Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa
File: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (raw, json)
Hash identifier: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=
Subject key identifier: 40:27:E2:6B:15:34:F8:BD:15:D8:11:7D:7B:50:BF:1B:06:27:CC:FE
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01942143B14281D187D535FBCF8DBD63110A
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48446
IP address blocks: 2a02:c47:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b1:42:81:d1:87:d5:35:fb:cf:8d:bd:63:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4027e26b1534f8bd15d8117d7b50bf1b0627ccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:69:68:1f:c0:26:1c:8c:28:a7:6d:18:4b:
fd:79:e2:a3:1c:2d:cb:73:8b:d8:c9:0b:5a:91:cd:
28:e7:23:fd:01:d6:16:4d:08:ed:4a:cb:14:53:40:
d5:be:01:8b:4d:95:f2:6e:bb:ec:17:7e:89:36:e6:
bb:e2:7e:74:8f:5a:16:96:6c:03:17:fd:96:54:c9:
50:ac:fb:80:f4:6e:e7:a5:58:04:77:f4:2a:d0:04:
c3:23:49:c8:78:78:4e:e1:ff:1c:c3:3a:fc:9c:60:
6f:47:cf:d1:de:f9:c2:56:5e:0c:4c:52:6d:c7:e7:
4c:dd:3b:f9:23:5c:94:6f:ea:6b:43:f3:29:80:57:
19:35:69:47:94:07:39:74:23:83:2d:a6:2f:b0:6f:
58:ce:c5:4e:7c:12:35:2a:98:10:0f:92:db:ac:ea:
71:b0:8d:db:32:02:18:98:ff:ee:4e:ec:39:b3:05:
b8:cc:4a:af:33:4c:70:df:23:a6:9b:2e:11:48:07:
67:b6:20:2e:4a:f4:94:bc:9a:65:55:5d:61:ec:e7:
bd:5d:83:df:55:84:d0:4f:c2:fa:76:cf:1c:a4:33:
9d:17:0f:72:3b:4b:45:0a:77:7f:c7:58:13:b0:78:
20:0c:af:01:de:01:d5:00:d9:ea:d0:82:59:83:13:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:E2:6B:15:34:F8:BD:15:D8:11:7D:7B:50:BF:1B:06:27:CC:FE
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c47:4::/48
Signature Algorithm: sha256WithRSAEncryption
95:23:55:70:ab:a9:8a:11:04:ab:2f:84:6c:40:7f:65:e8:10:
9d:70:7b:49:be:3c:8e:67:4c:d8:8e:69:18:45:29:4e:c0:78:
31:df:92:0c:1f:94:db:48:f3:90:70:c8:fd:b8:a1:eb:99:c6:
46:6a:48:9e:f5:5f:23:ea:25:74:0b:38:56:fd:5f:55:23:12:
74:7e:1e:5b:29:d3:fa:3c:a6:c0:0b:c4:29:8f:b2:b6:00:9d:
20:29:55:bc:cb:f2:e0:b6:59:7c:d6:df:fb:8e:48:7c:bb:d5:
c8:78:03:fe:e0:96:30:19:63:8b:02:8c:fb:61:53:a1:85:c4:
6d:9d:42:ca:28:a5:ae:58:20:89:d2:4d:33:94:9d:4a:76:03:
47:8c:03:aa:fc:db:a8:c7:6a:30:9f:d3:15:8e:84:f0:23:6c:
80:64:64:ca:0f:8a:c2:d3:48:c8:2f:c1:01:c7:3c:c9:0c:c8:
9d:6e:0e:6b:c5:60:a9:23:9b:35:f0:07:ed:c5:f7:b7:39:84:
47:56:9b:14:3f:52:07:6f:88:90:50:96:a4:c0:fb:88:0d:ec:
47:57:4e:3e:17:03:70:08:b2:56:e2:9c:57:02:6b:a5:98:c7:
1b:8c:d9:cf:5b:43:66:a8:b7:4c:5b:b7:a9:1a:5c:8f:97:c7:
ba:44:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:40 2025 by rpki-client