Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qQ-d3XRIMp4Kp0mKYHaMDq8k5SI.roa
File: qQ-d3XRIMp4Kp0mKYHaMDq8k5SI.roa (raw, json)
Hash identifier: 0Tma8JG1zcUQQblL4joDWsTF3N62Rm44PCRQA86G8Wo=
Subject key identifier: A9:0F:9D:DD:74:48:32:9E:0A:A7:49:8A:60:76:8C:0E:AF:24:E5:22
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE140F860D06D7397E7C1EB4504FB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qQ-d3XRIMp4Kp0mKYHaMDq8k5SI.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205816
IP address blocks: 2a06:e881:113::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e1:40:f8:60:d0:6d:73:97:e7:c1:eb:45:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90f9ddd7448329e0aa7498a60768c0eaf24e522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:37:78:c4:fc:ec:bc:00:c1:cc:57:db:40:
43:74:45:0e:f8:3f:7b:45:c2:85:76:c0:04:61:ac:
84:5f:ce:3f:2a:33:59:98:8e:13:f0:4f:23:53:b9:
56:d2:2e:fa:01:77:c2:eb:3e:64:a2:97:77:08:21:
1f:69:e8:1c:38:ad:c1:6f:8d:8f:2d:80:1c:11:03:
84:cb:53:5d:44:55:81:90:64:4f:ed:14:91:db:7b:
f6:0a:1b:d2:12:23:72:0f:33:25:55:29:a4:de:03:
1a:41:8c:b5:ac:0c:0b:1c:d3:34:0a:a4:e9:4a:b4:
02:b6:17:64:68:c2:71:94:d7:ca:8c:e3:94:47:d5:
32:22:21:3f:8d:22:14:5c:72:e1:72:10:6d:19:18:
2d:67:c7:22:0d:57:a4:8d:a8:99:c0:48:4c:de:17:
05:6e:7c:a0:cc:29:9a:8a:41:dd:02:87:76:99:f8:
3b:95:23:93:2a:6b:77:33:13:29:cb:7c:a7:93:36:
98:b8:34:f1:72:33:65:f1:9a:72:f7:a4:5d:d7:c6:
84:83:5c:66:15:ad:2c:cc:74:ea:04:29:99:5c:ef:
a9:9d:d4:32:34:9c:75:58:09:6d:aa:4d:5e:68:75:
02:eb:04:7a:1b:5f:8b:bd:67:ef:5f:82:4e:28:77:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:9D:DD:74:48:32:9E:0A:A7:49:8A:60:76:8C:0E:AF:24:E5:22
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qQ-d3XRIMp4Kp0mKYHaMDq8k5SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:113::/48
Signature Algorithm: sha256WithRSAEncryption
cd:cb:89:4f:cc:ff:b5:5f:1e:e5:05:0f:fb:96:cd:1f:de:6f:
57:f3:4c:c9:92:ea:76:a1:b3:1c:95:f2:17:3b:98:75:0c:15:
42:8e:06:ff:6c:ed:5b:6c:d8:51:3f:64:eb:b5:47:51:bc:0d:
ca:41:2a:b7:35:40:65:3f:ae:a4:09:da:80:76:6e:fc:74:39:
7e:46:72:11:bd:83:c2:9e:43:39:f8:49:d6:58:f6:d9:2e:01:
f8:27:b4:07:50:0a:fb:38:3d:d8:55:e4:59:51:b1:6e:df:ef:
5c:b5:29:a8:64:6e:ff:9b:92:3c:e6:09:43:3d:50:2e:99:9d:
57:86:b1:01:61:32:33:71:8c:9d:7a:e8:40:d6:0a:ea:ce:cb:
b8:32:7b:56:f1:a3:06:22:b1:5c:c9:93:c9:f1:b0:54:e2:cd:
71:a5:58:4d:5f:14:60:63:c4:8a:a2:11:06:6d:5b:5f:d1:2e:
1f:b8:95:5d:14:e3:14:aa:ad:d3:70:1b:c7:cc:5f:01:82:ae:
2b:82:4d:2b:0d:1a:cd:56:c7:ca:5a:66:f4:1d:b3:bf:98:ea:
72:ae:4c:27:a2:32:d0:4a:cd:d1:22:ea:16:08:c6:73:bf:33:
10:e7:95:e4:e4:a7:90:9e:4f:4d:c7:5a:08:57:b8:d5:ef:37:
e5:62:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:20:00 2025 by rpki-client