Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/quGmI9u7kZ_srTH3LAyxtNKvCAo.roa
File: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (raw, json)
Hash identifier: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=
Subject key identifier: AA:E1:A6:23:DB:BB:91:9F:EC:AD:31:F7:2C:0C:B1:B4:D2:AF:08:0A
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019424448B5259A2754CE237BCE7EF5BD546
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/quGmI9u7kZ_srTH3LAyxtNKvCAo.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200373
IP address blocks: 2a07:db80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8b:52:59:a2:75:4c:e2:37:bc:e7:ef:5b:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aae1a623dbbb919fecad31f72c0cb1b4d2af080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:ec:4e:8c:d4:d2:64:2b:53:4c:e4:f7:10:
94:f7:44:ec:e2:a7:07:21:09:6a:1b:7d:5c:61:6b:
34:f6:24:6d:f9:95:1b:8e:60:36:bd:15:ec:64:fb:
8e:69:ac:17:d9:b2:75:03:4f:6d:16:46:77:58:21:
a7:6d:77:7b:79:e2:d4:6e:50:86:4e:78:59:13:78:
7d:7b:ff:ba:d7:19:f3:78:ef:05:ad:f7:28:d8:74:
46:5b:23:32:ff:72:8e:c1:66:33:83:79:a8:3b:b0:
3f:4b:d6:a7:13:03:38:11:c9:c2:8c:1b:22:dd:58:
e3:f9:1e:b3:5f:a4:ea:77:a3:21:9a:18:23:8c:2d:
ab:e3:9c:95:f9:69:f1:69:fb:ed:d2:c6:ff:99:30:
e8:af:a0:0d:57:b5:b9:40:7a:d2:2f:38:bc:f7:d9:
cf:84:aa:8d:9f:0d:f5:c0:97:2c:f1:99:77:a8:47:
3a:33:ac:6a:63:9a:33:f4:82:93:f3:8f:11:73:93:
46:0e:39:ea:d6:64:d3:fa:22:34:50:ea:c0:c6:71:
ec:13:d4:ff:9c:6c:25:59:2a:5f:0b:1b:d3:84:e5:
a5:ca:e8:83:36:45:94:1f:34:53:0a:6c:8b:c1:62:
60:4d:80:c6:c0:36:6e:9b:05:d6:c7:8a:14:3b:79:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:A6:23:DB:BB:91:9F:EC:AD:31:F7:2C:0C:B1:B4:D2:AF:08:0A
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/quGmI9u7kZ_srTH3LAyxtNKvCAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db80::/29
Signature Algorithm: sha256WithRSAEncryption
7a:88:63:e1:95:b6:68:cf:06:3d:a0:7e:3f:df:7f:ca:a0:60:
05:6b:74:90:eb:5d:0f:ae:c3:a5:bf:26:a9:52:32:11:71:83:
ec:c7:2c:67:07:7b:a8:08:b9:cf:da:2d:63:d8:b9:e3:d4:31:
c8:80:ed:d7:be:25:1f:03:84:fa:96:a3:a9:ff:5f:5f:44:7a:
99:ea:cd:5a:88:05:29:09:ef:d7:2d:d5:9f:c3:10:a5:19:39:
ce:b2:57:90:f0:e4:51:d8:8c:2d:6c:ce:23:c2:dc:9b:06:1a:
9d:c8:e8:28:e5:11:a3:72:69:c5:68:c0:d5:6a:11:32:4b:1d:
ff:c1:61:51:08:34:b2:60:ee:ee:80:73:67:26:ab:87:4a:b5:
f9:b8:22:fe:16:30:8f:14:9d:5b:d3:f3:31:9d:f7:b1:89:71:
fd:fb:f5:c4:55:41:e0:9d:ac:3a:61:96:bb:64:a6:86:9a:d0:
99:54:48:e6:3c:95:6c:5d:34:56:b5:c6:5a:71:7b:59:53:36:
70:ce:fa:c3:b9:2e:c5:f4:db:35:f5:65:02:c0:55:34:00:b7:
80:b0:0f:c6:80:a2:98:87:f0:9c:a6:ec:7f:86:5a:e0:d2:1f:
d3:9f:52:9d:72:b3:61:32:85:ec:52:9c:2e:b5:1a:c1:2b:c4:
08:da:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:27 2025 by rpki-client