Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q6E3rtNNoC7EBJl5GXMv_Gfp9I0.roa
File: Q6E3rtNNoC7EBJl5GXMv_Gfp9I0.roa (raw, json)
Hash identifier: iSSLKG1CnYbs2mjYJ/uBzUMu3Pz2dPARmS84x87Faoo=
Subject key identifier: 43:A1:37:AE:D3:4D:A0:2E:C4:04:99:79:19:73:2F:FC:67:E9:F4:8D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945734E35FB9F1ACFAA32DC8CC17A1F411
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q6E3rtNNoC7EBJl5GXMv_Gfp9I0.roa
Signing time: Sat 11 Jan 2025 21:11:11 +0000
ROA not before: Sat 11 Jan 2025 21:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:34:e3:5f:b9:f1:ac:fa:a3:2d:c8:cc:17:a1:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 11 21:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a137aed34da02ec404997919732ffc67e9f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:2c:90:e8:54:a5:67:9f:49:54:58:d8:f7:
bb:7f:23:5a:59:be:21:4b:d2:1d:8f:fe:e9:51:77:
7f:bb:a6:f3:40:ce:dc:1a:1f:ae:5c:58:1b:aa:44:
80:eb:a2:fc:e2:f6:3a:85:6b:55:6d:71:b1:42:19:
3f:e2:62:a9:af:d8:ee:17:a2:78:ca:32:f5:ec:2d:
7c:31:57:d8:84:8e:f1:c6:3a:d2:ab:ea:37:74:ee:
32:65:dc:1f:6c:11:d8:9a:48:27:6e:16:63:d9:57:
3c:cc:07:76:1c:b6:2c:e3:3f:c0:a0:9e:da:73:d7:
72:16:b4:a6:ea:43:a9:6f:60:da:67:76:83:cb:e8:
b4:f4:63:08:90:ba:9d:ce:73:3f:95:45:2f:1a:56:
e2:f7:5e:0f:25:4b:96:a8:1f:53:e2:aa:50:af:b9:
93:f4:4e:67:07:90:d6:c7:15:ca:74:3a:d6:b5:56:
73:2f:f6:68:f5:fc:06:ac:e2:54:ff:db:04:23:c9:
72:b9:bb:9a:bb:cf:79:4d:25:c1:41:ff:71:45:69:
c0:b5:2f:17:39:3e:a4:14:c8:14:5c:5a:2b:f6:61:
9a:75:d0:6e:b5:b8:a6:14:0d:7b:b4:6d:d7:5c:76:
85:8a:ac:b1:5b:37:86:e7:61:76:3b:5f:b2:ca:56:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:37:AE:D3:4D:A0:2E:C4:04:99:79:19:73:2F:FC:67:E9:F4:8D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Q6E3rtNNoC7EBJl5GXMv_Gfp9I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
95:ed:8d:37:ca:2d:56:16:e3:ad:88:01:19:b8:93:d3:b8:35:
7d:35:81:43:be:31:1b:76:0b:75:f4:1d:96:67:2d:d7:44:34:
94:32:77:49:57:b4:3e:62:ce:53:10:33:b8:9d:6a:83:e4:f9:
49:42:9a:ef:4c:01:a6:49:e7:b8:af:f7:7a:1f:67:98:46:d5:
91:02:7e:2f:5b:65:8e:ae:72:a6:63:9d:f9:ae:a4:a9:46:28:
d7:f4:8f:c7:e9:08:84:bb:dc:b1:47:93:c3:0e:b9:51:98:d0:
ec:ea:e9:98:f2:25:10:41:14:45:ee:58:cc:22:6a:94:e4:3d:
f0:b5:24:cc:f5:c8:85:3b:9f:2c:5b:74:fa:47:c4:98:62:24:
a6:c6:11:09:a4:95:cc:7a:e7:ac:e0:09:b9:b3:6f:db:0c:db:
fe:2c:5b:b5:73:9b:9e:15:b5:60:70:fa:7d:15:3b:ad:02:f9:
6a:8b:ec:63:ac:4d:65:89:df:93:63:85:90:29:48:72:f8:2a:
ac:93:1e:dd:aa:39:16:89:65:11:a5:9f:ec:22:8a:c1:b6:68:
28:55:7f:7f:52:61:a8:b5:6f:f9:4d:ad:aa:54:bb:b4:56:95:
b5:e9:f0:3b:e2:1f:c1:43:88:d6:1c:28:92:45:78:0b:57:30:
8b:26:d1:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:32 2025 by rpki-client