Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa
File: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (raw, json)
Hash identifier: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=
Subject key identifier: 40:94:80:3C:3A:A9:58:B3:C6:3E:A2:D9:6A:1B:46:04:BD:54:8E:EA
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 0194244503654727F2F3C6E910864AF14954
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214603
IP address blocks: 2a13:ccc6:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:03:65:47:27:f2:f3:c6:e9:10:86:4a:f1:49:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4094803c3aa958b3c63ea2d96a1b4604bd548eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:d9:05:93:1b:76:1c:27:5e:0d:b5:bc:9d:
9c:9e:b9:f2:cf:0f:49:2b:7b:d9:05:37:3b:a2:64:
c2:8a:47:bb:60:04:8f:24:4f:d0:60:80:46:9d:14:
ea:d8:88:b2:dd:92:2e:fe:bb:1b:a1:9e:04:60:d2:
66:f8:15:c9:5a:50:97:35:5e:fc:ef:74:22:11:4b:
6b:31:f0:a4:8c:c2:32:72:c0:0a:a2:23:3f:9e:9f:
c6:ac:09:cc:4a:bf:75:88:e0:a3:2d:ae:87:5d:ff:
41:20:0d:07:2e:3d:f2:da:28:dd:87:28:99:f4:24:
6c:60:ff:13:8e:a8:95:a1:7e:3c:52:de:c5:6a:85:
e2:09:0e:e2:63:93:c3:9b:3f:fe:68:39:45:4c:96:
2b:f3:b1:90:13:e5:88:88:82:83:bb:3f:7a:14:94:
47:78:dc:f6:8f:7d:f7:87:e1:97:a1:0d:0e:7b:25:
a2:4c:08:45:d1:f8:25:92:e3:ac:a9:b4:9d:7a:72:
d7:8e:ea:da:ed:ca:8f:72:7e:b6:a0:0c:2a:ba:f2:
68:2c:4d:d6:76:dc:1e:9e:29:e1:2e:0b:47:b2:64:
d9:3f:ad:b9:dc:06:cc:3e:cd:af:9a:9b:75:ed:7d:
96:4e:6a:b6:9f:09:32:9c:52:ee:7d:a6:d0:09:dd:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:94:80:3C:3A:A9:58:B3:C6:3E:A2:D9:6A:1B:46:04:BD:54:8E:EA
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc6:10::/44
Signature Algorithm: sha256WithRSAEncryption
4e:03:22:40:e1:ef:a5:96:3f:66:cf:f8:86:0a:12:5d:32:5f:
d4:03:d9:0c:32:91:e1:5e:fe:8f:12:bf:95:23:f3:98:47:5a:
58:75:e0:ec:59:0a:16:76:27:c4:a9:87:09:0c:16:da:a9:ee:
be:a5:64:0d:ef:f2:11:ac:23:5c:39:86:06:1a:31:af:33:25:
ac:3d:6c:04:0b:12:b5:57:56:80:2b:d1:08:46:ce:47:f9:ba:
4b:34:56:30:b1:26:7f:a4:37:d7:dd:02:1b:fa:c3:00:1f:4a:
dd:f2:b0:e7:c4:85:3e:17:1d:bd:81:bf:54:9f:e1:58:57:cc:
1f:07:04:15:bb:4b:81:bb:76:63:f8:31:31:ba:28:c0:2c:dd:
be:c7:86:9c:c0:a2:32:cb:1e:38:92:0f:ca:17:de:81:7f:8a:
21:f5:4b:78:8b:fd:5f:77:49:7b:1a:08:ab:01:e2:55:76:68:
cc:f0:d9:2d:92:13:cf:f4:98:02:fc:e8:1d:94:36:33:47:79:
d4:c9:90:46:76:57:da:67:48:77:f5:a1:e7:c7:50:ac:1f:f6:
bd:aa:f5:64:08:6b:ab:f9:22:42:92:0d:b2:1a:b8:0f:6c:79:
3d:b9:01:53:08:f1:37:b1:ea:3b:78:92:c8:9e:ab:4f:0d:d7:
d1:41:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:26:37 2025 by rpki-client