Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa
File: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (raw, json)
Hash identifier: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=
Subject key identifier: 40:8C:DE:31:18:37:26:B9:2D:FB:19:51:FF:9D:9C:B8:41:A2:B8:17
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274812CEE9A3EC0800D0422862F98612
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199436
IP address blocks: 2a13:b487:1b00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:12:ce:e9:a3:ec:08:00:d0:42:28:62:f9:86:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=408cde31183726b92dfb1951ff9d9cb841a2b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:de:bf:08:e2:32:41:5e:5b:96:71:b9:40:
ab:53:8a:dc:58:ef:47:79:09:ff:ca:b0:62:d6:70:
b3:ea:8f:3c:6c:55:8e:3a:96:c0:07:3a:9b:4a:77:
eb:1d:ed:ce:e6:80:23:5e:0f:39:ed:88:57:22:5a:
9b:43:6b:a5:c1:d4:82:49:99:c7:0b:6a:5f:9e:64:
ec:2a:3c:0a:fb:4f:3d:3c:e5:21:80:1a:f6:c0:f8:
04:cb:17:53:e9:5f:4f:fc:99:31:c0:b7:12:9e:60:
46:81:8c:c1:d4:13:e9:cc:ee:b6:e4:04:ce:ed:a6:
ea:d0:31:58:8d:74:e5:0d:7f:a9:16:d5:85:a9:35:
85:c6:1e:6b:58:67:49:93:7f:eb:33:63:bc:ca:0c:
76:1a:4c:83:35:b8:ed:d0:bf:53:69:5d:66:9b:6e:
b4:d7:d8:d3:05:4d:46:9b:27:af:ec:f3:e2:09:b1:
f1:ab:d7:c6:85:4f:9c:44:c5:1d:aa:1e:92:67:32:
a7:39:ff:11:d7:f6:7e:be:ba:62:b5:2b:ee:02:5e:
0b:b4:a3:a4:66:1d:92:14:00:18:99:79:4f:14:af:
75:45:ed:c1:f9:d4:8c:60:a4:8a:45:35:eb:66:9f:
9e:c5:af:a5:48:d6:1c:36:20:6c:50:65:a7:5d:29:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:DE:31:18:37:26:B9:2D:FB:19:51:FF:9D:9C:B8:41:A2:B8:17
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1b00::/40
Signature Algorithm: sha256WithRSAEncryption
bc:26:89:5c:e4:e4:10:24:5a:51:9d:b4:54:2c:bf:32:b3:97:
2a:87:6d:c1:e7:01:c8:3b:56:93:82:02:8e:74:0c:a0:9d:4c:
6e:ce:1e:9d:a3:b0:33:a0:34:0b:ac:aa:2c:28:bb:32:ab:67:
74:18:60:30:8d:df:a6:38:91:ea:5a:73:88:24:f9:2d:dc:d0:
bc:8d:f0:3b:9d:92:eb:0f:fe:87:87:c5:87:66:4b:1e:2f:8c:
ad:f4:25:9e:61:9e:43:89:cd:93:1a:52:b2:e0:29:ac:f6:3e:
34:7a:6d:0f:3c:0c:92:2c:82:26:8f:fb:0b:a2:03:e5:a7:3e:
ab:5a:fb:73:67:b9:3f:05:be:70:02:a5:37:91:7b:84:b6:08:
ca:cf:87:61:90:1e:43:6a:98:aa:7d:2c:ed:56:e3:11:17:d5:
2b:0c:d9:81:c7:ef:88:cf:53:45:39:74:26:f7:3e:90:fb:30:
2d:b3:a7:56:99:7b:9f:b4:3c:2b:02:6f:63:db:8d:c1:2d:9c:
aa:17:95:35:2a:a3:fc:04:86:d1:46:a2:04:dd:e8:a1:3a:3d:
66:63:1b:25:76:1b:50:74:af:64:4b:ff:a5:cd:e2:0e:13:10:
93:1b:ec:e1:f3:2c:6c:e6:58:c8:65:e4:13:14:a6:82:d1:e8:
e0:eb:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:51:47 2025 by rpki-client