Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa
File: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (raw, json)
Hash identifier: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=
Subject key identifier: 43:CF:10:BF:67:3E:39:8F:29:0F:D5:D0:96:6E:80:60:BC:C4:0B:D9
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D40544C6269C2B61172A6450CBA20
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:2146:848a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:40:54:4c:62:69:c2:b6:11:72:a6:45:0c:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43cf10bf673e398f290fd5d0966e8060bcc40bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:7c:12:af:cb:54:05:9d:eb:f9:8f:b1:70:
b0:c1:02:bf:09:c0:3d:42:57:54:47:c1:1c:e8:bd:
8a:01:9f:cd:2f:0e:50:14:f1:56:71:f8:bb:d2:67:
a5:39:a9:d9:de:8a:a7:91:24:71:ae:d3:9a:e0:db:
7e:9b:07:d9:51:58:37:b6:99:0a:57:bc:9e:3d:0e:
da:ea:a8:fb:7c:a8:06:a2:8d:73:51:10:07:48:54:
4e:66:bf:51:c3:4e:be:03:ac:0a:85:1e:ce:da:2b:
67:2a:0d:fa:6a:aa:29:20:0a:58:b4:33:f6:76:da:
fd:c2:c7:7c:b6:67:bd:05:a7:93:81:1d:8f:0e:ad:
d2:89:30:4c:32:03:96:48:f7:b6:06:db:3e:38:68:
fa:5c:b1:5f:77:35:12:23:d7:90:dc:f4:4a:2e:bf:
a9:57:6b:0b:9b:77:f3:80:4d:46:62:92:f9:91:be:
bc:4c:17:77:a3:f5:3a:c4:9e:0b:fc:1a:ae:a1:89:
96:b2:74:f3:8e:bd:4d:f3:d7:a6:27:31:9c:2c:52:
bd:b1:4b:52:ab:3c:93:16:45:ac:9c:6b:6c:5c:17:
10:36:ac:77:e1:34:66:77:17:b1:04:96:4b:36:d9:
0e:af:8b:35:1f:88:77:9c:f2:fe:bf:a9:28:25:8d:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:10:BF:67:3E:39:8F:29:0F:D5:D0:96:6E:80:60:BC:C4:0B:D9
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:848a::/48
Signature Algorithm: sha256WithRSAEncryption
70:97:a7:bc:d9:14:3a:15:19:95:9b:62:33:12:aa:23:d7:25:
30:53:12:5c:88:46:93:5b:02:89:32:b5:60:c3:ed:63:d1:5e:
d8:22:16:e7:33:0c:92:19:6a:d3:87:51:a1:fd:46:1b:db:a9:
2f:6f:81:0b:a2:27:67:97:ea:33:a0:df:8f:be:31:db:fd:53:
55:a7:57:75:1f:c5:9c:cc:e6:62:b5:8f:c2:0f:d5:e8:f2:41:
67:27:94:09:f2:06:c5:ea:18:5e:b1:8a:df:88:a8:68:90:c8:
98:f9:f3:94:1f:95:1e:31:39:d7:30:d2:61:0b:35:74:ef:3f:
b5:cf:0b:fc:45:c6:6a:6f:db:d5:57:e9:09:b8:d4:35:af:64:
3f:1d:7f:0b:4d:bd:6c:8f:28:4d:f5:dd:d1:11:73:e2:fa:1e:
25:f5:eb:8b:36:4a:3f:5f:13:1c:42:8e:26:f5:fc:ed:11:f6:
33:7a:78:e8:51:58:39:51:66:ae:ab:99:af:80:1d:30:8e:83:
b2:67:03:28:c2:12:22:97:37:d6:32:fc:b5:c5:a1:2e:31:a3:
4f:47:bf:6c:df:e8:60:e5:51:64:7b:3e:cb:a8:9d:a7:c7:df:
55:27:bd:2b:a0:13:f5:0d:2c:df:0b:82:7a:1a:30:f1:c7:77:
c6:a1:ab:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:24:33 2025 by rpki-client