Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/QP6HFrGNHPgiMzuluLrD65g0i-A.roa
File: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (raw, json)
Hash identifier: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=
Subject key identifier: 40:FE:87:16:B1:8D:1C:F8:22:33:3B:A5:B8:BA:C3:EB:98:34:8B:E0
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0194244540CA7A4A85B095087226D7049B31
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/QP6HFrGNHPgiMzuluLrD65g0i-A.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51391
IP address blocks: 2a0b:6b86:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:40:ca:7a:4a:85:b0:95:08:72:26:d7:04:9b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40fe8716b18d1cf822333ba5b8bac3eb98348be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:01:ea:a1:20:b3:25:05:8e:b7:27:40:b6:
ad:82:f9:9d:35:57:ee:10:e7:90:92:19:97:68:c6:
6d:7d:21:bc:59:df:40:63:07:2d:43:49:7c:43:65:
56:02:3d:48:c5:db:c1:29:a9:42:11:6b:e0:c7:c3:
55:74:58:61:28:e6:c3:d0:5b:a6:9b:05:1a:13:d5:
4f:f9:07:cf:5b:23:4f:26:29:95:09:be:f8:eb:f7:
5d:0d:2c:ac:8a:be:a9:9a:34:7a:63:3d:f5:f4:4e:
a5:22:a1:2a:56:67:b0:cf:16:14:da:9d:80:3f:a0:
b9:de:00:31:2d:42:09:58:3f:97:88:87:43:2d:87:
55:ba:02:88:17:5d:6b:0f:5e:bf:eb:d4:cb:ba:66:
0e:94:1c:96:28:12:2c:5f:df:8b:6f:db:d0:00:37:
17:64:89:88:00:18:df:9f:1c:e6:a1:67:e4:e6:46:
5d:95:a7:57:54:e6:96:57:9d:84:e5:ff:59:22:c5:
02:18:54:09:a0:1f:99:f2:35:a7:81:26:7e:06:24:
2f:a2:0d:f3:8a:a7:64:0c:ce:9a:67:8a:7c:10:f4:
0b:87:75:bd:84:20:cd:ae:14:d7:9f:8b:d5:4e:78:
26:1a:3a:e8:0b:c5:28:44:5a:47:a8:b9:b8:1d:ba:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:87:16:B1:8D:1C:F8:22:33:3B:A5:B8:BA:C3:EB:98:34:8B:E0
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/QP6HFrGNHPgiMzuluLrD65g0i-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:100::/40
Signature Algorithm: sha256WithRSAEncryption
92:fa:96:99:65:11:be:9c:ad:a4:bd:a7:6f:50:db:d7:9f:74:
93:7e:96:77:69:e9:11:de:3f:46:86:b0:76:49:a0:81:d5:e0:
40:63:3c:63:0b:b0:e3:08:fb:ab:f4:53:f8:c1:7d:67:12:5f:
88:0c:b2:73:1a:e0:04:27:af:a6:8b:d2:dc:c2:af:cd:86:8e:
e8:b4:6c:f5:e6:09:ae:70:b3:6a:77:6a:e3:08:eb:a1:c5:71:
66:5f:01:ed:df:d8:17:f1:fc:91:2e:e9:b0:53:87:26:a6:b1:
a0:48:fd:68:5c:85:3f:b4:75:12:33:dc:ef:98:f3:16:18:4c:
2d:f6:97:8d:d8:bb:80:a0:54:9f:76:40:2e:c1:10:fa:4f:6d:
ae:96:ed:1b:a5:99:28:a6:ea:5e:0f:b8:38:41:f7:5e:b4:26:
8c:0a:5e:05:81:15:2b:c3:cd:96:1f:1e:01:d1:d7:72:82:b1:
06:45:ab:92:a7:32:02:aa:2c:62:65:70:2e:7a:a3:36:f0:1e:
5d:ba:8d:89:50:d4:69:f9:41:b8:1c:f8:a5:68:79:76:26:6b:
b9:68:e5:de:fa:95:8e:43:23:2f:92:20:ae:9a:b3:a3:44:14:
66:63:44:66:bf:ee:11:94:bb:34:4c:d0:24:b3:be:db:a6:7e:
03:a5:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:12 2025 by rpki-client