Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/q0gz12dOkS8aB29Q_043GfxfVIs.roa
File: q0gz12dOkS8aB29Q_043GfxfVIs.roa (raw, json)
Hash identifier: LEOh5d0q7PvifpGKW2PVg5K1+dbJUjchmWHoaVgKTnA=
Subject key identifier: AB:48:33:D7:67:4E:91:2F:1A:07:6F:50:FF:4E:37:19:FC:5F:54:8B
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0193ACDCA99E3199265896F7D11E14BEA322
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/q0gz12dOkS8aB29Q_043GfxfVIs.roa
Signing time: Mon 09 Dec 2024 19:19:22 +0000
ROA not before: Mon 09 Dec 2024 19:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:3c40::/32 maxlen: 32
2a11:3c41::/32 maxlen: 32
2a11:6bc1::/32 maxlen: 32
2a11:6bc2::/32 maxlen: 32
2a11:6bc4::/32 maxlen: 32
2a11:6bc6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:dc:a9:9e:31:99:26:58:96:f7:d1:1e:14:be:a3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Dec 9 19:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab4833d7674e912f1a076f50ff4e3719fc5f548b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:08:be:c8:63:04:56:89:f2:50:c8:b6:63:bf:
ac:71:af:b5:fe:89:ab:80:69:22:42:0a:a5:b1:3e:
76:96:bc:08:5a:7f:7c:b8:f0:c6:b3:b6:ba:16:42:
dd:7a:34:3a:94:f9:d1:e0:ad:45:53:48:d7:c4:6f:
74:a7:b8:78:72:b5:a2:85:f1:1a:57:7f:59:ce:9a:
63:59:42:1f:82:88:e4:5f:4d:66:94:b1:65:5d:fa:
a1:61:cd:4f:3a:cc:4a:1e:a2:c1:da:91:a7:87:b9:
4f:f8:20:68:33:b3:c1:be:54:96:05:6f:f3:09:f7:
78:eb:4a:cf:a4:70:1c:fb:f7:4e:f3:94:cc:71:6a:
d6:db:fa:45:67:cd:15:a3:45:09:7f:38:5a:a6:61:
6b:c4:8b:13:c5:2d:0e:7b:f6:4c:eb:d4:34:94:15:
6d:bb:3f:36:c3:4d:aa:bb:4b:66:76:14:23:c5:37:
a8:f6:b6:a8:9b:d9:6e:36:c1:ab:92:ea:71:da:23:
b9:a2:58:77:9f:f5:b8:4c:3d:83:75:d8:49:24:f4:
d8:26:21:9f:df:06:e0:a0:55:3b:67:46:a7:35:b8:
fa:8f:1a:9a:6d:fa:3e:d0:c0:89:13:60:f8:50:c7:
c2:a7:83:72:da:8c:c9:32:6a:22:45:f2:8e:cf:06:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:33:D7:67:4E:91:2F:1A:07:6F:50:FF:4E:37:19:FC:5F:54:8B
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/q0gz12dOkS8aB29Q_043GfxfVIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c40::/31
2a11:6bc1::-2a11:6bc2:ffff:ffff:ffff:ffff:ffff:ffff
2a11:6bc4::/32
2a11:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
cb:b1:a2:ac:db:a3:b1:25:fe:4c:70:4d:d8:3b:84:90:72:c1:
d2:0c:a9:7c:c7:75:b2:65:de:4f:88:1e:96:bd:a9:71:57:86:
7a:29:58:dc:fa:61:b1:b1:1f:9c:44:c1:8a:d0:f7:92:48:ba:
da:95:c6:4e:c5:c8:1d:2e:58:ec:9a:c3:2c:66:b3:8c:3f:26:
03:91:fb:9f:11:54:53:df:67:d2:d2:53:00:d4:ba:d1:b3:01:
7e:bc:d4:f0:81:84:4b:4f:5f:a5:70:ae:f0:bf:42:34:d4:d3:
8a:50:0d:be:56:b6:0f:ab:24:b0:be:61:18:95:ac:69:e8:43:
4a:b1:01:b8:f8:04:f1:db:32:09:1f:42:a2:fa:26:95:9d:c8:
80:18:e0:64:54:23:e6:c8:3e:a6:e8:70:dc:62:b5:be:8a:fa:
c9:a2:01:e0:94:ae:79:90:41:e2:a0:e8:7e:bc:9e:36:5d:d3:
e7:f4:60:ab:3d:b0:16:b5:57:cb:93:f5:59:0c:bd:68:dd:40:
e4:14:f3:b4:79:d0:2b:f2:f6:af:06:49:c8:51:f5:b3:21:e5:
94:35:1f:f9:70:3a:25:7b:44:23:e8:18:ae:52:a5:f1:f9:3c:
42:6e:9c:e1:69:eb:34:bf:30:d9:06:bb:f0:63:2d:4b:e4:a1:
86:ba:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:15 2025 by rpki-client