Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa
File: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (raw, json)
Hash identifier: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=
Subject key identifier: AB:42:42:B6:7D:32:99:72:7F:E3:81:69:D9:1B:27:4B:E6:8B:E4:EB
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 019426D914132D3B17F53CCAA850EA213B1D
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa
Signing time: Thu 02 Jan 2025 11:49:08 +0000
ROA not before: Thu 02 Jan 2025 11:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49752
IP address blocks: 2001:67c:dcc::/48 maxlen: 48
2001:67c:dd0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:14:13:2d:3b:17:f5:3c:ca:a8:50:ea:21:3b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab4242b67d3299727fe38169d91b274be68be4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:b6:7e:19:4d:20:77:d6:60:88:10:28:0d:
02:da:91:7c:5f:96:93:5a:a0:0c:6d:49:9c:7a:ec:
b1:ea:dd:ba:43:3c:ca:ce:bd:bd:ce:bb:f1:73:81:
a3:80:60:4c:21:15:12:d5:da:c2:33:ed:fe:15:33:
d8:82:e9:d6:31:f5:82:e3:9f:a5:b8:87:e5:3f:71:
89:90:0b:66:cc:37:db:5e:43:e3:e1:36:7f:ea:38:
a3:70:ac:4b:5d:6a:45:ac:c5:40:83:36:57:f1:93:
02:48:aa:05:27:e3:cc:2a:2c:d7:44:47:51:a9:41:
cf:30:36:bc:fe:15:e9:a3:cd:3f:30:01:03:56:fe:
77:23:cc:b5:b2:83:c4:ce:35:3d:52:f2:c7:cb:2b:
e5:bf:2a:aa:2e:b4:5e:2a:ac:ed:d3:7e:9c:f4:1e:
98:d2:87:ed:7d:b6:8e:c4:ea:af:ea:fa:f3:96:f6:
66:b2:41:c1:08:43:df:22:e4:48:a1:b1:14:43:55:
ff:96:2e:83:6b:02:df:6a:a3:96:fa:5a:75:6f:9c:
ac:e4:ec:a1:4f:00:72:ae:d8:a0:52:c9:04:be:b4:
8b:f8:08:7a:3f:d1:b3:62:e0:ca:c0:e0:a6:5f:0d:
21:5b:74:69:76:6c:2e:9f:76:6b:25:a7:6f:62:9b:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:42:B6:7D:32:99:72:7F:E3:81:69:D9:1B:27:4B:E6:8B:E4:EB
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dcc::/48
2001:67c:dd0::/48
Signature Algorithm: sha256WithRSAEncryption
04:4b:38:c6:62:ff:7d:71:b7:2f:25:0a:fb:27:5a:c8:28:ec:
f7:f9:8e:7b:50:9b:e4:3e:fc:df:86:2c:24:f2:d1:15:78:04:
61:92:26:0d:5a:51:ed:7e:46:69:c3:22:a4:5f:a4:a7:02:96:
1b:a8:c7:69:02:8d:5f:f8:5a:75:17:29:66:c7:b8:9d:f0:7a:
f0:d6:21:49:db:91:a5:b5:3a:04:41:bd:d1:e6:dd:2a:02:3e:
ff:82:49:0e:f7:5b:ac:bc:09:ca:a6:67:b0:86:e4:1c:cb:7b:
06:17:63:65:88:91:ce:a4:0c:c7:09:ae:63:4d:1f:10:24:68:
bf:75:3e:ef:46:4b:0d:56:a3:46:02:26:79:5d:5f:f0:3c:b0:
6f:be:a6:d8:c5:50:16:56:dd:0e:9b:29:1a:ec:ac:2a:b1:99:
03:33:01:25:3a:6f:29:a2:df:4d:72:e8:a2:78:35:d9:b4:b1:
3f:68:ae:4a:86:33:d0:dc:49:7b:52:a5:c3:78:a1:e8:85:2e:
21:df:6b:03:af:e7:5b:72:58:67:ce:73:fa:7e:e8:88:28:2c:
67:60:e7:f6:60:d3:f2:f1:df:5d:30:39:34:ed:62:72:1c:b9:
2d:e4:6f:54:e3:9f:53:9c:95:9d:c4:07:0a:ac:83:bd:e9:7e:
b6:e1:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:19 2025 by rpki-client