Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qNpT29WKDQQMUuCtZG2kACTHd-E.roa
File: qNpT29WKDQQMUuCtZG2kACTHd-E.roa (raw, json)
Hash identifier: JQq8hDaE6FXikYTwjIdyLPkjHGjqaX3KO5wUmvyjRPo=
Subject key identifier: A8:DA:53:DB:D5:8A:0D:04:0C:52:E0:AD:64:6D:A4:00:24:C7:77:E1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E62E924B706A082304A869B0BD0A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qNpT29WKDQQMUuCtZG2kACTHd-E.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141221
IP address blocks: 2a0e:b107:e11::/48 maxlen: 48
2a0e:b107:e12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e6:2e:92:4b:70:6a:08:23:04:a8:69:b0:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8da53dbd58a0d040c52e0ad646da40024c777e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:7b:53:ce:c6:c8:d8:b7:97:ff:d2:1f:ec:
e2:e9:2c:03:44:0a:d8:f9:7f:d5:f3:f9:29:43:34:
39:a5:1f:fa:cf:e0:94:5e:0a:16:36:9b:8e:30:c2:
80:3b:23:f3:99:cc:e1:01:0c:99:bb:bd:aa:a7:24:
93:14:d2:b6:3c:c1:b0:d8:39:8e:75:0f:d3:13:63:
b7:41:32:92:21:19:de:4e:49:5d:ad:e5:c0:37:00:
e3:2d:02:37:c3:98:4e:26:51:9e:2e:63:8f:dc:40:
e3:ee:51:81:80:02:65:14:4d:37:23:2d:cc:75:fb:
9d:2a:07:3e:44:d4:5e:41:04:e0:77:04:18:a7:49:
0d:30:9c:3c:cc:a4:02:1a:79:29:60:f3:93:92:d5:
88:3a:b9:d7:9d:4d:2f:9f:04:1e:c0:d6:09:26:30:
f1:f5:5c:c6:e5:6a:e5:89:1b:db:ac:fd:cf:d7:da:
60:10:57:62:71:9a:c6:1a:e9:22:7d:82:39:84:f9:
cd:5d:7f:c4:08:4a:29:d0:a0:2d:90:4b:e5:8c:18:
e2:b1:9a:b7:37:51:5b:15:52:4a:4a:db:28:9d:f4:
55:37:32:85:bc:3f:ba:9b:90:05:aa:16:d7:de:2d:
06:ed:75:82:ca:4d:25:79:95:e6:3f:ab:53:c7:1d:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:53:DB:D5:8A:0D:04:0C:52:E0:AD:64:6D:A4:00:24:C7:77:E1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qNpT29WKDQQMUuCtZG2kACTHd-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:e11::-2a0e:b107:e12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:c1:94:87:df:7c:04:63:1a:13:55:c2:68:8c:cc:87:d3:0d:
6c:d6:06:e9:4d:7c:23:1a:d5:45:2e:48:85:2b:08:f6:45:0b:
af:b3:21:9e:a8:f8:6b:47:31:3a:a4:7d:c2:1c:7a:8e:56:23:
e5:7e:28:8d:8b:9c:07:41:ea:a1:bd:85:32:85:2e:91:22:fc:
37:a7:13:54:b9:7e:f5:ec:98:a9:8c:99:26:53:eb:89:d6:db:
13:10:07:2e:89:54:ea:36:9d:06:b9:a2:83:32:0a:bf:8f:30:
60:8e:14:77:81:bb:08:c3:97:f7:8f:4c:62:ee:38:8d:ae:45:
55:64:37:50:89:11:ab:17:b5:73:b2:98:cf:ad:a5:35:22:69:
7a:6d:40:72:44:6c:e5:3e:31:0b:a1:99:8c:6b:14:4f:82:32:
6f:88:5a:d7:58:ee:a8:e4:e9:16:e5:ad:5d:9b:04:ee:28:8d:
c6:48:d6:8b:94:5e:91:e5:89:33:32:e8:35:5c:60:8e:d8:63:
46:38:3f:05:94:10:8c:a5:d1:78:5b:ea:0a:6e:bb:e8:0d:ce:
d4:91:00:0e:c9:0c:a2:bb:82:5f:d9:ff:6f:c8:ad:f9:5e:77:
f7:1f:67:b5:05:5f:6c:93:81:e0:fc:ea:c8:57:f7:78:58:be:
82:01:32:e4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQlIeYukktwaggjBKhpsL0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGRhNTNkYmQ1OGEwZDA0MGM1MmUwYWQ2NDZkYTQwMDI0Yzc3N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01x7U87GyNi3l//SH+zi6SwDRArY
+X/V8/kpQzQ5pR/6z+CUXgoWNpuOMMKAOyPzmczhAQyZu72qpySTFNK2PMGw2DmO
dQ/TE2O3QTKSIRneTkldreXANwDjLQI3w5hOJlGeLmOP3EDj7lGBgAJlFE03Iy3M
dfudKgc+RNReQQTgdwQYp0kNMJw8zKQCGnkpYPOTktWIOrnXnU0vnwQewNYJJjDx
9VzG5WrliRvbrP3P19pgEFdicZrGGukifYI5hPnNXX/ECEop0KAtkEvljBjisZq3
N1FbFVJKStsonfRVNzKFvD+6m5AFqhbX3i0G7XWCyk0leZXmP6tTxx0LpwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKjaU9vVig0EDFLgrWRtpAAkx3fhMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcU5wVDI5V0tEUVFNVXVDdFpHMmtBQ1RIZC1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDrEH
DhEDBwAqDrEHDhIwDQYJKoZIhvcNAQELBQADggEBAJbBlIfffARjGhNVwmiMzIfT
DWzWBulNfCMa1UUuSIUrCPZFC6+zIZ6o+GtHMTqkfcIceo5WI+V+KI2LnAdB6qG9
hTKFLpEi/DenE1S5fvXsmKmMmSZT64nW2xMQBy6JVOo2nQa5ooMyCr+PMGCOFHeB
uwjDl/ePTGLuOI2uRVVkN1CJEasXtXOymM+tpTUiaXptQHJEbOU+MQuhmYxrFE+C
Mm+IWtdY7qjk6RblrV2bBO4ojcZI1ouUXpHliTMy6DVcYI7YY0Y4PwWUEIyl0Xhb
6gpuu+gNztSRAA7JDKK7gl/Z/2/Irfled/cfZ7UFX2yTgeD86shX93hYvoIBMuQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:06 2025 by rpki-client