Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/QZYtXBxzzLLwx6OP96338EZQNhM.roa
File: QZYtXBxzzLLwx6OP96338EZQNhM.roa (raw, json)
Hash identifier: 38l/EW42Cd8oOnZZH6RtDcfG0bGHq+MKq8reh5+yb4I=
Subject key identifier: 41:96:2D:5C:1C:73:CC:B2:F0:C7:A3:8F:F7:AD:F7:F0:46:50:36:13
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0194228DE6E4C6A00D50A8B8D735FB911C05
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/QZYtXBxzzLLwx6OP96338EZQNhM.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57467
IP address blocks: 2a12:8fc6:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e6:e4:c6:a0:0d:50:a8:b8:d7:35:fb:91:1c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41962d5c1c73ccb2f0c7a38ff7adf7f046503613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:5e:44:48:35:7a:e4:5e:66:fe:e3:ea:a5:
49:05:22:12:38:d7:7c:1b:76:d1:28:bc:ad:b7:9e:
3d:86:10:bb:56:a0:42:d9:9c:7b:4f:a4:df:28:32:
93:d3:36:d6:37:b1:20:36:77:d6:33:54:db:aa:a9:
c6:70:52:db:cb:75:b3:20:b5:a6:8d:97:4e:b9:3b:
cc:63:e9:1e:e0:a7:87:c4:de:24:ab:fa:62:5f:97:
db:f6:bb:11:27:73:c7:40:5a:d4:31:6a:5d:74:65:
f4:88:36:70:dd:7c:1b:83:7f:14:65:e9:f6:ed:2a:
b2:72:b5:1c:fa:f2:fc:e8:58:3a:45:18:30:af:7c:
9d:83:45:69:88:c5:5f:72:d1:8c:1a:3e:d5:ca:b5:
59:5a:e7:53:e0:85:4d:7e:71:92:bb:da:8e:fd:44:
19:57:42:db:e9:32:93:90:fe:f9:b1:6b:9c:67:2b:
42:49:8d:ee:48:93:1a:65:11:22:85:c3:6c:3e:62:
49:9a:88:ff:2d:3a:bd:83:4e:c3:e9:b6:e9:b6:85:
c5:87:d0:e4:b5:37:a0:be:8c:df:7e:aa:6a:33:e8:
85:f0:09:db:57:1b:d5:2a:6e:73:71:d1:82:d4:84:
4b:42:a5:92:3f:82:d1:77:0e:ec:5b:73:bf:1d:b4:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:2D:5C:1C:73:CC:B2:F0:C7:A3:8F:F7:AD:F7:F0:46:50:36:13
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/QZYtXBxzzLLwx6OP96338EZQNhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:800::/48
Signature Algorithm: sha256WithRSAEncryption
ad:c8:5f:d7:86:d8:e6:2d:c5:b7:08:d6:c9:fd:22:6f:e7:19:
c2:7f:84:15:2b:37:fd:f3:f9:17:c5:cf:66:b9:18:62:15:bd:
8c:4f:27:c8:00:7e:6d:aa:c4:99:8f:ea:c4:0c:c5:24:e8:54:
54:b0:1a:01:c1:81:ea:e4:0e:8b:32:ef:7e:06:fa:7e:89:b6:
b8:49:4e:9f:fd:d9:0a:a8:09:90:76:3f:05:fa:d3:a8:90:14:
f3:4e:d0:ba:b8:98:58:56:1d:00:4d:16:f8:c4:8d:ec:22:55:
6e:3c:36:64:7b:24:82:d6:23:f9:40:02:94:b3:98:0d:2b:fa:
41:70:c0:d0:f1:fc:c7:e0:4a:0e:ec:95:25:09:db:5e:01:27:
a5:f2:9a:6b:d8:39:15:59:2c:c4:01:f0:d8:54:3b:e1:90:0a:
a5:89:9e:8c:97:49:6f:a5:fa:3e:49:66:21:5a:56:6f:f1:04:
dd:dc:79:15:9c:5f:59:35:09:a5:bb:34:0a:53:5b:70:dc:59:
9a:be:c6:d2:01:a1:04:ce:b3:b2:e0:be:ec:2f:c2:e5:bf:56:
e1:f0:4b:d1:3b:19:fa:65:c1:d9:9c:83:0a:3a:50:29:fe:69:
39:d7:5b:10:53:84:a4:0b:ae:12:d5:dd:fb:80:2d:7a:7d:6f:
b3:92:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:25 2025 by rpki-client