Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/qToEjIcbX-g4MaK3-_Do9I82K3k.roa
File: qToEjIcbX-g4MaK3-_Do9I82K3k.roa (raw, json)
Hash identifier: K43h36vZFi8UNtlHWta2A93hKM7TQlBai5e4JYn6GzQ=
Subject key identifier: A9:3A:04:8C:87:1B:5F:E8:38:31:A2:B7:FB:F0:E8:F4:8F:36:2B:79
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 06734682
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/qToEjIcbX-g4MaK3-_Do9I82K3k.roa
Signing time: Sat 01 Jan 2022 03:57:23 +0000
ROA not before: Sat 01 Jan 2022 03:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49835
IP address blocks: 2a0f:54c0::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108217986 (0x6734682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Jan 1 03:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a93a048c871b5fe83831a2b7fbf0e8f48f362b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:a1:79:c6:19:27:85:2e:33:74:79:91:89:
1f:30:9c:6d:ef:4d:ba:a7:e3:7d:45:59:fd:09:ea:
b0:c4:ec:34:08:c5:46:d5:5c:a0:cd:8a:6c:b4:b2:
79:5c:8f:4e:af:e3:35:48:cb:d7:45:ec:25:fd:fd:
4e:bb:67:92:3a:03:92:f4:08:08:4f:ff:05:df:66:
49:10:54:75:68:df:79:2a:bf:c1:92:b6:7d:6d:5e:
e3:ed:75:da:6b:c0:ba:82:ae:eb:94:c2:40:e5:6d:
38:6e:4f:ed:8c:ec:22:62:a6:b7:fc:b5:56:0b:da:
f6:15:a4:ac:ea:1f:43:70:73:7f:26:ae:b0:a9:e4:
d9:ea:8f:34:b0:e9:bc:d5:f9:d4:34:cc:3e:68:4b:
09:2a:55:b1:85:f0:ed:3f:9d:c8:64:2e:9b:89:5b:
42:1e:51:99:17:04:e1:6e:02:03:ca:05:e8:d2:08:
d5:42:d7:14:03:dd:0d:84:f2:3a:e8:30:6e:75:11:
e2:1b:5e:fc:0f:fc:50:9a:7f:74:cb:a6:2f:5f:81:
49:b4:02:09:31:55:a8:a9:d5:cd:c5:d0:a5:9c:2f:
35:ff:bc:9d:60:51:c0:16:78:d9:e5:a3:5a:7c:4a:
39:f1:34:e6:7e:8d:7f:db:7f:30:16:74:84:99:71:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:04:8C:87:1B:5F:E8:38:31:A2:B7:FB:F0:E8:F4:8F:36:2B:79
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/qToEjIcbX-g4MaK3-_Do9I82K3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:54c0::/30
Signature Algorithm: sha256WithRSAEncryption
04:95:4b:93:1b:40:0b:6c:da:c7:f6:e5:c8:7b:54:5b:9f:63:
c5:f6:05:48:df:5b:00:fd:c9:ee:68:30:41:d4:dd:0b:c5:7c:
f2:d3:28:1a:c3:fd:cf:47:d4:9c:b8:d9:a2:bc:62:ce:07:0c:
9a:ae:16:9a:f3:76:0c:db:d9:a4:3e:27:dd:63:5a:fe:c5:41:
78:d9:7b:aa:79:49:f2:5d:65:bf:6e:3c:65:b2:af:f9:79:6a:
95:15:e9:26:66:e5:28:33:e0:6b:49:eb:f9:d7:c6:55:e2:73:
38:3c:2c:f7:d4:10:50:70:44:22:b5:63:c2:33:0d:3e:62:30:
c5:3c:6f:3e:71:70:1e:14:94:f5:a3:ec:53:d4:71:03:d9:87:
c3:88:77:53:80:fc:e3:b0:45:71:53:57:73:7e:3a:f8:7e:15:
a3:a5:01:dd:04:1e:2b:c3:50:93:9b:66:cf:91:2b:e6:4b:ec:
87:e0:f3:ea:5a:ac:16:f4:d8:05:ed:81:cf:41:91:ad:e9:7d:
d0:6f:d7:1e:89:a0:ce:f9:4c:59:23:e7:d2:8d:78:d0:38:5d:
86:80:04:a3:76:d5:70:1e:4f:69:f5:30:35:0d:70:88:ff:04:
f1:8a:14:02:53:0b:d7:30:64:7f:c1:2f:81:ab:d2:d0:36:29:
01:bb:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:21 2025 by rpki-client