Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa
File: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (raw, json)
Hash identifier: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=
Subject key identifier: 08:D4:02:49:52:84:30:65:D9:59:88:6E:17:01:65:7D:E2:61:DD:4B
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019422FB817382B1FCE4FD459D2329EFAECE
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 2a00:adc0:1a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:81:73:82:b1:fc:e4:fd:45:9d:23:29:ef:ae:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d4024952843065d959886e1701657de261dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:57:8a:b2:96:8c:01:26:a0:32:6c:33:60:
77:62:c7:ff:a8:b2:84:24:23:22:45:a9:90:0f:dc:
ea:37:8c:68:96:5d:99:66:7d:a8:d6:85:14:ec:42:
03:70:b6:b8:d7:54:9a:c9:7f:ca:94:55:de:31:f8:
cc:c6:89:e9:58:e2:b9:7d:5d:db:06:2b:54:66:4f:
87:89:2c:18:58:57:34:91:4c:58:64:cb:d8:f3:ee:
b2:2a:1f:64:cb:8b:c4:91:99:6b:76:fe:16:49:51:
29:e9:42:bf:93:c7:37:91:b1:61:44:11:6e:64:e8:
a5:ea:df:89:d6:f0:4d:f9:23:04:41:10:19:50:03:
90:b5:c3:4f:68:42:75:8a:68:57:16:4c:48:4c:87:
c6:91:05:39:1b:d6:1d:6d:c4:6e:b2:99:b9:1e:fb:
e6:22:d9:05:e6:dc:d3:f3:e3:61:a3:fc:04:c9:d1:
4a:ca:11:33:e1:7b:bb:7f:55:ab:06:9f:2d:fc:45:
25:7e:d9:6d:95:cd:96:51:a4:7e:3e:45:57:98:f5:
16:12:c9:6e:a0:0c:b7:40:d8:13:0b:30:ac:14:2a:
a1:c2:b6:8d:23:43:25:57:20:e2:4d:de:6b:e1:50:
da:d6:b0:05:73:d6:22:9d:2a:fc:08:49:4e:24:3c:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:02:49:52:84:30:65:D9:59:88:6E:17:01:65:7D:E2:61:DD:4B
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:adc0:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
74:b6:bc:4e:07:40:7f:70:ac:1f:06:6d:52:f6:f0:4d:6b:04:
04:0d:60:b8:aa:d8:f3:75:e2:25:ec:48:c5:21:28:b3:23:37:
ea:a4:14:44:81:cf:f8:d0:3f:4e:b2:3c:33:ae:97:f7:78:99:
92:45:47:e5:af:d7:df:b0:93:64:0d:5a:19:04:ed:4f:e9:43:
ad:2b:fb:a7:f7:97:cc:56:1b:ae:b7:da:20:7e:6f:78:c3:19:
d5:28:dd:1d:62:3a:9f:3e:af:50:4e:55:a2:35:94:49:a2:95:
28:11:4b:95:36:65:3f:ac:67:8c:26:a2:9f:60:9e:ff:b9:60:
73:36:eb:f6:b3:60:97:ca:4b:3c:48:8f:c7:0c:fa:68:a4:de:
10:34:af:16:37:14:b4:46:50:88:95:a3:7d:f6:6d:e8:45:bf:
10:60:70:c4:a3:dc:dd:87:d3:0a:67:55:ac:9e:09:bf:13:af:
27:25:32:b6:62:e8:67:0e:22:f7:48:dd:0c:9b:0a:74:b1:3e:
aa:61:ab:73:83:ae:32:2d:ec:b2:50:57:e1:69:fc:27:58:d3:
ee:ea:30:ab:53:fb:6d:8c:08:c4:02:9e:16:5c:64:5b:f6:65:
ab:36:9f:12:6b:a9:2b:9b:9b:db:27:6d:a0:0f:4d:20:43:bc:
e7:ff:dd:f9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQi+4FzgrH85P1FnSMp767OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4
NTNiOTUwHhcNMjUwMTAxMTc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQ0MDI0OTUyODQzMDY1ZDk1OTg4NmUxNzAxNjU3ZGUyNjFkZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgxXirKWjAEmoDJsM2B3Ysf/qLKE
JCMiRamQD9zqN4xoll2ZZn2o1oUU7EIDcLa411SayX/KlFXeMfjMxonpWOK5fV3b
BitUZk+HiSwYWFc0kUxYZMvY8+6yKh9ky4vEkZlrdv4WSVEp6UK/k8c3kbFhRBFu
ZOil6t+J1vBN+SMEQRAZUAOQtcNPaEJ1imhXFkxITIfGkQU5G9YdbcRuspm5Hvvm
ItkF5tzT8+Nho/wEydFKyhEz4Xu7f1WrBp8t/EUlftltlc2WUaR+PkVXmPUWEslu
oAy3QNgTCzCsFCqhwraNI0MlVyDiTd5r4VDa1rAFc9YinSr8CElOJDzSLQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFAjUAklShDBl2VmIbhcBZX3iYd1LMB8GA1UdIwQY
MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt
ODc3NzU0NGM5Mjc1LzEvQ05RQ1NWS0VNR1haV1lodUZ3RmxmZUpoM1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1
LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgCtwBow
DQYJKoZIhvcNAQELBQADggEBAHS2vE4HQH9wrB8GbVL28E1rBAQNYLiq2PN14iXs
SMUhKLMjN+qkFESBz/jQP06yPDOul/d4mZJFR+Wv19+wk2QNWhkE7U/pQ60r+6f3
l8xWG6632iB+b3jDGdUo3R1iOp8+r1BOVaI1lEmilSgRS5U2ZT+sZ4wmop9gnv+5
YHM26/azYJfKSzxIj8cM+mik3hA0rxY3FLRGUIiVo332behFvxBgcMSj3N2H0wpn
VayeCb8TryclMrZi6GcOIvdI3QybCnSxPqphq3ODrjIt7LJQV+Fp/CdY0+7qMKtT
+22MCMQCnhZcZFv2Zas2nxJrqSubm9snbaAPTSBDvOf/3fk=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:15 2025 by rpki-client