Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QFXRShhb5m-scJ7D_1q54eQ_WDA.roa
File: QFXRShhb5m-scJ7D_1q54eQ_WDA.roa (raw, json)
Hash identifier: a/5GA+gArWIhJVVvlILtpCWAxAgsonl/CGeanGy4czw=
Subject key identifier: 40:55:D1:4A:18:5B:E6:6F:AC:70:9E:C3:FF:5A:B9:E1:E4:3F:58:30
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC757D0BE256B0FA71600A773EDF2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QFXRShhb5m-scJ7D_1q54eQ_WDA.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51861
IP address blocks: 2a0c:9a40:80a0::/44 maxlen: 48
2a0c:9a40:80a0::/48 maxlen: 48
2a0c:9a40:80a1::/48 maxlen: 48
2a0c:9a40:80a2::/48 maxlen: 48
2a0c:9a40:80a3::/48 maxlen: 48
2a0c:9a40:80a4::/48 maxlen: 48
2a0c:9a40:80a5::/48 maxlen: 48
2a0c:9a40:80a6::/48 maxlen: 48
2a0c:9a40:80a7::/48 maxlen: 48
2a0c:9a40:80a8::/48 maxlen: 48
2a0c:9a40:80a9::/48 maxlen: 48
2a0c:9a40:80aa::/48 maxlen: 48
2a0c:9a40:80ab::/48 maxlen: 48
2a0c:9a40:80ac::/48 maxlen: 48
2a0c:9a40:80ad::/48 maxlen: 48
2a0c:9a40:80ae::/48 maxlen: 48
2a0c:9a40:80af::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c7:57:d0:be:25:6b:0f:a7:16:00:a7:73:ed:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4055d14a185be66fac709ec3ff5ab9e1e43f5830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:4f:cc:52:01:11:fb:53:d3:fb:c5:23:ba:
ce:e4:3c:06:8a:5d:ef:d9:29:9c:9d:4c:3a:4f:9a:
04:9b:ef:57:6d:0e:0a:0f:aa:5d:65:33:e9:5b:80:
bb:55:27:01:c6:ae:2f:e8:df:fe:c9:43:5a:d5:3c:
b3:39:63:50:97:dc:36:84:8d:56:16:a5:53:c7:8b:
6f:58:12:de:6a:55:5b:e9:55:d6:7b:b3:65:8e:15:
c3:36:2a:52:f7:cd:85:f4:8b:c3:11:1e:6d:27:89:
a6:bd:ae:e3:07:3c:6b:5c:14:4f:60:bd:02:a0:e1:
dc:18:df:56:87:d4:c4:1c:5b:b1:3a:aa:cb:02:cb:
59:93:f3:c4:da:6f:bf:c8:bb:81:9d:37:4f:37:0d:
02:b3:73:20:d7:08:d1:df:78:7a:75:40:4c:2e:2b:
a2:99:61:4f:fe:56:bf:b0:0b:b2:b6:15:4e:92:a5:
a4:91:76:8b:e2:15:ec:80:bf:6d:88:2b:59:6d:2e:
68:ee:f4:33:16:c9:3f:c2:54:62:aa:88:77:d4:73:
d9:62:ee:cd:fc:97:0a:d1:38:93:b9:d5:34:b6:91:
30:47:84:94:55:e2:fa:6f:05:55:e4:a4:99:46:3d:
a1:b9:a2:8e:c8:a3:8e:a1:af:fb:14:04:3d:2e:16:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:D1:4A:18:5B:E6:6F:AC:70:9E:C3:FF:5A:B9:E1:E4:3F:58:30
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QFXRShhb5m-scJ7D_1q54eQ_WDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80a0::/44
Signature Algorithm: sha256WithRSAEncryption
58:c5:3b:a7:15:69:2c:29:c8:0e:2a:b3:07:2f:44:98:94:83:
ba:23:74:ba:2c:22:60:35:95:cf:1e:af:9a:a8:a2:c9:38:58:
bf:7b:08:5d:61:56:74:58:60:f4:f1:17:93:0d:1d:d3:47:f9:
1c:c8:25:fe:69:d3:89:ba:a3:3a:d3:05:7e:07:8c:61:a2:ef:
dc:27:bd:72:ba:e1:03:73:b5:e8:51:ce:a4:50:b8:8a:1d:5a:
8a:ff:df:33:af:19:3f:e7:d6:55:0b:67:0d:0e:00:47:48:0c:
c1:ae:f1:b7:dc:99:b6:e8:0e:2e:aa:71:9a:c3:0c:f2:d6:78:
4c:c3:7c:f7:9d:ba:95:64:be:74:40:6f:e1:27:64:9a:17:fb:
d5:8e:c2:00:5a:ec:a4:9d:33:90:61:d8:01:ce:a2:61:70:fc:
87:d5:9c:1b:ee:4b:77:31:42:55:ef:c4:32:cb:80:46:da:d8:
d1:85:4d:14:58:07:ff:3b:43:4a:7d:e2:6c:b7:98:26:68:e8:
2a:54:76:58:62:e2:ee:53:21:8d:6e:97:59:01:c2:b3:42:db:
61:5c:99:82:53:5a:1f:58:4a:dd:ef:0b:1a:bc:4a:24:96:8a:
7f:30:cf:e8:13:63:b9:1b:7a:85:19:f5:e7:ef:50:91:af:25:
14:a8:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:40 2025 by rpki-client