Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/QPec_ot_2VNPKb26QduTZLOak6k.roa
File: QPec_ot_2VNPKb26QduTZLOak6k.roa (raw, json)
Hash identifier: A13TLMqVik31Uu11YgEnDKpD9YHHVDZ7dwo7VtZJvOs=
Subject key identifier: 40:F7:9C:FE:8B:7F:D9:53:4F:29:BD:BA:41:DB:93:64:B3:9A:93:A9
Certificate issuer: /CN=83cb09141daebb3202d879a56031ee2fc30cd312
Certificate serial: 073F5B5C
Authority key identifier: 83:CB:09:14:1D:AE:BB:32:02:D8:79:A5:60:31:EE:2F:C3:0C:D3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/QPec_ot_2VNPKb26QduTZLOak6k.roa
Signing time: Sat 01 Jan 2022 14:04:11 +0000
ROA not before: Sat 01 Jan 2022 14:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208122
IP address blocks: 2001:67c:2d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121592668 (0x73f5b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cb09141daebb3202d879a56031ee2fc30cd312
Validity
Not Before: Jan 1 14:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f79cfe8b7fd9534f29bdba41db9364b39a93a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:4d:6f:ac:83:2d:4b:ee:e1:bd:cc:3d:f3:
fd:15:5b:87:ed:d0:bb:d8:36:6c:98:b6:63:17:5d:
6c:35:8d:f8:64:a3:7b:44:b3:8c:e6:91:1d:9b:5a:
d4:7b:ea:a0:67:e9:a2:85:6c:24:07:31:76:3f:ff:
31:e0:b2:ec:f2:92:34:ba:d3:f5:26:d0:0f:ff:5e:
a7:83:15:a9:a6:55:02:88:c0:f3:21:24:29:5d:fc:
83:2c:d3:53:03:86:c9:b1:68:7f:f7:76:c3:1e:df:
20:2c:c8:2d:93:73:4b:1e:54:58:95:62:f6:cc:49:
73:17:c8:ae:ea:7e:f6:51:42:a3:a6:80:5d:8b:ae:
e1:4c:39:66:27:93:3f:f7:03:f2:ad:e0:3c:99:9b:
29:ec:18:dd:5c:1d:1c:8b:61:e2:c7:ee:fd:11:a6:
e1:e3:04:42:ba:f4:84:06:d9:3d:15:d9:45:48:d2:
94:e3:94:27:b2:3b:1b:1e:6e:58:03:5d:88:75:13:
49:5b:35:4a:49:af:ef:9e:d7:0e:e1:2b:79:28:5b:
3d:68:6e:9f:0e:9e:d9:e7:39:fd:1b:34:41:63:90:
a1:31:f9:d4:68:fa:06:cc:dc:bf:5a:ec:c4:b7:84:
85:81:79:9b:41:64:27:bb:c0:d6:30:e3:0d:d0:f8:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:9C:FE:8B:7F:D9:53:4F:29:BD:BA:41:DB:93:64:B3:9A:93:A9
X509v3 Authority Key Identifier:
keyid:83:CB:09:14:1D:AE:BB:32:02:D8:79:A5:60:31:EE:2F:C3:0C:D3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/QPec_ot_2VNPKb26QduTZLOak6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d4::/48
Signature Algorithm: sha256WithRSAEncryption
7f:90:89:e3:7f:e8:c5:e8:ce:c1:61:80:04:6e:9e:50:aa:25:
66:c0:9b:74:23:5e:bd:0d:69:41:32:7d:8b:5b:2b:d2:b4:c1:
ff:95:ed:5a:f2:95:b4:7d:4b:7d:5d:d8:63:55:98:84:cb:2e:
e6:59:21:47:2d:af:41:14:2f:11:61:aa:a3:97:f8:16:f6:f5:
57:f6:28:39:2c:b9:d3:e7:7d:ba:43:d0:79:11:a7:6e:55:f3:
e1:8c:34:6e:6a:29:5a:d6:1d:8f:a2:94:99:ae:28:ba:8a:6c:
e3:06:25:7d:27:6f:94:5b:30:7a:8e:48:89:be:8a:da:79:7a:
99:98:9d:b7:c9:5c:37:ff:a3:67:70:07:41:ec:a2:e6:56:43:
9e:ca:7b:ab:dc:5e:a0:67:c6:56:d4:ee:74:0d:6d:2c:20:91:
da:65:f7:4d:7a:c1:95:16:3d:21:92:40:9c:94:04:37:f8:ad:
b3:20:fc:df:a9:1a:34:31:a3:12:5a:e6:ec:b4:3c:42:55:f8:
ac:f8:b3:99:a8:e4:fd:b3:1e:65:21:4d:7b:63:3b:db:e0:e4:
f4:63:9e:ce:bb:0b:d0:58:7a:09:fc:25:6d:c2:33:6b:84:c9:
56:b8:a5:7f:4d:27:79:f3:ec:1d:17:fe:2b:3a:ae:28:ca:e6:
11:38:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:27 2025 by rpki-client