Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QTvTsSl47G_REIeqagY_qVXrbBg.roa
File: QTvTsSl47G_REIeqagY_qVXrbBg.roa (raw, json)
Hash identifier: vAe9fO1GsCMHk6yOXJ+4VuCA+JpDZdiFf0Sm3nk/V7w=
Subject key identifier: 41:3B:D3:B1:29:78:EC:6F:D1:10:87:AA:6A:06:3F:A9:55:EB:6C:18
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01957E7175F78152254C2933D651A7736AE5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QTvTsSl47G_REIeqagY_qVXrbBg.roa
Signing time: Mon 10 Mar 2025 05:05:19 +0000
ROA not before: Mon 10 Mar 2025 05:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:7e70:c450/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:71:75:f7:81:52:25:4c:29:33:d6:51:a7:73:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 10 05:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=413bd3b12978ec6fd11087aa6a063fa955eb6c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:9a:aa:00:c6:ea:e0:5f:3d:54:11:55:90:
f1:31:64:b1:85:90:d0:91:94:27:87:d1:c6:e1:af:
44:96:32:86:dd:3c:43:ec:da:6f:ac:48:5a:ba:ed:
6d:99:a0:d4:f5:e4:d0:a8:75:6c:24:1c:56:bf:df:
ed:1f:59:b2:9d:1d:71:ef:a1:81:2b:54:1f:3f:5a:
bd:c2:e1:3b:b0:a4:b7:88:37:7e:78:26:d3:71:05:
db:68:8b:1a:4e:ca:02:2e:81:19:d9:00:6f:65:41:
4d:f0:f8:59:ff:dc:2d:37:28:5f:34:b8:b0:69:f7:
06:60:7a:92:48:71:01:78:b7:26:4e:08:1e:67:d1:
1c:5b:30:d0:a4:60:3f:d7:65:86:78:35:11:0a:08:
0d:24:11:57:61:2f:47:56:52:3d:5e:61:bd:cd:3f:
0f:ef:f4:03:44:9d:17:ba:50:8e:47:ee:d4:89:a9:
87:dd:f1:b9:ed:87:24:96:08:2c:fe:d4:95:c5:1d:
a7:8e:62:72:21:38:cb:bb:0e:b1:37:21:53:2e:d2:
4f:9f:e1:61:4d:b0:5e:7e:9b:87:63:96:8a:af:89:
a2:eb:5e:c8:a6:a6:8c:82:ef:42:ff:ed:9d:03:f9:
d6:68:f4:f8:01:0a:74:a4:3f:73:09:46:08:14:8c:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:D3:B1:29:78:EC:6F:D1:10:87:AA:6A:06:3F:A9:55:EB:6C:18
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QTvTsSl47G_REIeqagY_qVXrbBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:7e70:c450/128
Signature Algorithm: sha256WithRSAEncryption
1a:1a:28:dd:42:16:9a:d9:d9:4e:5a:aa:40:7f:29:49:c7:04:
db:c7:9d:29:ac:86:28:f3:3d:6a:2a:e7:73:6f:ae:a2:0d:de:
0c:cc:31:fa:15:c8:7d:36:7e:70:1c:8f:96:76:aa:c2:76:db:
84:54:c2:fe:a6:0f:41:63:99:67:39:57:8d:ce:d0:96:e2:f5:
8d:6e:2e:85:8f:8d:e7:54:d2:2e:c0:d7:f5:fa:d8:d7:63:fa:
f3:58:37:2a:f3:16:4b:06:35:a4:df:e4:d7:3d:e8:fb:8c:0d:
8b:27:d2:07:09:82:eb:48:11:1e:38:53:58:e2:53:c4:2c:97:
0d:3e:b1:f5:89:0d:8b:80:e1:47:5e:56:2c:de:07:79:6a:5a:
4f:e8:59:37:1b:e6:fa:e8:a8:6d:29:b0:78:ef:77:a9:80:90:
c3:88:9f:e3:15:8d:d9:30:6e:e4:e6:7b:c1:23:72:19:a4:9e:
6a:2a:d5:b0:78:66:32:b4:e2:74:63:5a:59:4c:e2:76:a2:4d:
71:c1:fa:c7:a9:ae:45:35:2b:93:f8:d7:66:4c:db:fb:b8:73:
0a:f9:9c:79:01:b7:08:fc:64:b7:92:d0:87:5d:9f:2e:16:7c:
32:87:8e:3f:a9:8c:2f:9c:5b:b4:8c:5a:0f:1f:54:c7:6c:28:
95:76:88:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:15:55 2025 by rpki-client