Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qoo2VyR8Gr9gl9o-bafiZ6ARihA.roa
File: qoo2VyR8Gr9gl9o-bafiZ6ARihA.roa (raw, json)
Hash identifier: JqITCwECJl61GbonXsuHnPF4hMpZL4NohaTGm8mHPBA=
Subject key identifier: AA:8A:36:57:24:7C:1A:BF:60:97:DA:3E:6D:A7:E2:67:A0:11:8A:10
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1A4651C646EB1E04F5515C36E400
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qoo2VyR8Gr9gl9o-bafiZ6ARihA.roa
Signing time: Thu 02 Jan 2025 07:48:51 +0000
ROA not before: Thu 02 Jan 2025 07:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 64.137.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1a:46:51:c6:46:eb:1e:04:f5:51:5c:36:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa8a3657247c1abf6097da3e6da7e267a0118a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:cc:8a:3f:07:72:58:2a:cf:dd:96:d0:0a:
60:22:7c:22:40:c3:4e:ee:0f:d6:5c:9c:ce:3f:f5:
e2:5e:63:b8:b8:5f:af:1f:a2:c3:b0:38:8e:0a:c1:
38:8c:c7:0f:49:bc:bc:5d:9c:27:63:13:19:1e:27:
8e:43:9a:75:42:ad:0b:f6:21:62:02:6c:f5:35:be:
a4:4e:04:ac:e6:bd:08:08:a1:02:17:d5:e8:c1:c9:
44:4c:03:16:9e:a5:05:ee:46:ef:67:18:f4:54:c7:
c9:f6:71:ab:08:90:a4:78:65:c7:8a:57:2d:85:db:
1e:a4:b5:11:d6:a4:72:34:5a:c6:bc:9e:92:8d:45:
4a:20:f9:f8:12:8b:e3:c0:64:ff:60:7c:8a:33:a2:
1c:dd:5d:ef:1a:bd:76:99:6d:f6:45:f5:0a:37:16:
95:4c:75:19:4e:82:2e:d7:8a:1d:66:f0:71:bb:55:
9b:9d:6f:09:89:8e:2f:af:c1:0d:7f:fd:af:02:fc:
b2:05:99:ad:a8:63:41:11:a1:b4:e9:af:4b:0f:6f:
ca:53:f2:28:bb:a1:c2:c8:95:68:5e:53:04:2c:61:
c3:d4:57:d0:ad:83:54:ae:c5:1c:10:22:47:8b:f1:
35:97:45:96:8b:e0:83:27:c5:30:4d:bb:93:01:a9:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:36:57:24:7C:1A:BF:60:97:DA:3E:6D:A7:E2:67:A0:11:8A:10
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qoo2VyR8Gr9gl9o-bafiZ6ARihA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:41:1f:7e:1f:7a:4b:42:16:72:01:a1:0a:b4:29:38:77:0b:
33:8a:78:84:2c:a0:60:c6:f3:a8:55:87:82:77:f8:88:dd:04:
96:49:eb:e1:69:d5:26:a1:00:b5:54:5f:b3:69:33:94:d3:05:
82:57:94:94:ba:28:78:f5:09:9f:8e:8b:7f:e6:5b:0c:7d:c2:
7c:b7:e6:b2:b9:b2:34:e6:04:47:fb:9c:63:89:fe:38:a9:14:
7d:26:05:fe:85:f2:fc:1d:71:d2:2d:d1:2b:ad:a8:49:b5:ad:
89:f1:79:82:5c:75:68:5a:61:c6:8c:2b:1a:9c:b5:a4:01:48:
a1:60:47:bd:c2:fa:f1:f5:c1:48:49:e5:05:6d:b0:d6:ae:4f:
0d:3d:cc:d7:e7:5b:4e:2d:45:9c:09:fa:fe:f2:f6:04:da:07:
b3:2e:45:3f:0e:3b:e7:90:7d:53:f0:e8:fd:8e:0b:4d:ff:f6:
9e:d1:d6:c0:d0:0e:ee:8f:ad:ca:68:ca:b4:43:06:56:75:1c:
78:3a:fa:8a:7c:b7:62:83:33:c9:80:91:c1:4f:d2:66:87:c2:
b9:cf:fd:59:52:4e:c2:a7:47:1a:34:01:0d:d4:bb:58:8a:5d:
80:1f:45:3b:c7:05:1c:6c:86:8f:39:b4:cf:23:07:6a:59:1f:
44:9f:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:38:11 2025 by rpki-client