Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q6scHVo8b9QdG2tKgBo_Uh_BvPM.roa
File: Q6scHVo8b9QdG2tKgBo_Uh_BvPM.roa (raw, json)
Hash identifier: 1TVogXC/QXx9+5h46pTl9jWyVnzhuDrv/0kHxk1sP+Y=
Subject key identifier: 43:AB:1C:1D:5A:3C:6F:D4:1D:1B:6B:4A:80:1A:3F:52:1F:C1:BC:F3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195C6E93FB99C839780D30725C5E834368C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q6scHVo8b9QdG2tKgBo_Uh_BvPM.roa
Signing time: Mon 24 Mar 2025 06:48:49 +0000
ROA not before: Mon 24 Mar 2025 06:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204335
IP address blocks: 2a13:c240::/29 maxlen: 29
2a14:1101:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:e9:3f:b9:9c:83:97:80:d3:07:25:c5:e8:34:36:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 24 06:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43ab1c1d5a3c6fd41d1b6b4a801a3f521fc1bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:07:ca:7b:90:7e:35:79:0d:cf:82:73:e6:
95:34:eb:62:38:fa:57:57:93:7c:b0:5a:ba:f9:4c:
97:16:40:be:62:b9:79:67:49:df:54:3a:55:4f:3b:
a1:77:9d:d5:7c:b2:2a:ee:04:0f:fb:cd:94:9d:20:
81:41:70:25:c1:26:7c:ef:ea:84:dc:37:d1:66:e2:
96:1e:97:54:d3:e9:d6:b0:ea:e1:a4:17:f9:d1:59:
7e:a1:4f:e1:50:f0:38:52:c7:1e:68:8b:d7:8e:71:
99:83:12:a0:69:11:97:cd:84:ce:b1:7f:cd:c2:c0:
12:48:1e:d7:88:aa:d2:4a:dc:51:84:1b:80:34:4b:
7d:94:d8:66:22:52:e4:0a:bd:eb:de:89:a4:15:8a:
74:78:97:db:55:f9:7e:bf:71:70:64:ef:12:cd:33:
ed:b9:e2:8d:01:db:fe:54:90:92:6b:42:18:c1:6a:
18:6e:99:5a:d8:be:a9:23:51:69:d3:32:ba:f0:e6:
95:69:cb:5c:4a:de:a3:41:b8:65:2f:62:46:21:bf:
e9:cc:c9:cf:dd:f8:f2:2e:b4:b0:fd:dc:77:dc:b4:
49:cd:ae:2e:9c:40:76:8a:14:74:49:65:d9:b8:9f:
bf:6a:59:e2:d6:25:a0:61:41:b7:f8:94:4d:c8:16:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:1C:1D:5A:3C:6F:D4:1D:1B:6B:4A:80:1A:3F:52:1F:C1:BC:F3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q6scHVo8b9QdG2tKgBo_Uh_BvPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
2a14:1101:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6e:76:b5:8b:c3:7d:80:9d:b3:2f:96:0c:b9:d4:ef:cf:e5:9a:
2f:14:92:a5:88:19:fe:18:03:19:92:70:6e:73:45:b2:e8:d4:
77:7d:2b:d0:c3:9a:8c:3c:9f:78:f3:a4:1b:08:90:47:6e:43:
e6:d8:5e:ca:fc:4e:f4:f5:4b:b2:95:9f:06:2c:32:46:29:6c:
1e:0c:5a:17:17:28:91:15:65:ea:d0:37:79:a3:f8:5f:03:77:
c0:89:e9:33:22:04:c6:02:f1:70:3c:12:69:65:7f:77:32:4b:
ba:3e:70:25:59:c0:c9:88:da:0b:2b:17:3c:a9:5a:c3:1f:2f:
74:48:f9:11:6c:fa:cc:28:93:80:7c:a0:2e:8a:25:0e:eb:4b:
5a:9d:c3:34:65:3a:41:8c:d7:31:96:6a:ea:83:69:a4:fa:da:
bf:2a:ab:cc:26:39:fd:a2:29:3c:80:37:73:79:75:39:82:46:
f2:98:5d:e6:8f:84:81:16:66:83:5c:a5:18:b8:52:66:d8:6f:
73:c7:cf:00:6a:ba:4a:1b:a9:b7:06:c9:8e:8e:97:66:39:8b:
f4:3b:62:75:6e:83:76:17:e2:e4:83:08:54:5a:75:64:42:9d:
b1:b9:69:c2:8f:0a:14:a7:b6:9a:53:60:7b:ac:28:c5:9b:53:
e9:a2:41:a3
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZXG6T+5nIOXgNMHJcXoNDaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMzI0MDY0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2FiMWMxZDVhM2M2ZmQ0MWQxYjZiNGE4MDFhM2Y1MjFmYzFiY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XoHynuQfjV5Dc+Cc+aVNOtiOPpX
V5N8sFq6+UyXFkC+Yrl5Z0nfVDpVTzuhd53VfLIq7gQP+82UnSCBQXAlwSZ87+qE
3DfRZuKWHpdU0+nWsOrhpBf50Vl+oU/hUPA4UsceaIvXjnGZgxKgaRGXzYTOsX/N
wsASSB7XiKrSStxRhBuANEt9lNhmIlLkCr3r3omkFYp0eJfbVfl+v3FwZO8SzTPt
ueKNAdv+VJCSa0IYwWoYbpla2L6pI1Fp0zK68OaVactcSt6jQbhlL2JGIb/pzMnP
3fjyLrSw/dx33LRJza4unEB2ihR0SWXZuJ+/alni1iWgYUG3+JRNyBZndwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFEOrHB1aPG/UHRtrSoAaP1IfwbzzMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvUTZzY0hWbzhiOVFkRzJ0S2dCb19VaF9CdlBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUDKhPCQAMG
ByoUEQGAMA0GCSqGSIb3DQEBCwUAA4IBAQBudrWLw32AnbMvlgy51O/P5ZovFJKl
iBn+GAMZknBuc0Wy6NR3fSvQw5qMPJ9486QbCJBHbkPm2F7K/E709UuylZ8GLDJG
KWweDFoXFyiRFWXq0Dd5o/hfA3fAiekzIgTGAvFwPBJpZX93Mku6PnAlWcDJiNoL
Kxc8qVrDHy90SPkRbPrMKJOAfKAuiiUO60tancM0ZTpBjNcxlmrqg2mk+tq/KqvM
Jjn9oik8gDdzeXU5gkbymF3mj4SBFmaDXKUYuFJm2G9zx88AarpKG6m3BsmOjpdm
OYv0O2J1boN2F+LkgwhUWnVkQp2xuWnCjwoUp7aaU2B7rCjFm1PpokGj
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:08:22 2025 by rpki-client