Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Qiq6sVtp9L0dudcpqP5NhnkispU.roa
File: Qiq6sVtp9L0dudcpqP5NhnkispU.roa (raw, json)
Hash identifier: FZoTbSAgyQLl44acRM/jIuUrrmeZQJbUrOXplFHmbsE=
Subject key identifier: 42:2A:BA:B1:5B:69:F4:BD:1D:B9:D7:29:A8:FE:4D:86:79:22:B2:95
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019598390A22D1971C26EC8A896648602806
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Qiq6sVtp9L0dudcpqP5NhnkispU.roa
Signing time: Sat 15 Mar 2025 05:13:49 +0000
ROA not before: Sat 15 Mar 2025 05:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:39:0a:22:d1:97:1c:26:ec:8a:89:66:48:60:28:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 05:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=422abab15b69f4bd1db9d729a8fe4d867922b295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:fb:b1:95:8c:da:b4:7c:e7:d5:1e:ca:d3:
45:4d:d3:00:05:09:5d:dc:12:b8:04:5a:03:81:de:
4d:64:81:9f:b4:60:da:6c:5f:e8:83:2b:45:a5:5d:
7c:07:31:c0:d9:45:4c:fd:86:ff:e6:75:3f:99:35:
d0:4d:57:9d:6e:bb:2d:ce:93:c0:40:24:b1:e1:01:
f6:84:36:55:9b:cc:39:a7:ad:2c:73:ea:e4:72:58:
49:2e:b5:71:b7:69:cd:7c:0a:6f:0f:e3:a6:9e:64:
4d:bb:00:3b:a9:55:13:1e:4b:42:50:e6:88:4b:09:
2b:90:c3:99:20:d6:84:61:ef:7a:d4:3f:90:78:00:
f6:30:37:13:d7:99:1b:81:8f:6d:0a:63:e4:02:6e:
0a:f2:bc:7b:ae:9a:29:64:51:a3:b3:1f:dc:e3:a6:
b6:6a:ce:b5:b3:12:72:06:93:49:1c:b3:ad:f8:74:
9b:a2:f3:2b:2d:ae:69:cf:2f:7b:31:ab:ef:48:58:
18:b4:0b:e0:16:d5:fe:d1:dc:83:e7:4f:18:cb:29:
cc:7e:fd:d9:55:16:dd:fe:93:4d:94:d7:a4:2e:7e:
a3:01:d0:73:48:5e:39:43:f3:cf:7d:1e:13:4e:13:
37:51:a1:8e:ba:07:e3:91:08:d2:a9:02:4a:9f:96:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:BA:B1:5B:69:F4:BD:1D:B9:D7:29:A8:FE:4D:86:79:22:B2:95
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Qiq6sVtp9L0dudcpqP5NhnkispU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
43:19:b0:88:a1:28:15:8a:0e:ae:bb:81:03:4a:bf:a7:fa:48:
d3:db:51:32:c3:68:c3:67:96:10:71:c6:90:6b:74:73:5f:59:
98:01:b1:1f:54:46:f6:46:ec:32:cf:31:fe:86:1e:c2:7f:6c:
d5:70:ba:6b:df:c3:c2:9c:62:7d:99:17:ef:0f:e3:39:ca:cf:
e0:7e:62:73:77:fb:75:2f:2f:0e:6e:6a:dd:f9:f6:3d:b6:03:
ba:b2:82:1c:f6:6e:74:43:46:f3:84:5a:92:1c:ff:07:a2:8d:
08:0d:2c:7e:91:49:7c:a8:1b:bb:71:8a:ff:41:da:e0:fc:4a:
6a:9a:71:fe:4a:dc:e4:93:26:c6:b6:23:8b:7e:b6:46:e2:43:
fa:6d:46:5c:2c:e3:4d:64:31:3e:ba:4e:17:2d:90:35:b2:e2:
b1:24:2e:d7:e6:c5:a1:af:a5:45:60:fb:8c:6c:71:b5:c3:6b:
99:52:86:ff:e8:45:7e:14:b1:36:98:33:61:f1:b7:ad:3c:0f:
95:f7:fe:9e:a0:ee:a9:3d:d6:7b:a3:59:52:04:74:c5:a1:72:
12:2f:f2:c9:95:9d:96:d2:38:a8:ad:4f:6e:d7:2d:a6:ea:f2:
e7:5f:a4:82:1c:fa:a0:b9:f3:6f:0e:59:e1:1a:83:88:ab:76:
1c:b2:e0:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:03 2025 by rpki-client