Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa
File: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (raw, json)
Hash identifier: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=
Subject key identifier: A8:5C:C0:FE:96:7F:C4:65:B0:43:37:C9:30:89:F3:7D:60:CA:92:E4
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01942067EDB96AA346D6AE6EFFD75F79A010
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35062
IP address blocks: 2a02:8205:480b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:b9:6a:a3:46:d6:ae:6e:ff:d7:5f:79:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85cc0fe967fc465b04337c93089f37d60ca92e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:3b:48:c8:30:2d:ad:c6:16:ed:9e:e7:f3:
57:e5:a0:19:da:f4:0e:11:15:23:7f:2e:f7:5a:b6:
d7:60:5b:64:c1:89:87:36:6a:81:24:7a:b5:32:c5:
a9:1e:77:b4:67:5f:61:7e:ea:28:03:a7:27:0a:3d:
c4:bb:4b:52:39:63:f8:d7:64:97:27:2b:a8:87:61:
ba:1e:95:af:51:7c:f0:6f:6e:2e:e5:3b:fb:35:4e:
f5:f6:1b:56:c6:d0:5c:b0:30:1e:34:9a:f2:a1:42:
41:8e:cb:45:45:4f:e2:1a:76:e6:04:fe:8c:95:90:
68:9c:fb:82:12:bc:2e:fa:bd:3d:a0:67:65:9a:c7:
41:e0:af:4c:d0:63:9d:be:71:ff:20:43:f4:3e:f7:
e9:80:24:7f:e3:41:88:be:7d:a3:9f:01:fa:e4:b6:
cc:5b:8b:70:7b:4e:dd:9a:40:83:43:9f:92:9a:0b:
46:c5:76:67:58:ad:40:d4:ea:ba:69:56:57:ca:07:
ad:e8:5b:1c:e7:48:bd:1d:b1:29:09:df:54:11:80:
c5:bd:4b:1a:c7:64:5e:b9:27:ae:f2:f0:da:51:c6:
6c:06:14:88:51:08:7f:08:57:d0:57:05:c5:3c:f8:
1a:a8:fc:d4:8a:fd:07:59:8c:a8:20:b7:61:86:78:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:C0:FE:96:7F:C4:65:B0:43:37:C9:30:89:F3:7D:60:CA:92:E4
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:8205:480b::/48
Signature Algorithm: sha256WithRSAEncryption
41:f0:f5:e3:6c:af:59:4e:e1:f9:87:3e:9d:bc:39:d0:d7:dd:
ff:9d:cc:c5:95:64:5f:11:a9:9d:fe:e4:3b:38:cd:a1:52:c8:
48:50:7d:83:77:82:16:87:3e:10:8b:bd:ff:2d:65:30:cb:75:
80:1f:4d:a4:d7:9c:22:81:ad:97:e7:a3:c2:63:5a:44:59:14:
ac:0e:5b:c0:16:58:6e:fb:1e:ab:60:3d:0f:88:9a:1e:36:21:
e8:be:32:22:59:7f:8f:90:ba:3e:88:9e:58:e8:5f:6a:07:39:
dd:6f:bd:12:1a:ce:3b:0d:31:d0:c8:cc:2b:c0:fc:ff:88:8f:
26:1b:c2:8c:79:87:00:4d:f0:e4:8b:86:7a:67:40:bc:35:20:
ec:86:75:fc:7c:37:de:b9:34:74:07:5a:c0:44:b0:ca:18:2f:
bd:d8:a8:88:cd:14:f3:51:3d:70:77:37:4b:55:ae:8c:85:62:
d2:4f:4a:46:53:9a:f0:21:7d:41:42:71:14:43:f7:c1:d7:68:
ad:e6:cb:2c:d2:ec:0d:1d:1f:ea:01:76:07:a6:ed:05:76:ad:
06:c7:cb:63:57:28:65:a1:0f:5b:e1:bd:b0:ff:0d:3a:e4:13:
ce:ca:40:b2:15:07:42:5a:51:d1:f0:bd:c9:c4:1a:34:7e:19:
61:e5:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:21 2025 by rpki-client