Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa
File: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (raw, json)
Hash identifier: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=
Subject key identifier: 41:3F:58:E3:D3:9C:9F:B4:B5:36:55:A4:47:CE:5D:48:8A:BB:63:81
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0194DA87E485D70769EC6EBCB0C2EEEF967F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa
Signing time: Thu 06 Feb 2025 09:12:06 +0000
ROA not before: Thu 06 Feb 2025 09:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34860
IP address blocks: 2a00:ec82::/32 maxlen: 32
2a04:800::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:87:e4:85:d7:07:69:ec:6e:bc:b0:c2:ee:ef:96:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 6 09:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=413f58e3d39c9fb4b53655a447ce5d488abb6381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:bd:b1:2f:6a:41:33:0b:52:ef:b5:68:8c:
2f:14:1e:df:d5:8c:e1:25:1a:45:1c:79:49:04:b5:
cb:a1:40:4d:46:87:86:c7:bd:77:41:7f:a7:59:7b:
19:e1:7e:07:b2:c2:27:2a:c3:38:85:ed:49:47:60:
e8:1b:45:ed:25:c8:b7:95:51:0e:43:43:ec:1e:9f:
fe:31:87:89:1e:a7:ab:6b:0d:c5:d3:f3:5a:99:1a:
95:68:39:2a:5c:5f:7b:c0:89:2b:b2:96:98:70:f1:
93:7a:fb:ad:83:a9:6a:bc:59:46:ef:1e:fa:b5:f8:
57:be:58:ea:cd:2f:fa:49:6c:87:54:25:00:21:cb:
46:a4:1e:71:45:b2:fb:7d:c4:65:c7:17:fe:c2:fd:
42:fc:b2:01:2c:7f:63:4c:d0:44:a2:2f:8d:36:89:
0e:20:9b:eb:e1:66:45:df:06:f5:28:65:0c:b3:93:
60:56:34:31:92:54:c6:c1:42:49:86:fd:02:c9:92:
15:06:d9:40:b6:54:e2:ac:30:df:a3:62:52:da:be:
dd:0b:19:c5:a5:0b:eb:04:39:8f:67:2d:52:20:64:
18:66:10:8b:50:44:8e:df:b5:c0:66:91:a3:7f:51:
94:e7:3c:9d:91:ee:a4:0e:51:7b:b0:ee:fd:1c:fc:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:58:E3:D3:9C:9F:B4:B5:36:55:A4:47:CE:5D:48:8A:BB:63:81
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec82::/32
2a04:800::/36
Signature Algorithm: sha256WithRSAEncryption
96:6a:2e:c6:cd:51:ed:e6:50:1e:b7:c2:4e:54:d6:02:49:eb:
b8:18:eb:48:36:75:d3:85:b6:50:e8:13:51:a3:1c:1b:17:5e:
f2:f8:df:e5:54:09:06:d9:72:75:a1:52:06:df:fd:11:46:ac:
4c:6e:54:5d:13:41:34:51:ec:61:44:ff:38:ef:1e:83:18:bc:
8f:7c:74:e8:cd:3c:dd:2f:18:40:35:ae:81:21:10:62:ae:e3:
f4:c9:4f:b8:83:82:45:d8:38:a4:33:61:d8:df:c6:d0:b6:58:
50:fc:90:5a:ca:cd:51:2e:3b:6c:3e:db:ea:1d:c7:d3:91:a5:
83:0f:46:8d:9a:36:e1:89:f4:6a:f4:f9:58:3a:36:ff:3e:2d:
f9:d5:2f:ef:41:85:b8:e4:8c:19:91:e1:b4:fc:b5:d5:6c:39:
d4:07:fc:f4:fb:ab:76:59:9e:6b:89:cd:51:c7:01:a1:72:eb:
9d:ba:3a:9f:a1:49:3f:95:9f:37:f1:fc:fd:0b:d5:f0:76:d9:
99:1c:c2:da:91:a6:6a:4a:81:72:fa:15:b6:06:1a:81:4b:76:
91:9a:f5:2d:77:e3:4c:a7:2b:c6:63:1c:ba:ff:8d:00:5a:20:
fc:2a:8f:8a:ab:06:82:06:4d:aa:25:03:21:94:8e:ca:2a:67:
68:61:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:16 2025 by rpki-client