Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qrj-Ehq2pgfb2ZbSttaDSyFErRs.roa
File: Qrj-Ehq2pgfb2ZbSttaDSyFErRs.roa (raw, json)
Hash identifier: 581lnwM1H+KyUPvAumxFYHcR2n1tS4BuZ/PwXG9MMmQ=
Subject key identifier: 42:B8:FE:12:1A:B6:A6:07:DB:D9:96:D2:B6:D6:83:4B:21:44:AD:1B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195C3303120BAFAFB7D095303019385B00A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qrj-Ehq2pgfb2ZbSttaDSyFErRs.roa
Signing time: Sun 23 Mar 2025 13:27:50 +0000
ROA not before: Sun 23 Mar 2025 13:27:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209556
IP address blocks: 2a0e:b107:30f::/48 maxlen: 48
2a10:ccc0:c0c2::/48 maxlen: 48
2a10:ccc0:c0c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:30:31:20:ba:fa:fb:7d:09:53:03:01:93:85:b0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 23 13:27:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b8fe121ab6a607dbd996d2b6d6834b2144ad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:ca:7c:8f:34:59:38:e6:a4:d4:4a:54:36:
50:17:a8:e4:d6:9f:8b:ab:1e:cd:d8:64:b2:95:9e:
47:bf:6d:23:92:64:5c:01:76:8d:ad:ae:97:2c:9d:
aa:2c:15:09:22:05:95:b7:23:62:cc:37:62:32:10:
21:d3:4e:03:4e:a9:88:68:c4:74:36:5b:5e:1f:5b:
f3:6c:4b:cc:13:3a:af:05:27:0e:06:5c:c4:2d:b2:
dd:f7:c6:5e:6c:fb:d6:62:5d:de:cd:48:9f:9d:36:
2f:b1:41:ca:a8:f9:d0:e0:24:0d:d5:a7:09:21:23:
cb:f7:26:d9:cf:c0:17:97:1e:59:f0:0f:a9:2a:37:
f9:63:8b:f2:ed:ed:85:15:2d:1a:94:0c:df:63:d8:
3f:52:8e:8c:8d:06:8d:eb:8c:a5:25:52:43:f6:41:
73:2e:8a:e3:fd:f2:24:2d:d3:0b:bc:57:2e:ca:df:
50:71:ca:6c:b6:4b:0d:c7:c3:50:9f:97:13:0c:9c:
58:11:d0:1d:f3:92:69:39:d6:32:5c:e0:70:d2:c4:
c1:ac:e0:8c:f0:cd:5b:53:f3:81:4c:de:3a:bb:e4:
4b:9e:12:07:ac:ea:1c:33:3c:ad:80:4c:bd:29:c6:
21:42:29:e5:bb:7f:8e:f6:d8:dd:32:fa:31:73:9b:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B8:FE:12:1A:B6:A6:07:DB:D9:96:D2:B6:D6:83:4B:21:44:AD:1B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qrj-Ehq2pgfb2ZbSttaDSyFErRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:30f::/48
2a10:ccc0:c0c2::/47
Signature Algorithm: sha256WithRSAEncryption
8e:8c:30:ff:f1:cc:c6:fd:c4:72:40:06:fa:69:a5:0f:d7:bf:
2d:48:c0:9e:b1:9d:a1:7c:bf:3c:cd:d3:65:87:e2:ed:96:0c:
53:1a:6f:bf:61:e8:e0:b3:0d:f7:5c:f8:a0:6a:c2:87:57:c9:
2d:a1:5f:0c:93:79:c4:de:48:c1:d7:45:f9:fa:58:52:9c:90:
62:a1:aa:2c:b7:ff:02:6e:d2:90:51:b7:07:02:11:b9:13:99:
59:c6:42:98:5a:ee:c0:b4:b4:1d:22:c8:a4:79:d1:87:21:e3:
f6:22:78:41:37:01:cb:fc:d7:41:94:1a:5b:97:22:44:2b:89:
d1:25:66:b3:23:03:ff:cc:c7:33:bb:14:04:39:6d:d9:0f:d9:
dd:42:bb:e4:d5:4c:d1:9d:53:f8:60:18:10:54:a8:fa:67:00:
58:93:8d:5a:bc:e3:30:a5:a7:be:78:e9:46:6c:60:dc:5d:3d:
07:1d:49:f7:92:48:63:48:e2:67:22:9c:da:dc:1a:d8:2f:c1:
79:57:6f:1a:c6:18:20:5c:ba:13:16:df:57:f2:32:24:41:a6:
e6:74:14:dc:5d:5a:de:64:82:de:fa:3a:3f:94:b8:09:e1:be:
c9:fd:54:6e:8b:ee:64:d9:85:db:12:9a:f2:91:ce:f9:b3:d3:
5b:dc:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:23:46 2025 by rpki-client