Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa
File: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (raw, json)
Hash identifier: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=
Subject key identifier: 8D:02:77:4D:5C:D2:6E:DF:78:42:FB:31:91:FA:4D:40:85:E4:D7:03
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0194FE0A1AB124523B4B0E6BAB2FBF11F670
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa
Signing time: Thu 13 Feb 2025 06:41:02 +0000
ROA not before: Thu 13 Feb 2025 06:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57988
IP address blocks: 2a13:2947::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:0a:1a:b1:24:52:3b:4b:0e:6b:ab:2f:bf:11:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Feb 13 06:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d02774d5cd26edf7842fb3191fa4d4085e4d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:41:e1:6a:e9:a8:56:f7:9e:5b:21:6d:10:
15:d9:5c:90:50:e8:bd:b0:f9:a8:96:26:07:f9:22:
67:c3:be:86:67:b1:ce:c9:a8:ed:02:2e:72:56:c9:
e0:7a:64:89:7a:50:36:ce:6d:f0:d9:4a:c1:49:8d:
56:9b:60:56:c3:7f:6b:b4:56:01:45:ba:17:5d:d5:
0f:d3:23:a1:94:c8:a9:33:eb:63:26:9b:f4:58:22:
27:23:60:54:d8:93:d4:e0:27:0d:4d:75:c1:e1:b5:
a2:46:c4:e1:53:5d:f9:5c:c1:4f:03:e4:b1:57:b8:
bb:f8:db:67:c8:ea:72:b6:bb:0f:34:93:1f:b3:c5:
ed:e9:6a:a1:2f:70:3d:0a:51:2f:3f:e6:1f:39:84:
5e:71:59:37:72:78:09:ca:a7:46:8c:b4:f4:a1:19:
17:4f:68:ff:ad:5c:e3:af:ff:db:9d:ef:a0:88:91:
1b:37:8b:a2:d9:08:5e:b9:0e:bc:5a:b0:5a:1e:86:
18:8c:77:e1:dd:c0:b5:45:1d:74:9c:7f:d5:79:ce:
43:79:04:6f:ff:2d:99:9c:55:a0:95:b0:e5:92:0c:
f8:c1:31:cc:fd:bf:03:b2:23:d7:96:27:f1:47:e7:
35:12:d3:75:a6:60:c7:7d:de:8f:0f:9e:65:31:05:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:77:4D:5C:D2:6E:DF:78:42:FB:31:91:FA:4D:40:85:E4:D7:03
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2947::/48
Signature Algorithm: sha256WithRSAEncryption
6f:fa:fd:87:3c:09:ea:71:da:01:68:d0:86:43:f4:b3:79:17:
b0:3a:3f:6b:78:9c:6c:5f:84:b3:56:18:b6:71:5f:d2:3a:b3:
74:f8:9d:6c:84:e9:b1:80:fd:6f:80:16:0b:60:56:db:4e:43:
05:49:bd:bf:59:5c:35:c4:72:a7:6e:a6:36:71:d7:cb:ff:42:
7f:60:b0:09:a6:b9:c8:c8:41:29:25:75:2f:26:3e:86:96:34:
89:20:b1:17:28:db:86:df:38:ba:d4:ac:5b:00:f3:4f:36:05:
78:70:66:9b:7f:7d:ac:49:a3:e4:9d:be:c5:0d:dc:e5:9b:bd:
50:4e:6d:45:a2:bb:43:72:eb:a8:d3:40:1a:e9:2f:d5:dd:6b:
70:e5:a4:19:13:b8:33:d0:f3:2e:56:4c:9c:e9:99:2f:c6:a2:
3b:25:97:30:0e:42:58:b0:4b:62:29:a4:ec:2c:5b:3e:ac:d4:
f8:06:c8:5e:3b:77:76:2c:73:ae:a4:84:e7:15:4b:ca:d8:38:
45:ab:6e:9c:19:a3:09:98:79:27:a1:67:fd:f2:e3:fb:c8:63:
93:69:4e:38:7a:4a:c1:38:fd:5c:9a:4f:4f:27:51:b7:71:06:
23:cd:4b:b2:37:8a:d3:27:3e:f8:80:00:2d:e9:28:ab:6d:87:
b7:2c:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:58 2025 by rpki-client