Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/QQFkqt8B_F8oAKwprY2scMlWmsw.roa
File: QQFkqt8B_F8oAKwprY2scMlWmsw.roa (raw, json)
Hash identifier: U65Fya3183yNOSN5EQu1c8SW1h9oEWcBg4l77ac+IGE=
Subject key identifier: 41:01:64:AA:DF:01:FC:5F:28:00:AC:29:AD:8D:AC:70:C9:56:9A:CC
Certificate issuer: /CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Certificate serial: 0182721398A8CD10026899264F3D5CA951C8
Authority key identifier: 6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/QQFkqt8B_F8oAKwprY2scMlWmsw.roa
Signing time: Sat 06 Aug 2022 07:34:23 +0000
ROA not before: Sat 06 Aug 2022 07:34:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:7d46:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:13:98:a8:cd:10:02:68:99:26:4f:3d:5c:a9:51:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Validity
Not Before: Aug 6 07:34:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=410164aadf01fc5f2800ac29ad8dac70c9569acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:c3:47:28:c3:43:96:fb:1d:2b:0b:9b:5b:
e6:2e:91:0c:57:43:2d:04:c5:36:e6:e1:cc:2c:1b:
35:c6:b5:59:be:8e:89:ec:59:df:0d:60:15:49:a6:
ee:cc:be:ac:77:a8:cf:c4:81:f2:41:ac:88:c6:78:
ce:f4:cc:12:0f:30:42:80:7e:01:8a:f1:f2:4d:d2:
63:a2:24:af:2d:5a:11:ac:e8:91:c2:03:43:2a:c7:
9b:08:9f:8d:69:66:3d:37:e4:38:a8:7f:ce:4d:54:
9e:92:54:ba:ed:05:3c:13:36:b9:dd:dc:89:1e:60:
e1:46:61:b9:2e:0d:12:4a:31:a0:4d:02:ed:ba:19:
b6:14:4c:bd:3b:55:3b:cd:a0:9e:97:a0:05:14:36:
74:14:a5:d6:25:ee:8a:0a:cb:10:e9:98:b8:02:a0:
3b:a2:c0:10:35:5b:cd:71:86:ce:33:cd:49:ae:b3:
82:37:3e:6d:3b:0a:98:d4:e4:b3:81:f9:60:87:f7:
2b:48:d3:54:5e:f3:fe:88:65:db:09:9d:45:be:c7:
ff:1e:ae:5f:99:12:40:c1:ea:fb:1b:1d:4b:c6:1e:
d6:67:c4:08:c1:66:d5:43:a0:db:66:bc:be:5a:b2:
30:b3:ae:12:7d:f5:cc:ad:9e:e4:f8:17:49:ca:d8:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:64:AA:DF:01:FC:5F:28:00:AC:29:AD:8D:AC:70:C9:56:9A:CC
X509v3 Authority Key Identifier:
keyid:6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/QQFkqt8B_F8oAKwprY2scMlWmsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/be7Ke5hYwt5sy0Hl013geVx57ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d46:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
d5:15:5f:36:dd:31:43:af:58:f0:43:6b:1d:bf:ff:85:46:ef:
89:2a:1c:a2:2c:5f:3f:ab:da:43:f7:8d:75:6b:07:38:87:2e:
dc:3d:d5:df:22:8a:74:2d:9a:63:65:a0:28:66:52:49:3e:fe:
be:0e:50:12:4a:eb:86:d0:b6:b6:6b:f2:3f:1d:36:6f:1c:29:
4c:06:43:51:9a:35:2d:7d:a5:48:b8:4f:17:ce:aa:d1:1a:ba:
7b:63:63:de:9f:6c:63:af:ee:b9:e6:ad:e8:ab:c1:86:e3:de:
d0:ea:e7:e3:4b:bf:54:ff:1d:53:4f:36:32:eb:aa:9d:98:92:
a7:45:a7:7e:6d:4c:c4:55:cb:c5:7a:73:d8:16:c2:49:9a:17:
48:3c:11:41:10:48:df:42:89:5f:57:1f:31:40:dc:c8:dc:e0:
47:29:f8:6d:83:29:0d:1a:59:e4:a7:a8:98:07:f6:db:b8:22:
6b:ad:d2:1e:d4:25:43:75:58:f6:20:b3:ef:fa:45:11:90:a8:
f5:34:b8:c6:93:86:90:b4:a4:43:eb:f2:7c:b2:38:d0:f9:a7:
70:77:70:7c:e0:1b:40:14:ea:a2:66:00:cd:30:03:88:93:4a:
7a:c9:ff:93:40:70:3a:b0:d2:76:b0:1c:ff:d4:1e:b8:16:80:
a0:6e:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:46 2025 by rpki-client