Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qZo9omHcOTyncOnO0gsFxsxuuXs.roa
File: qZo9omHcOTyncOnO0gsFxsxuuXs.roa (raw, json)
Hash identifier: eolXAiYDeDHj6Rb3TGyOYjFLt5dLLAUKr9a30ikXEnM=
Subject key identifier: A9:9A:3D:A2:61:DC:39:3C:A7:70:E9:CE:D2:0B:05:C6:CC:6E:B9:7B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A1053E812D629E487CB42DEAB48A7E74
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qZo9omHcOTyncOnO0gsFxsxuuXs.roa
Signing time: Sun 16 Mar 2025 22:13:50 +0000
ROA not before: Sun 16 Mar 2025 22:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:05:3e:81:2d:62:9e:48:7c:b4:2d:ea:b4:8a:7e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 22:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a99a3da261dc393ca770e9ced20b05c6cc6eb97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:d2:ca:20:e9:90:1e:93:47:a9:8a:08:20:
f7:6e:53:62:39:84:22:35:d0:55:a0:67:ea:d5:72:
d5:ef:dd:fe:74:8d:f9:94:64:6b:da:1f:c8:4f:2d:
b4:3c:1a:0b:60:55:3d:2a:2a:c6:af:57:a5:0f:54:
c0:9d:6a:7d:04:08:47:21:c2:a1:49:d4:4a:af:e2:
0f:92:db:9b:9b:4e:3e:c8:64:0d:9f:4c:c1:1b:74:
6e:b3:fe:a6:44:9e:34:f9:f5:09:45:77:73:ea:41:
c0:69:34:f7:ef:28:89:0e:57:70:b9:64:4e:5d:16:
30:eb:6b:13:43:68:58:6e:b4:7a:89:4b:51:31:db:
40:02:7d:0b:7c:ee:40:32:2f:76:11:5a:d1:ad:4f:
ba:c2:0a:34:92:25:cb:13:c5:d8:67:e3:ea:a3:b1:
d5:e4:b1:4b:51:9d:aa:60:b6:6d:a4:8b:61:ba:91:
29:ce:82:03:f5:6b:9b:42:e7:a5:35:26:5e:5c:38:
f1:fc:92:f2:fb:2f:c5:4f:32:ca:bf:98:df:4a:c2:
fe:76:15:63:02:a3:28:78:b1:46:38:3e:87:8a:8a:
10:b8:41:0b:f8:7e:8f:a6:e8:cd:75:19:80:93:10:
58:ad:1c:d0:c0:da:e7:1f:35:5e:81:11:f4:2a:ad:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9A:3D:A2:61:DC:39:3C:A7:70:E9:CE:D2:0B:05:C6:CC:6E:B9:7B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qZo9omHcOTyncOnO0gsFxsxuuXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
51:96:9b:0a:09:11:9f:7d:19:40:43:26:f5:22:44:87:ac:f8:
e4:c0:ad:56:1b:27:c4:b5:35:dd:fe:a0:99:41:9e:70:2b:b5:
f0:04:59:b1:2c:af:1e:67:b0:da:e6:49:e0:e1:97:62:85:0e:
50:6c:8c:9d:6c:ee:18:f4:ab:e5:af:73:73:7a:98:fa:0c:5c:
6f:74:f4:8b:df:b6:7e:e8:a7:ad:ad:4c:15:4a:a0:10:30:6a:
15:86:aa:fd:b7:7e:84:43:d1:9d:a8:a0:2a:1b:3d:2e:30:73:
d6:72:e4:2b:47:8f:cf:f2:0d:1b:ea:42:f9:ee:20:aa:c9:66:
fe:39:40:51:6a:5c:cd:e9:04:9f:e3:dc:1b:58:f5:65:32:af:
bd:a3:bd:e9:1b:ec:da:f3:ea:8f:94:55:20:ee:d8:fd:ee:81:
fb:ed:fc:82:b2:54:8e:31:cd:95:94:43:bd:bd:e8:b3:89:45:
d6:cf:66:8e:db:9b:53:a0:bf:b5:4e:d2:1a:31:5c:47:81:14:
9a:58:95:57:fb:4d:e9:03:46:cf:8b:f4:ba:06:67:47:70:21:
8c:0e:01:16:5e:c0:9b:39:7e:5c:9f:e8:26:fe:2e:49:98:33:
5d:8e:55:9e:01:18:97:8d:8b:d7:d3:38:94:e0:5c:18:d1:10:
4e:46:77:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:20 2025 by rpki-client