Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qCFF78-Ld0Tj7IrXWOIltEjc8_s.roa
File: qCFF78-Ld0Tj7IrXWOIltEjc8_s.roa (raw, json)
Hash identifier: ipVGamOlkPBerHyp6NekRrBi1dX13qQMzmrJSD3QKPM=
Subject key identifier: A8:21:45:EF:CF:8B:77:44:E3:EC:8A:D7:58:E2:25:B4:48:DC:F3:FB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227F78D8931C13F2787583B6DBC0D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qCFF78-Ld0Tj7IrXWOIltEjc8_s.roa
Signing time: Thu 02 Jan 2025 03:50:05 +0000
ROA not before: Thu 02 Jan 2025 03:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214616
IP address blocks: 2a0e:97c0:3f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7f:78:d8:93:1c:13:f2:78:75:83:b6:db:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a82145efcf8b7744e3ec8ad758e225b448dcf3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:a1:7d:2e:b5:0a:8d:71:d0:35:b5:e0:7f:
4b:48:3a:b5:01:b4:56:32:aa:6c:36:66:9e:fc:48:
90:73:20:fa:b5:f1:78:f7:bd:b9:43:d8:4e:c7:5f:
04:0f:d4:73:37:0e:83:44:4f:ce:39:dc:2a:aa:f5:
87:ff:e3:0d:66:83:b7:49:97:5d:12:0a:fe:0a:96:
02:7c:1a:1c:79:f7:12:4d:74:1e:9c:0d:c9:9d:9a:
c7:91:aa:47:e3:43:36:bc:e7:33:68:74:40:07:16:
f1:85:21:5b:f5:7f:c2:81:67:76:36:06:82:e4:f8:
55:24:f7:5d:f4:88:4f:a1:39:04:e1:d0:14:e5:0f:
e2:9b:34:59:78:a3:d3:10:18:51:95:60:21:76:f9:
aa:25:77:e8:e1:8c:9b:0a:f3:48:17:77:ae:09:c0:
b4:77:a1:53:d2:ec:76:1d:74:b4:33:94:95:34:fd:
20:dd:3e:36:6f:00:f5:d7:c7:e9:05:e7:41:75:c3:
e6:3a:ab:cc:c5:ed:81:9a:74:6e:45:e1:62:e3:45:
d0:90:16:e5:b6:69:12:28:26:87:a8:56:f2:ea:07:
4c:26:97:49:19:38:81:89:f8:bb:81:60:b4:8a:ca:
42:c0:a6:17:da:40:7c:88:41:b3:f3:8d:af:09:2d:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:45:EF:CF:8B:77:44:E3:EC:8A:D7:58:E2:25:B4:48:DC:F3:FB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qCFF78-Ld0Tj7IrXWOIltEjc8_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3f0::/44
Signature Algorithm: sha256WithRSAEncryption
40:a6:44:da:7a:f0:c4:f9:8f:16:6b:e9:14:87:61:f4:00:7d:
5a:30:09:f3:c5:1d:4e:a2:2c:3b:a1:14:84:8d:31:f8:d6:e5:
9a:5d:9c:df:3b:0e:1e:92:86:5d:2c:5d:16:52:7d:53:ec:77:
d8:b3:d1:5f:a0:db:3c:87:af:1a:9a:19:51:d0:ca:e2:32:d3:
dd:6c:66:ff:e8:60:ab:98:0d:f2:f0:ea:d9:e4:fb:bd:91:84:
da:2e:d5:6a:cb:b3:9a:e7:62:10:87:70:f7:30:16:61:d0:77:
86:39:68:f5:04:98:78:e3:8c:fb:ea:f0:da:4c:12:fd:0a:6e:
83:9a:79:71:06:98:41:31:7e:d2:fc:05:d1:55:ea:68:60:03:
43:f7:6e:93:e6:86:4f:e8:bf:c8:9a:6f:a6:59:03:10:33:a4:
aa:23:96:70:a8:77:56:07:63:47:9c:08:4b:8e:5b:c0:fc:90:
df:96:2f:25:e7:21:f3:0c:4e:9c:fe:f3:17:a6:b5:5b:31:bc:
ee:81:be:d2:55:29:8c:d8:65:f1:7d:69:cb:36:df:80:67:f3:
28:c9:cf:2e:f4:a9:43:ca:ad:4e:eb:6d:9e:5b:a7:02:b8:60:
a5:3a:d7:1e:9a:38:aa:7f:42:34:88:dd:af:d0:a6:cd:5e:a8:
94:2a:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:48 2025 by rpki-client