Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/ZtnPw-EPjmLa7W3OxLxg_t78pV8.roa
File: ZtnPw-EPjmLa7W3OxLxg_t78pV8.roa (raw, json)
Hash identifier: K8KkRR/ZtZWge14n8EmXEE6Af3Y8EjAQWwa++O6bTvA=
Subject key identifier: 66:D9:CF:C3:E1:0F:8E:62:DA:ED:6D:CE:C4:BC:60:FE:DE:FC:A5:5F
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0196E9F5ECD0CD029D72D827DF00940913E0
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/ZtnPw-EPjmLa7W3OxLxg_t78pV8.roa
Signing time: Mon 19 May 2025 19:12:10 +0000
ROA not before: Mon 19 May 2025 19:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a11:9884::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:f5:ec:d0:cd:02:9d:72:d8:27:df:00:94:09:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: May 19 19:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d9cfc3e10f8e62daed6dcec4bc60fedefca55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:fa:c5:1e:f2:f2:d0:00:7b:10:07:a5:e1:
9a:47:c2:de:78:99:54:b0:72:fc:c6:0e:37:79:6e:
e9:ee:d7:d2:50:e0:82:b1:b2:c2:e0:66:fd:dd:2c:
c7:5c:28:6d:04:57:64:60:4c:72:c2:22:27:db:58:
fd:e9:a1:24:6a:7c:59:ba:80:4b:85:af:15:ef:0e:
f9:74:c5:1b:1c:56:95:75:a4:c1:78:5f:9d:2c:9f:
6e:96:a8:fb:5d:45:73:5d:12:81:fe:9e:47:6a:a1:
d6:37:e7:da:5e:e3:d0:8f:7f:44:d6:66:34:3e:39:
ff:26:70:5e:21:1a:8d:40:3c:ac:47:fd:93:d3:f1:
7c:63:df:28:55:08:a6:00:46:55:6f:35:ea:00:6e:
15:7b:ca:51:37:91:05:da:56:0e:bc:b4:7c:79:86:
32:13:89:fb:ea:4a:bf:59:96:ac:a3:8b:3c:1b:ff:
61:00:16:6b:67:84:8d:6e:67:04:13:04:31:93:b9:
53:1f:16:03:5b:2f:56:05:84:dd:7f:a8:61:e5:4b:
ca:a6:d0:aa:9a:58:06:23:58:94:ad:8a:a2:4f:4b:
0f:e8:94:28:3d:f8:8b:47:a4:2c:36:86:3e:1f:7e:
20:9b:b0:09:fc:ff:1b:50:87:4b:a0:4e:23:a9:89:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D9:CF:C3:E1:0F:8E:62:DA:ED:6D:CE:C4:BC:60:FE:DE:FC:A5:5F
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/ZtnPw-EPjmLa7W3OxLxg_t78pV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9884::/32
Signature Algorithm: sha256WithRSAEncryption
89:07:98:4e:65:14:13:59:5b:c3:17:8d:f2:8d:97:43:63:08:
1c:86:93:1c:5c:cf:78:31:23:08:82:27:2e:dc:85:34:5d:4d:
a2:43:75:2c:5f:06:ce:9b:f3:b5:50:d5:6d:0c:0f:02:53:68:
fd:6a:52:13:67:ca:2d:5e:27:62:24:cc:0a:46:9f:29:e7:7d:
60:d2:b7:95:6b:1e:e6:6c:80:4d:e6:d0:e5:34:21:68:60:45:
dc:46:6c:47:0c:82:a7:0a:3d:eb:3a:08:b6:28:0e:28:37:06:
12:02:2f:e9:33:2c:19:a3:50:b7:b6:a5:2b:a4:9d:b7:22:a4:
30:a3:0a:81:86:c9:43:c5:05:f0:fe:6f:4b:97:12:39:a6:63:
50:57:f7:8e:f3:f0:d5:f6:dc:5e:6b:91:06:c6:37:de:fb:98:
dd:58:fb:62:48:b0:c6:e4:c3:31:73:11:46:ef:6b:33:47:85:
8c:42:23:38:26:4a:89:18:c8:0f:b8:ce:41:cb:a9:3d:1a:ad:
8a:4a:5b:d8:2f:ba:54:8c:52:7c:09:0d:21:0f:70:ef:9f:9f:
4d:aa:9f:7e:08:92:14:a5:69:9f:48:44:35:63:5b:a8:35:1e:
13:7b:33:e7:5f:05:e7:05:6f:da:ac:e5:2b:ca:56:e2:3d:50:
d3:d9:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:11:24 2025 by rpki-client