Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qtCN3PjAx8dJ_6QlmBa6tJeD8PQ.roa
File: qtCN3PjAx8dJ_6QlmBa6tJeD8PQ.roa (raw, json)
Hash identifier: FZeBuFK4f8Peunnph7+wJdMtHjcpN2Zjkfk+v4xnNno=
Subject key identifier: AA:D0:8D:DC:F8:C0:C7:C7:49:FF:A4:25:98:16:BA:B4:97:83:F0:F4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214418811FD755DC11588D62434DE0D7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qtCN3PjAx8dJ_6QlmBa6tJeD8PQ.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:e9c5::/32 maxlen: 32
2a14:2dc0::/32 maxlen: 32
2a14:2dc1::/32 maxlen: 32
2a14:2dc2::/32 maxlen: 32
2a14:2dc3::/32 maxlen: 32
2a14:2dc4::/32 maxlen: 32
2a14:2dc5::/32 maxlen: 32
2a14:2dc6::/32 maxlen: 32
2a14:2dc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:81:1f:d7:55:dc:11:58:8d:62:43:4d:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aad08ddcf8c0c7c749ffa4259816bab49783f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:8b:b8:52:f2:0f:84:76:f4:de:78:df:7e:
50:cd:b9:c9:87:f6:1b:77:53:1d:a0:e8:63:e5:a1:
43:ad:14:ee:ab:83:0d:08:fd:d4:6a:96:14:2f:79:
25:a1:da:1f:9f:2a:0f:36:a9:03:49:bd:52:3c:9b:
f4:81:5b:ee:de:6a:eb:c6:4b:fd:b5:16:a5:80:b0:
8b:15:65:71:06:26:b2:8e:24:e2:22:60:e3:48:31:
94:0f:90:64:7d:79:96:36:30:e7:fb:b6:18:eb:71:
10:fc:b6:8f:23:83:98:93:75:e2:28:32:60:ec:24:
0b:27:a6:fe:37:b2:43:33:c8:66:de:01:3a:73:13:
0e:d7:41:f2:fe:55:bc:85:71:0f:7a:ce:7d:1e:38:
4e:51:d5:5c:7a:46:72:b8:3d:76:88:a1:d8:94:64:
27:68:38:bb:84:b7:2a:f3:1b:13:74:53:22:3d:1e:
76:62:6b:76:ae:b0:60:00:a4:50:ea:34:09:b0:5d:
26:ac:ee:44:d7:90:1c:51:f7:12:c8:71:f0:61:9d:
b1:b1:b3:c6:5a:6f:ec:bb:80:00:71:61:1b:5a:49:
00:68:56:1c:0d:d1:53:4e:d4:6d:1c:f0:cc:3e:71:
69:85:3e:15:9f:f9:71:99:44:f8:07:10:36:be:6f:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:8D:DC:F8:C0:C7:C7:49:FF:A4:25:98:16:BA:B4:97:83:F0:F4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qtCN3PjAx8dJ_6QlmBa6tJeD8PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e9c5::/32
2a14:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:9b:71:df:2c:d3:62:0c:38:8f:81:5c:2f:c4:13:10:36:9e:
b6:48:c2:ae:b5:a1:33:af:70:fd:2d:e3:2e:72:0f:6d:ec:6d:
26:de:0f:96:55:c6:ca:14:6f:cd:f2:a0:d8:62:63:83:fb:6a:
23:13:58:e2:c6:68:f8:b8:5f:0d:ee:c5:2d:3b:50:af:e8:21:
27:05:7c:96:00:b3:09:56:ca:31:33:1e:09:06:f1:5e:10:f8:
95:e5:18:f7:fa:d5:d7:89:79:8e:41:c7:4c:98:ce:94:92:4d:
ef:fe:10:7a:91:01:26:0e:72:67:9f:2f:be:02:c5:8c:41:00:
a3:bd:cf:4d:45:ea:76:ac:ad:a0:f1:18:92:b6:52:c7:8c:43:
fb:62:ea:80:68:57:f8:17:a0:c4:b5:cf:b0:c5:81:22:ed:3e:
96:cc:2e:5f:1b:47:7f:1e:14:e6:fa:d6:f4:a4:fc:46:94:2a:
03:38:91:eb:b2:a8:ab:29:1e:e2:ae:6f:50:a9:32:04:93:4b:
4e:8a:e9:a0:23:4b:33:bd:96:0b:c4:d1:1c:8a:6f:be:ce:ef:
81:23:5a:36:da:e0:93:91:d8:77:3f:ed:76:b9:eb:0a:7f:f5:
02:07:6b:b6:33:93:f9:ce:34:33:99:a3:7b:9a:10:f6:2e:9a:
b0:8f:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:54 2025 by rpki-client