Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/PQtqUQS_s4n0kinqfMA_4YnfNNY.roa
File: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (raw, json)
Hash identifier: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=
Subject key identifier: 3D:0B:6A:51:04:BF:B3:89:F4:92:29:EA:7C:C0:3F:E1:89:DF:34:D6
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 01949A2951C9C24ABF94EF76FCDEA37C2520
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/PQtqUQS_s4n0kinqfMA_4YnfNNY.roa
Signing time: Fri 24 Jan 2025 21:13:06 +0000
ROA not before: Fri 24 Jan 2025 21:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44947
IP address blocks: 2a13:9a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:29:51:c9:c2:4a:bf:94:ef:76:fc:de:a3:7c:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jan 24 21:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0b6a5104bfb389f49229ea7cc03fe189df34d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:e5:27:46:b0:87:dd:68:b1:93:09:bb:28:
4b:46:31:9a:b2:a2:65:68:99:43:22:07:a5:2e:f3:
92:6d:af:ec:d4:85:05:ff:65:f9:cb:eb:fe:24:67:
21:b8:82:39:8d:03:a9:a5:63:03:cb:97:10:ba:ce:
12:26:96:c4:27:fe:de:39:9f:bc:16:b4:4a:14:a9:
6d:2c:85:86:8a:3f:d9:8a:95:6e:9f:24:bc:38:d0:
98:7b:88:89:3e:48:9a:89:6a:8f:90:4c:e0:8b:55:
13:3f:a7:c1:82:f6:0c:50:4f:6f:9e:92:ff:63:f7:
90:3f:8b:f0:2e:7b:f1:9b:e5:bb:37:1a:a4:26:f9:
d2:fe:a5:a0:c4:ca:f4:9f:8c:b7:96:97:54:5a:dd:
29:52:a8:33:d9:50:e5:d3:49:79:83:63:77:91:65:
26:51:97:f4:f8:9c:69:75:57:40:f6:26:b3:1e:f4:
c7:b0:08:c1:c6:c1:57:b3:df:4a:59:45:51:df:3c:
62:7c:85:47:44:fd:4b:f4:c7:6f:58:b7:40:70:a3:
68:a8:02:6c:36:74:7b:4b:40:a3:40:c2:2c:1e:0a:
65:fd:80:a0:be:49:d8:6c:09:6c:e9:8f:de:23:1c:
0b:d1:0a:d4:c7:4b:d7:8e:0a:68:80:aa:e6:eb:86:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:6A:51:04:BF:B3:89:F4:92:29:EA:7C:C0:3F:E1:89:DF:34:D6
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/PQtqUQS_s4n0kinqfMA_4YnfNNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
5a:07:46:f6:2e:7f:b1:74:57:f5:59:a8:6e:26:82:00:ba:87:
2c:da:95:26:a3:58:47:e6:4d:95:cc:04:57:ba:c4:79:fe:56:
35:ed:75:69:ef:71:bf:9e:72:0f:a6:35:c0:e8:0f:44:8b:ad:
7e:35:d5:f8:95:40:30:57:bb:fa:bd:29:1c:6d:7f:e1:11:b6:
13:e3:1e:71:f7:d8:6b:78:02:47:d5:98:a3:bb:56:13:b8:2a:
81:54:0e:5b:c3:1c:a7:10:eb:f5:9c:88:1a:e2:a5:09:d0:8b:
59:52:7f:a4:83:67:c3:dc:2a:58:79:1d:43:28:41:a0:96:4c:
08:fc:d0:45:0e:02:c2:fa:f4:80:0a:43:5c:bc:4e:85:15:f2:
b0:d8:91:46:63:7c:c7:67:d5:9a:d7:ee:22:49:d1:5c:5f:08:
d1:e2:18:9d:d0:8a:c5:e6:db:4f:3d:21:e9:02:3b:a7:c1:35:
a9:9e:2c:7f:52:fc:b8:6f:c5:b4:dc:ce:71:2c:04:ed:fa:9e:
dc:8d:2f:c0:68:7d:59:aa:5a:71:b9:86:c3:8a:15:c6:34:c7:
10:75:e1:67:c7:9c:73:67:1e:53:9d:21:31:bc:55:cb:2e:98:
a7:9c:11:0c:d9:d6:74:bb:86:ab:b5:59:75:e7:12:fd:0d:61:
18:b4:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:10:55 2025 by rpki-client