Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/qObypTg-nOBL35cm5Sg2yM7Yo3s.roa
File: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (raw, json)
Hash identifier: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=
Subject key identifier: A8:E6:F2:A5:38:3E:9C:E0:4B:DF:97:26:E5:28:36:C8:CE:D8:A3:7B
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 01941FFA45D8E4F5F92E354AB17A24753EF1
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/qObypTg-nOBL35cm5Sg2yM7Yo3s.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:3b80:154::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:d8:e4:f5:f9:2e:35:4a:b1:7a:24:75:3e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8e6f2a5383e9ce04bdf9726e52836c8ced8a37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:78:eb:6d:a2:db:7a:36:f8:b6:bc:62:d1:
7c:bf:e2:e9:02:7b:e9:33:fb:63:a0:24:68:26:27:
9b:5e:3c:29:6e:08:ee:2b:63:3f:63:4b:61:c7:19:
93:3a:6e:e3:15:96:23:37:2e:55:2c:5d:75:cc:51:
8c:26:97:23:68:e0:26:63:c7:89:c0:c0:36:bb:b8:
96:89:32:c1:27:72:b0:1b:78:d9:e4:ed:2f:4f:b3:
f1:f1:33:50:8f:29:ce:e0:6b:c2:6a:85:d9:d7:47:
09:aa:38:96:a9:91:3f:36:59:a5:5b:02:86:ae:f4:
3e:30:38:44:28:57:bc:77:f2:de:90:63:ac:bf:bd:
be:77:d7:99:e5:b4:9b:24:9f:95:d7:99:2f:b7:53:
2b:f2:5b:44:1c:7a:b0:bb:c5:e6:17:c3:80:fd:3f:
18:02:1a:c5:a6:e5:5b:ad:ca:52:0f:c1:2a:9e:1b:
be:3d:f5:e0:c8:cd:09:d5:53:f7:38:49:18:b8:69:
4b:ea:42:21:4a:26:93:fa:80:a6:66:bc:54:03:6e:
13:83:c5:e4:3e:bd:9d:cc:0a:2b:de:a1:2a:9c:65:
eb:da:74:b6:96:ba:c5:3e:d2:ee:05:3a:aa:a9:4b:
74:8b:9c:19:b0:a5:8e:04:58:31:fa:cd:e3:b6:3f:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E6:F2:A5:38:3E:9C:E0:4B:DF:97:26:E5:28:36:C8:CE:D8:A3:7B
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/qObypTg-nOBL35cm5Sg2yM7Yo3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3b80:154::/48
Signature Algorithm: sha256WithRSAEncryption
66:91:19:5b:ec:c9:96:26:25:f4:9c:9c:f1:ec:bc:ae:23:74:
c9:34:5e:db:7f:53:12:9d:b4:f1:0c:d0:b5:27:50:2a:d1:c3:
0a:97:11:3c:63:59:6c:dc:2b:65:38:96:cc:66:b0:03:33:2f:
88:9d:9e:59:19:74:0e:e3:44:92:16:90:f9:e6:55:82:04:6c:
21:39:24:d6:d9:a3:18:fc:a8:ce:f7:00:1a:7e:2e:ee:ed:87:
51:16:41:c1:f8:74:fe:56:4a:7d:fa:66:91:7b:5b:a7:b6:8b:
fc:7c:c1:1b:58:d1:9a:72:27:3c:37:7b:8a:18:f0:ad:12:15:
4d:a4:bc:de:af:9a:00:ee:ae:75:a3:87:58:35:1b:e1:61:e7:
f6:4d:f8:25:5e:ea:77:d1:c6:ff:94:13:79:68:8e:22:a6:72:
47:48:38:29:14:10:e6:d3:36:91:63:2f:70:36:bb:10:65:dc:
b7:7b:b5:ab:5a:b6:4e:49:c3:29:ae:22:25:ce:3c:67:79:62:
15:31:8b:5e:67:94:3b:69:d8:94:7f:a5:b4:cb:5c:8c:4f:0f:
81:31:e4:6e:df:ff:38:ab:14:df:c8:7f:62:21:36:1e:01:ab:
ff:73:7f:9e:68:ca:a7:02:02:17:7c:fc:11:0d:9b:42:a7:d4:
09:a0:76:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:53 2025 by rpki-client