Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/QKf5_Ct7cOYbPnqWixZPxY6y0cc.roa
File: QKf5_Ct7cOYbPnqWixZPxY6y0cc.roa (raw, json)
Hash identifier: IS4SPsD/GFLRRBhtIAuRuV3cz5F5DKX/B7pAfWLhI8Y=
Subject key identifier: 40:A7:F9:FC:2B:7B:70:E6:1B:3E:7A:96:8B:16:4F:C5:8E:B2:D1:C7
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204EB00AB78B2E4865B1759E27EEEE
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/QKf5_Ct7cOYbPnqWixZPxY6y0cc.roa
Signing time: Wed 01 Jan 2025 13:48:50 +0000
ROA not before: Wed 01 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214624
IP address blocks: 2a0e:8f02:3000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4e:b0:0a:b7:8b:2e:48:65:b1:75:9e:27:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a7f9fc2b7b70e61b3e7a968b164fc58eb2d1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:89:84:7c:48:27:e9:42:2d:0a:bb:33:0f:
89:bb:a1:a6:c3:80:05:ee:63:e8:a2:26:5f:bc:b9:
79:cb:dd:4e:ef:ca:1a:e7:c8:b8:5f:1c:64:23:25:
e6:a5:4b:da:23:af:d2:47:d8:ff:c0:0c:94:c0:76:
3e:a5:5a:93:52:e8:fe:22:6d:9c:fe:d4:d2:4b:fb:
45:2b:09:cf:e0:f2:93:ea:d4:e5:31:37:ad:b6:92:
5d:f2:48:9c:8a:3a:6f:73:2e:bb:66:c6:c7:ed:a0:
16:d2:b8:1a:60:f9:51:97:ca:1e:63:8e:04:c3:d7:
e0:81:87:8d:6d:51:d4:dc:0a:ad:f8:64:5a:9c:2f:
65:cd:ab:80:c6:9a:c9:42:0b:4b:dd:e7:9f:33:3a:
4f:68:3f:10:a6:58:e9:32:4e:68:d5:a9:db:38:7c:
c7:19:1c:29:23:c0:89:a8:cb:e4:ce:6a:3f:72:cb:
4e:e8:e7:11:3a:29:5c:74:fb:a4:cc:f2:d6:97:cb:
07:92:e8:23:f4:4c:1d:96:8f:c1:ef:e8:51:dc:15:
21:e3:c1:7d:f2:78:7e:a8:eb:4b:39:59:4e:03:4b:
b9:fe:71:00:c3:d7:89:2d:b1:8e:47:24:9b:5a:e0:
94:fc:88:7c:40:1c:86:c4:a8:b3:5b:ce:ad:ea:1d:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:F9:FC:2B:7B:70:E6:1B:3E:7A:96:8B:16:4F:C5:8E:B2:D1:C7
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/QKf5_Ct7cOYbPnqWixZPxY6y0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:3000::/44
Signature Algorithm: sha256WithRSAEncryption
55:b9:c5:b6:7a:a9:0a:86:56:a6:bd:c2:bc:97:27:25:f6:4b:
c6:75:fb:db:a8:6f:33:09:bc:5b:0b:11:4f:d7:5c:b7:c2:88:
a2:83:21:ac:28:81:5c:8c:86:4f:47:30:81:ac:09:35:e4:67:
a6:05:20:3e:4d:ee:f8:e8:ec:45:70:2e:2c:5f:81:34:27:f7:
1a:c6:94:ff:b2:6e:55:90:7c:62:19:71:d1:f5:0d:3e:83:37:
38:ad:74:57:67:37:a8:91:09:32:60:7a:f8:24:2d:88:54:57:
fa:61:63:78:7f:95:6c:a2:51:87:43:35:1b:f4:60:f8:a7:53:
ef:bd:97:24:be:d0:47:e5:34:53:c4:a4:7b:ec:f8:08:ca:93:
e2:6f:87:ac:a4:f0:08:28:7a:bf:e5:e6:d2:bb:0a:95:09:d8:
77:a1:95:22:78:67:39:8a:ba:f0:d3:a2:f4:e0:7c:98:f6:5b:
6b:88:aa:26:f5:9c:be:ec:5d:c0:ab:71:32:88:05:df:cf:c7:
d7:b8:89:a7:f0:7e:06:26:fc:7d:aa:fe:9d:09:47:3e:bd:e9:
da:54:0c:51:f2:71:1c:4f:6a:a4:0e:0a:2c:1c:de:29:01:d8:
64:ea:65:7e:d8:98:26:12:2e:7d:48:f9:2e:ce:32:29:23:0b:
ce:41:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:57 2025 by rpki-client