:2E:F0:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EC5DE2AB66FE278FD297D6F4C6338612
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zj1IF-U1NfbDKp-C4myGvBku8Os.roa
Signing time: Mon 11 Jul 2022 08:26:24 +0000
ROA not before: Mon 11 Jul 2022 08:26:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1234567
IP address blocks: 2001:67c:64::/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:5d:e2:ab:66:fe:27:8f:d2:97:d6:f4:c6:33:86:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 08:26:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce3d4817e53535f6c32a9f82e26c86bc192ef0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:4a:37:dc:44:bc:dd:1b:78:ac:ab:e5:fb:
13:1a:9b:73:42:28:a6:3b:05:2f:26:da:f3:46:fc:
ab:9f:23:65:3b:55:46:ae:b6:6a:7e:18:a9:ba:6e:
32:c1:33:f5:ef:ce:4d:22:0d:49:b9:41:de:28:4b:
d9:4f:2d:9f:6f:77:36:65:53:43:40:5a:ef:d9:1a:
52:f0:a7:dd:4b:15:44:d0:bb:a4:88:83:c9:f6:a1:
36:e4:04:ca:5d:2d:f2:bf:f8:c8:48:21:01:1d:c3:
03:25:0d:87:af:ff:8c:8e:2c:30:63:95:a0:56:bc:
db:ef:c4:82:d6:fa:bc:8d:85:42:9f:b7:85:b7:44:
c6:26:84:c3:99:0b:1c:bc:d4:27:f2:26:33:a5:1b:
02:e3:df:5c:cc:b5:80:ab:64:df:8e:15:07:52:55:
37:40:ca:96:9e:23:d5:af:01:e6:ec:3d:d4:53:ab:
63:e4:fa:8f:db:2d:aa:04:27:6c:19:a0:a4:d5:e5:
8f:90:b0:5c:cb:88:6d:d7:fa:83:3f:04:c2:f4:ef:
e6:fc:57:73:00:ae:c4:a9:97:cf:b1:89:4b:69:cc:
33:02:cc:20:1b:aa:2a:e1:b1:39:c1:6d:47:7c:9b:
a7:d0:a8:e9:8f:91:23:da:25:43:be:e8:b8:30:dd:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:48:17:E5:35:35:F6:C3:2A:9F:82:E2:6C:86:BC:19:2E:F0:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zj1IF-U1NfbDKp-C4myGvBku8Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64::/128
Signature Algorithm: sha256WithRSAEncryption
8b:f3:15:63:04:f4:c2:6e:7b:7b:1e:03:08:e9:39:67:17:97:
02:21:df:6b:5d:26:51:1f:e8:73:65:45:22:ae:ec:6e:d6:85:
74:22:6e:38:19:e1:63:1d:8f:70:5e:e2:f5:d8:16:b7:f2:32:
ae:38:ba:ed:12:06:4f:da:58:a3:2c:56:e7:fc:ee:67:78:77:
93:77:94:80:f8:5b:78:d0:5e:9a:cb:04:80:f2:f4:af:24:6e:
10:29:e7:9b:05:57:8b:e9:7f:94:68:b7:0a:be:83:b6:b6:9c:
9c:74:c1:48:42:1c:46:ab:59:45:ce:fb:41:4f:70:db:11:88:
aa:de:57:7e:56:a7:d8:81:dd:04:7a:3a:eb:1e:3b:91:f6:2f:
78:bc:98:87:18:b4:da:17:d0:cf:57:83:10:f3:36:31:4d:4c:
87:43:6a:91:cc:08:be:0d:3c:97:9f:db:23:a1:ff:99:4a:6a:
a5:4d:b6:6e:ca:ee:a7:b8:18:08:55:e0:28:4a:d2:60:ed:e6:
bc:f7:9d:ef:ae:05:f0:32:47:86:b1:f2:f6:97:d0:1f:d2:d1:
09:ad:1b:b4:20:03:ec:76:3e:5b:eb:7e:b6:79:68:3e:9d:37:
96:ed:1b:31:75:06:16:f6:64:04:de:6b:a1:74:3b:5b:3c:d8:
76:bf:93:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 1 09:05:53 2025 by rpki-client