Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa
File: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (raw, json)
Hash identifier: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=
Subject key identifier: A8:9E:E2:CB:EF:74:1E:B3:79:27:A6:2F:FC:41:9C:25:81:F7:3F:41
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019425FC62E41298A77B24C49544CB12A55C
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200280
IP address blocks: 2a0a:4a40:2270::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:62:e4:12:98:a7:7b:24:c4:95:44:cb:12:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89ee2cbef741eb37927a62ffc419c2581f73f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:f1:60:cd:e4:67:bb:a3:b3:34:61:45:2f:
b3:0f:6b:ec:a9:75:a1:e2:55:c6:d4:eb:b8:ee:3d:
c6:69:22:df:52:d8:04:97:01:48:0a:61:5d:ea:07:
ec:98:bf:55:bf:9f:e9:9f:ef:7d:16:9d:65:c4:97:
af:15:90:90:a0:da:e4:34:8a:60:e2:aa:20:28:0f:
21:d6:c1:74:e7:7a:2c:b5:5b:e7:3c:06:b0:36:f2:
b8:87:73:a6:6f:4c:66:c0:48:d4:c5:5c:1f:88:e2:
56:03:8d:f3:9a:e7:3e:84:a7:89:b1:1a:e4:64:8a:
62:89:49:8c:0d:03:29:76:a2:13:aa:a3:f9:bd:3d:
23:a2:d5:e5:69:e9:c6:02:15:cb:d5:5b:04:84:cd:
69:5a:ed:69:f9:5d:84:d5:96:79:c5:35:07:ab:e6:
6e:5d:eb:c4:b7:20:3c:fa:57:75:bc:1b:9b:51:e9:
d3:d8:49:f2:61:e0:cd:c0:32:1c:c2:65:99:2b:26:
f4:ee:4b:f6:1f:71:53:67:75:5a:4c:9c:9c:47:c9:
cd:b4:7f:ee:37:ca:5e:bd:36:fe:35:e5:13:78:18:
2f:51:ba:a1:1b:d8:50:8a:e3:77:d6:42:a5:2a:66:
41:66:81:ec:50:9a:f2:67:cd:d9:e8:1e:d0:76:23:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:E2:CB:EF:74:1E:B3:79:27:A6:2F:FC:41:9C:25:81:F7:3F:41
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4a40:2270::/44
Signature Algorithm: sha256WithRSAEncryption
39:70:3b:ec:1f:1d:2b:6d:3b:72:23:82:36:47:9c:55:3f:07:
ff:27:74:c5:b3:a5:19:0f:15:e6:ae:fc:08:ed:33:b4:9e:21:
c3:5b:dd:b1:e6:4d:eb:fb:d2:f3:9a:f9:4e:74:ec:40:b8:b4:
ad:5c:e8:9a:3c:44:83:2a:32:e3:76:bf:13:cf:bb:7c:8f:5e:
f5:2f:f6:71:fc:ab:73:99:e9:94:e9:eb:d8:67:34:a3:1d:df:
62:11:53:6c:16:8c:fc:81:a7:28:32:b0:ac:bc:da:29:4b:68:
f7:0c:18:7b:2c:7d:28:3d:75:a9:dc:aa:b9:9b:2e:63:74:01:
bc:a5:1c:1f:ef:1c:39:30:68:df:64:78:c2:19:36:52:60:7c:
9e:68:4c:f5:82:02:99:01:fb:59:15:87:2b:03:9d:76:2d:44:
7e:1e:a9:33:6a:b3:3f:13:48:ec:c8:91:d4:2f:70:4d:d3:7b:
50:a5:c5:6a:c3:2d:52:6f:73:e1:55:41:90:fc:e1:ab:cf:d9:
e1:6c:ce:b4:dd:62:49:dc:0b:7a:3a:e6:81:6c:75:d6:09:38:
ae:ae:5c:06:e5:e3:34:61:c5:f7:27:d1:20:40:06:85:a1:57:
13:13:5e:ca:8a:1c:5b:79:3f:ef:4e:d3:8a:a6:51:5b:07:0c:
1d:6b:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:25:44 2025 by rpki-client