Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qq1hNZhFC7p999GE5As76lZDCYE.roa
File: qq1hNZhFC7p999GE5As76lZDCYE.roa (raw, json)
Hash identifier: AIEQRRasjvteNHlg9LptfvHJgjh6tI4HaNsv+CgnPZY=
Subject key identifier: AA:AD:61:35:98:45:0B:BA:7D:F7:D1:84:E4:0B:3B:EA:56:43:09:81
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228AEC38D1B60EAD72F1AF90F151DD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qq1hNZhFC7p999GE5As76lZDCYE.roa
Signing time: Thu 02 Jan 2025 03:50:08 +0000
ROA not before: Thu 02 Jan 2025 03:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215562
IP address blocks: 2a0e:97c0:8d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:8a:ec:38:d1:b6:0e:ad:72:f1:af:90:f1:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaad613598450bba7df7d184e40b3bea56430981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:6e:5f:ea:6e:fd:6f:c8:96:fe:e9:dc:06:
cf:51:6b:00:61:d9:ed:e0:c0:0e:5d:ba:06:dc:00:
a9:b7:cf:20:d3:78:07:af:21:c8:b6:a6:5c:6f:ff:
dd:08:19:05:0c:65:9f:54:d9:d5:90:a8:56:c9:44:
e0:79:21:0b:37:eb:8f:c4:fb:eb:82:b2:38:94:8e:
18:be:e0:54:e8:78:e2:c0:f8:4e:b5:7d:50:b8:8b:
93:86:1c:4e:df:ff:11:de:ca:5b:17:2d:4b:d8:45:
5a:2b:b2:56:64:ee:fb:3a:6d:80:cd:f2:06:ba:a0:
96:b5:04:af:3e:96:c8:c2:eb:ed:c4:f1:0a:f2:ec:
38:47:cb:07:1a:8a:ef:15:00:c0:13:01:7e:67:ce:
78:35:93:6e:0c:d8:85:c1:c1:e7:d8:a2:a7:56:33:
d7:b7:84:99:36:eb:19:97:40:dc:7b:e0:d7:cb:e9:
c0:8e:fb:83:91:21:b8:03:16:87:b4:a3:93:dd:5e:
2e:fb:a3:06:58:2a:ba:c4:10:c2:62:cb:fc:42:47:
62:51:a9:e6:a8:f4:1a:bf:f9:58:f9:a9:c3:4c:8b:
77:1c:55:af:a1:7f:65:84:43:99:2a:ed:2f:d4:76:
05:a4:02:5d:4a:6b:61:be:27:71:f0:d1:dc:7b:c7:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:61:35:98:45:0B:BA:7D:F7:D1:84:E4:0B:3B:EA:56:43:09:81
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qq1hNZhFC7p999GE5As76lZDCYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:8d0::/44
Signature Algorithm: sha256WithRSAEncryption
77:65:da:76:b1:af:7e:f4:4e:d6:e6:35:df:28:e8:16:69:5a:
b7:bd:7c:14:ea:71:3e:4b:c0:c3:50:43:53:35:bd:33:0e:be:
bb:42:30:74:5b:1c:b1:16:98:ba:37:8c:ad:84:dc:bc:1f:97:
9c:f9:67:aa:c6:2a:ca:71:36:82:d4:32:13:35:0c:55:21:3c:
c2:ae:dc:cf:5c:e3:70:34:8e:c7:4a:c0:bf:6f:1f:89:48:a3:
de:27:56:f5:dc:33:63:1e:fa:12:a0:e6:53:e5:a0:a7:14:e9:
a6:30:d6:a8:14:4c:02:14:7b:38:10:29:1c:59:a9:89:8e:00:
66:ae:fd:ff:1f:51:a2:47:64:db:e0:01:be:c8:5c:4e:9d:1b:
ca:f8:2a:2d:0d:74:e1:11:68:2f:88:fe:6d:78:eb:3c:ea:ed:
33:f4:ce:3c:a6:26:1a:55:e1:97:51:32:a1:83:2e:cd:8b:01:
a8:b4:da:af:25:18:84:bc:52:ba:0d:bc:5a:d9:5a:27:f7:33:
68:b1:d3:4f:60:e2:b0:06:23:36:ca:cb:e5:04:53:f6:6a:1b:
08:79:14:1f:6b:2a:d9:5f:5d:ae:db:4a:1c:9e:e7:72:4c:47:
83:04:25:e3:bf:c7:ce:5f:1d:4d:9e:77:37:d4:35:bb:c4:d6:
10:02:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:59:47 2025 by rpki-client