Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/Qjw3MwPjUeLgpWA9jY_WpteLgiI.roa
File: Qjw3MwPjUeLgpWA9jY_WpteLgiI.roa (raw, json)
Hash identifier: 7dsAEQtus7axDA/wiI4o7EiBxLiP4vibiMXjTDQPRYY=
Subject key identifier: 42:3C:37:33:03:E3:51:E2:E0:A5:60:3D:8D:8F:D6:A6:D7:8B:82:22
Certificate issuer: /CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Certificate serial: 018CC64B87208576EF7CFBE4EC46403CE7FD
Authority key identifier: 0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/Qjw3MwPjUeLgpWA9jY_WpteLgiI.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212966
IP address blocks: 2001:67c:2480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:87:20:85:76:ef:7c:fb:e4:ec:46:40:3c:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=423c373303e351e2e0a5603d8d8fd6a6d78b8222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:c4:77:e7:26:b5:95:36:51:d0:f2:f6:a0:
92:05:98:a9:e4:65:a5:63:e0:f5:bb:33:98:5c:fa:
e2:04:28:41:67:c9:16:a0:2c:05:a7:f0:8c:b2:71:
c4:fc:a2:c6:a3:e1:e3:b0:c3:f6:73:0e:3a:c5:a1:
9c:53:ca:1b:c8:28:ca:8b:d7:1c:2a:0b:66:df:8e:
58:6e:41:28:5d:f1:85:60:e3:04:24:73:c8:58:a7:
7d:0a:85:fd:41:77:d7:cb:c4:a9:e2:8f:e3:d2:64:
7e:d8:70:bd:8c:ee:fb:0e:53:16:31:cb:15:c8:1c:
d0:67:d8:0c:1f:33:b1:d2:66:4a:e9:9f:95:74:fd:
ef:c1:8d:43:27:c6:9f:bd:5e:f9:14:fd:7a:77:a1:
3e:1e:7a:92:e9:24:d1:61:bc:ce:c1:05:a4:bf:85:
f4:bd:06:96:7f:2d:d1:eb:19:e1:bb:58:c3:c9:1d:
bc:06:6b:55:20:68:9c:04:0a:9d:7d:24:00:62:ba:
9c:97:70:2e:a6:42:4c:b0:f3:fd:da:d8:78:0d:ff:
e0:6d:c6:f3:ce:3a:dd:f8:80:42:ab:87:0e:52:87:
8b:66:39:1e:93:64:b6:8a:59:35:94:ba:db:77:26:
72:78:1f:eb:fc:46:69:f9:72:86:4e:3d:7f:4d:c3:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:37:33:03:E3:51:E2:E0:A5:60:3D:8D:8F:D6:A6:D7:8B:82:22
X509v3 Authority Key Identifier:
keyid:0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/Qjw3MwPjUeLgpWA9jY_WpteLgiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/C9-ByZHNkAh58f27jO5mHdLcCJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2480::/48
Signature Algorithm: sha256WithRSAEncryption
05:48:dd:a3:7c:19:cd:61:a8:e2:61:46:cd:c6:95:d4:11:1b:
42:c2:f7:00:f7:9c:25:a5:4b:6b:4d:93:0d:7c:22:f5:dd:f5:
b4:a4:e7:a0:a9:f6:20:5b:3e:37:da:0e:7b:0b:03:fe:30:cb:
99:8c:dd:41:43:b3:de:15:f6:c4:de:29:dc:08:84:30:e8:49:
c7:de:41:17:3d:ee:8e:18:5b:1e:7a:23:0b:14:53:e6:44:09:
4d:4d:bf:60:fd:aa:1e:22:29:3a:c1:c5:f6:a6:ec:01:d5:ca:
c0:1d:3c:3c:60:56:38:da:b8:de:d5:5a:35:12:65:42:55:ab:
af:1e:1e:7a:4a:d5:01:5b:67:d2:67:c4:91:02:67:1c:95:b8:
90:37:5b:3e:31:51:fc:71:69:02:60:28:0e:7b:a3:04:2d:7e:
eb:d3:5d:0d:1e:41:73:d8:ab:94:40:a0:b7:e4:5e:a8:b2:75:
6e:7b:b0:7e:5a:ea:6a:37:14:96:de:a6:ac:c7:dc:6c:c6:63:
d3:f1:0b:fd:c7:d0:c8:d2:24:7d:a2:b5:44:cc:40:05:5f:f0:
48:09:91:9d:59:dc:b8:25:44:05:13:cf:51:c7:16:1e:28:e0:
69:71:36:89:b8:d1:36:ca:60:33:d7:6a:50:5a:7d:ab:a5:27:
e8:72:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:34 2025 by rpki-client