Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q-HZkWqk9TipjF45g8stLuBfKpo.roa
File: Q-HZkWqk9TipjF45g8stLuBfKpo.roa (raw, json)
Hash identifier: GyZTHCcqa/NwcXilxJq2rUNoYRUai6ipTNtol2tKvu8=
Subject key identifier: 43:E1:D9:91:6A:A4:F5:38:A9:8C:5E:39:83:CB:2D:2E:E0:5F:2A:9A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195881F5633B1D3C8B05599246D14C4EA8C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q-HZkWqk9TipjF45g8stLuBfKpo.roa
Signing time: Wed 12 Mar 2025 02:11:49 +0000
ROA not before: Wed 12 Mar 2025 02:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:1f:56:33:b1:d3:c8:b0:55:99:24:6d:14:c4:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 02:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43e1d9916aa4f538a98c5e3983cb2d2ee05f2a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:6e:3f:5b:05:c6:54:b3:dd:0d:50:2b:5c:
cd:d1:db:cf:5b:5d:ef:9d:34:e1:eb:ab:d6:2e:79:
4c:bf:08:2b:37:7e:97:e7:47:c4:ba:ff:99:61:32:
6e:26:af:be:51:37:f8:5d:ad:97:40:66:e1:5b:b0:
f7:c4:40:27:1f:df:a2:b3:a7:a1:00:26:4b:59:23:
67:47:51:0b:40:42:44:8d:6c:6e:25:c9:e0:a2:bb:
a5:cf:04:3b:d1:e5:a9:e6:36:37:e1:78:d1:35:3d:
4b:9b:5b:53:5f:be:f0:dd:bc:84:90:1f:e5:1c:83:
b2:fc:e0:1b:b6:4c:2b:9f:38:30:22:dd:c5:d1:aa:
a6:ee:b8:81:9d:b8:c4:3d:8c:6b:a3:c4:5b:a2:5d:
1f:96:6c:bc:ae:77:96:60:79:cb:35:24:25:4d:8c:
7f:91:d0:dc:eb:57:42:50:f0:69:43:48:5d:97:28:
e2:6d:b1:3d:b9:af:1b:26:2f:ce:1f:b6:c6:68:d8:
81:0a:f3:ac:01:d3:42:0a:8c:26:c8:a5:e6:06:9c:
5c:ba:f2:e8:25:bd:66:2f:07:f3:77:f8:49:ff:75:
05:32:99:17:e0:a4:e3:5b:e0:2c:13:9e:79:45:93:
15:27:c9:6a:9e:5b:d3:eb:b2:b9:c5:21:dd:96:86:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E1:D9:91:6A:A4:F5:38:A9:8C:5E:39:83:CB:2D:2E:E0:5F:2A:9A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q-HZkWqk9TipjF45g8stLuBfKpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
22:68:ec:3e:ed:32:97:5a:a9:58:e3:4a:98:a6:50:a9:b9:19:
65:8c:2e:d0:1e:25:74:a2:ab:aa:8e:b3:05:1b:7e:17:33:1e:
73:cd:6f:4b:b1:f3:47:9b:16:ec:98:72:36:96:bc:19:2b:4a:
8b:84:90:7f:3b:ef:c4:35:e4:71:55:e6:98:78:cd:42:a4:60:
b2:66:17:8e:68:32:1d:a3:67:ae:04:53:02:82:d6:60:e2:23:
9c:89:90:8d:db:08:9b:a7:06:fd:bc:79:f2:13:8f:90:4e:0a:
92:6a:82:9e:09:49:fa:58:cb:82:e5:c2:d9:7b:ec:c2:d4:c2:
22:f2:fd:e7:19:37:bf:82:41:b9:a9:4c:a2:76:01:a8:21:ca:
36:ee:90:3c:09:f1:e1:62:09:82:e6:71:94:87:4c:16:93:f2:
94:3a:00:53:87:41:d4:94:d8:c6:1c:6d:a8:2e:e3:b7:78:83:
71:be:54:49:b9:fd:14:f9:50:60:3c:3f:90:75:b5:d9:13:0f:
2d:1f:61:67:87:2c:11:31:59:29:5f:16:01:6a:65:a0:e9:8d:
e9:f3:e3:ec:15:36:d1:69:69:3e:00:81:b5:29:19:ec:19:08:
a2:00:b6:38:d6:5f:75:49:9a:15:58:90:64:6a:17:08:e8:43:
6b:13:67:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:57:32 2025 by rpki-client