Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qcY19z6sO3gqBfcubeI5T36_1WU.roa
File: qcY19z6sO3gqBfcubeI5T36_1WU.roa (raw, json)
Hash identifier: o4Hp6WW3TcmeTIXrje2tlpPI3EHTH4Nky/o+hAIJoiI=
Subject key identifier: A9:C6:35:F7:3E:AC:3B:78:2A:05:F7:2E:6D:E2:39:4F:7E:BF:D5:65
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919A96D7F86BEC18DEFB7CB65D5AC83488
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qcY19z6sO3gqBfcubeI5T36_1WU.roa
Signing time: Wed 28 Aug 2024 20:04:22 +0000
ROA not before: Wed 28 Aug 2024 20:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:9a96:b699/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9a:96:d7:f8:6b:ec:18:de:fb:7c:b6:5d:5a:c8:34:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 28 20:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c635f73eac3b782a05f72e6de2394f7ebfd565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:f0:16:75:cb:44:cd:f2:9c:37:cd:1b:5f:
68:50:4b:88:02:b2:07:4e:ff:31:f3:21:96:df:b4:
a1:62:0d:d7:16:a3:15:2e:97:59:7a:01:44:b5:45:
61:69:e7:06:d9:5a:92:8a:4f:19:78:b8:31:d6:bf:
94:49:c4:03:fe:24:3d:1a:45:49:78:ab:e3:17:0b:
ee:7e:46:0e:f8:b0:e2:35:ba:49:d2:1b:15:4b:f7:
46:50:e6:69:8d:88:4e:99:f8:3e:b6:3d:14:5a:e0:
81:e1:59:3e:04:04:3b:3d:7b:97:6d:ff:06:3c:d9:
1d:f4:dd:6f:23:76:6a:d5:ba:ee:dd:69:a4:ec:ac:
2d:a4:99:fc:d0:32:a2:e2:eb:00:d2:9f:a3:e4:f0:
24:80:a2:36:97:7c:af:d2:29:f7:96:7e:07:82:48:
7f:19:31:23:32:c1:24:ed:07:5b:03:b9:10:bf:57:
63:fb:96:24:bf:2c:88:5b:39:82:c7:b8:2e:dd:78:
b0:9a:c5:bd:20:45:51:98:22:3e:97:39:1d:7d:29:
41:0a:af:bf:3e:a1:d8:6a:8c:07:4b:94:d9:57:f2:
60:34:b8:3c:56:26:8e:ef:ae:3e:15:a6:9e:b6:42:
4b:8a:17:e0:72:b9:f2:da:a1:21:d5:71:78:82:03:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:35:F7:3E:AC:3B:78:2A:05:F7:2E:6D:E2:39:4F:7E:BF:D5:65
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qcY19z6sO3gqBfcubeI5T36_1WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:9a96:b699/128
Signature Algorithm: sha256WithRSAEncryption
98:bd:6e:31:b8:41:a1:3a:48:89:59:18:41:8e:76:70:e2:ef:
ec:9c:d7:36:32:4a:7f:92:79:0b:6b:24:7e:e0:55:11:10:91:
85:ef:7e:7c:0a:54:ce:9d:a3:9b:b1:27:ab:e0:95:12:fa:63:
42:0d:45:f4:3f:e1:6c:11:bb:e8:0c:7e:fb:76:85:e9:29:0d:
67:9c:07:05:e6:28:64:df:00:5c:9e:51:79:99:ac:d4:1a:9a:
64:06:b1:2c:14:ad:e6:4e:de:a0:6b:84:a1:63:d8:c4:84:15:
1f:a8:94:37:1b:3b:d5:a8:49:29:66:d9:37:4f:77:93:8b:62:
40:12:e8:9d:8d:6f:65:89:a1:42:23:fd:b0:3b:f4:39:fa:73:
17:0c:aa:b3:45:6a:d1:24:26:ad:90:00:c3:2a:a4:09:2c:4a:
ed:d1:40:f9:6b:d9:c2:17:71:f7:14:32:a8:90:95:3b:10:e9:
93:d1:5d:bc:5f:ff:47:4b:be:56:a7:73:33:b0:17:76:9a:37:
c6:b1:b8:52:fc:37:e5:ed:84:6e:7f:dc:86:7f:53:46:d6:a2:
75:95:7f:96:70:d0:06:03:41:7d:af:4a:a0:94:a2:85:85:3c:
17:c1:58:5b:77:c6:ee:d3:f0:46:cf:72:8b:17:4c:80:3e:71:
e2:4c:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:40:48 2025 by rpki-client