Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q1AgI61bX3HF0zT54GLVvRQh_DI.roa
File: Q1AgI61bX3HF0zT54GLVvRQh_DI.roa (raw, json)
Hash identifier: paJdezzEYq28y+vsArZj0Y2QUGVRGd2ONrB0+/nLv/I=
Subject key identifier: 43:50:20:23:AD:5B:5F:71:C5:D3:34:F9:E0:62:D5:BD:14:21:FC:32
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01936749CCC44FB16438ACBAC67A7D553BA1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q1AgI61bX3HF0zT54GLVvRQh_DI.roa
Signing time: Tue 26 Nov 2024 07:05:09 +0000
ROA not before: Tue 26 Nov 2024 07:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:6749:21ba/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:49:cc:c4:4f:b1:64:38:ac:ba:c6:7a:7d:55:3b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 26 07:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43502023ad5b5f71c5d334f9e062d5bd1421fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:4a:55:3a:99:da:b2:bd:0f:a4:03:9e:ad:
3b:b2:b4:19:1d:32:a0:c2:dc:4d:c7:2c:cf:c7:f3:
65:a2:dd:35:38:34:c8:98:8e:0e:06:02:6c:04:3e:
89:30:e4:53:8b:da:8e:40:30:b7:49:13:6c:e8:a9:
f0:42:4e:85:10:83:e3:3f:01:27:9d:6c:98:af:f3:
e7:50:67:d4:a5:b3:b0:fe:ed:ca:a1:25:4c:f0:d3:
fe:aa:66:af:53:8f:b7:5a:34:da:da:0c:9e:d1:d7:
f7:0b:19:86:bc:54:8d:95:ff:78:c4:00:5a:ec:fe:
dc:f7:c5:36:19:cb:2c:5f:04:ab:d3:70:80:75:4d:
98:af:53:23:ec:bf:6f:dd:4f:52:08:43:2f:fa:aa:
30:5d:d9:ea:fa:0d:80:27:f1:2e:6a:e5:87:e8:ce:
b4:e7:33:22:4e:b2:1a:5d:3a:57:b6:14:80:34:8b:
c2:19:8f:9f:20:3d:72:16:38:c7:63:43:f4:46:28:
30:40:22:50:70:2c:41:f3:1f:23:8f:c1:9a:96:ac:
90:bd:3b:f5:87:e6:dc:c8:eb:b8:a8:87:2b:79:7a:
2a:9c:d3:e3:3e:bc:d1:bc:22:68:38:d8:d6:90:34:
64:bf:bd:42:29:d9:9e:14:f0:55:9f:f2:35:ad:53:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:20:23:AD:5B:5F:71:C5:D3:34:F9:E0:62:D5:BD:14:21:FC:32
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q1AgI61bX3HF0zT54GLVvRQh_DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:6749:21ba/128
Signature Algorithm: sha256WithRSAEncryption
4e:f2:45:23:57:ef:72:36:94:f0:7d:6a:25:a2:d2:d6:9c:2a:
8e:13:b2:a4:72:d9:95:a9:71:69:5d:be:fc:83:f1:70:77:54:
6b:b7:f2:83:4e:4e:4e:f7:8d:73:34:c4:b1:65:c2:41:bf:7f:
c5:aa:ab:7f:3c:f0:ad:ad:b5:20:21:fb:64:35:9c:8c:e9:9d:
d8:74:55:1d:67:f0:d7:6f:ac:89:a6:b1:15:8d:18:1a:e9:40:
e9:f3:ca:3a:cf:a4:69:c7:98:77:49:04:3b:0c:1d:3c:7e:40:
f9:5d:f4:de:d1:2c:ca:c7:b8:7b:e7:03:ce:fb:61:08:b1:a0:
e0:91:50:f5:88:b8:b8:95:48:d3:cc:b8:e4:d3:a1:c4:25:77:
aa:9e:7d:f8:d5:5d:10:32:96:aa:19:46:6c:51:4c:59:b3:e7:
bb:5c:0d:78:1d:18:4a:07:f8:d8:fa:30:9d:0a:08:fc:dc:79:
b4:af:01:32:e9:24:46:9b:60:7b:a6:d8:2f:c1:cb:16:62:dc:
3e:2b:50:31:00:45:12:5b:49:74:e7:49:79:dc:1c:7f:2a:83:
25:d0:75:5e:69:3d:bb:3b:90:59:10:46:5b:f7:b9:7e:ea:24:
11:85:8e:eb:5e:57:91:e4:8c:40:9a:ff:b0:c9:39:a0:ea:6e:
8e:56:5c:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:20:59 2025 by rpki-client