Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QqMWzeswbbx-3ULCpj_J_FAxw9M.roa
File: QqMWzeswbbx-3ULCpj_J_FAxw9M.roa (raw, json)
Hash identifier: 1Bnzp5eDeVL07fwZyjLqzifiFVBvNTZHYHyLw4f0GJk=
Subject key identifier: 42:A3:16:CD:EB:30:6D:BC:7E:DD:42:C2:A6:3F:C9:FC:50:31:C3:D3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192ACD24F407C9D2FDB74281CC1A757AFC3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QqMWzeswbbx-3ULCpj_J_FAxw9M.roa
Signing time: Mon 21 Oct 2024 02:05:16 +0000
ROA not before: Mon 21 Oct 2024 02:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:acd1:8076/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ac:d2:4f:40:7c:9d:2f:db:74:28:1c:c1:a7:57:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 21 02:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42a316cdeb306dbc7edd42c2a63fc9fc5031c3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:20:6b:2d:51:a5:46:db:d6:5b:22:00:49:
63:c2:a5:31:a8:55:43:f4:16:5e:75:9e:bb:9c:17:
e8:9e:e2:1a:3e:7d:9e:77:13:c4:f4:e9:5e:6b:0a:
40:0c:cd:8f:fa:d8:62:d5:6c:86:9c:33:63:f7:3f:
66:72:11:4d:fd:93:35:e9:38:92:fb:fd:58:c6:4d:
70:fd:3a:ca:73:5f:fb:26:eb:3d:55:fa:11:83:b6:
a6:65:d9:ec:5b:36:f8:74:81:a7:08:f4:18:5a:b0:
27:99:0d:c8:f9:41:88:b6:e1:c5:26:05:a9:ca:ec:
6c:53:04:d6:69:d6:c3:cc:18:1d:d3:30:c1:62:c6:
9d:5a:fc:d2:2a:68:29:a2:55:fe:ae:61:b9:e7:09:
49:69:38:07:6f:58:2f:2e:b1:1c:4f:57:bd:ed:67:
90:fd:9e:60:fa:8c:86:e1:0d:79:fa:7c:bd:04:03:
40:9b:e9:0c:43:15:ab:b2:f4:29:62:e7:fd:eb:16:
60:88:bf:fc:b3:58:e7:7e:12:2d:7c:f5:12:3a:0e:
5f:45:c8:3d:95:2b:11:b2:8e:7f:66:e4:95:77:7c:
e4:40:30:41:c0:28:b9:71:a6:71:c6:d7:69:1b:b3:
36:05:09:d8:22:f9:50:27:e6:91:2c:fd:cd:0e:88:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:16:CD:EB:30:6D:BC:7E:DD:42:C2:A6:3F:C9:FC:50:31:C3:D3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QqMWzeswbbx-3ULCpj_J_FAxw9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:acd1:8076/128
Signature Algorithm: sha256WithRSAEncryption
65:af:e3:48:e0:d5:64:ae:ca:a2:a2:f8:41:04:dc:e4:04:4f:
eb:d2:a1:fd:b7:c9:82:61:86:35:05:4a:26:30:b2:dc:de:80:
a3:29:f1:67:b6:e1:a8:45:4f:0e:c3:89:6d:13:58:d1:b4:25:
9f:97:3c:5f:80:41:de:e9:af:ae:4e:6f:53:62:a7:05:b8:3a:
38:d5:4a:ae:a5:fb:7b:7b:61:93:43:80:60:e5:56:4b:cb:91:
79:ab:62:4b:94:a2:ae:cc:cc:33:74:33:2d:84:a8:eb:c1:13:
98:12:98:d6:52:6d:d2:2f:75:e1:7c:97:e6:74:4b:d4:1a:80:
a3:f9:7e:06:4e:07:75:92:01:3d:15:16:44:bc:fa:b6:3d:a3:
4f:f4:2f:d6:1c:37:84:72:e6:54:be:26:4c:98:62:b8:d8:f9:
ad:de:97:be:51:71:d5:82:b3:d2:d9:30:86:8f:55:9d:dc:3a:
62:cc:48:1b:3d:62:92:a4:7a:63:b5:c2:84:2b:e6:fd:fd:48:
b1:58:bd:d3:af:b7:3f:18:bd:8d:e1:49:f2:6c:c9:ae:6b:11:
ea:3a:65:a8:21:7e:0c:d5:1d:3f:7f:16:c4:91:3e:c5:89:d1:
22:3f:06:05:20:21:da:e5:e8:0e:2b:12:72:a9:cb:1b:55:4c:
2d:1a:73:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:40:00 2025 by rpki-client