Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/QP7dOzAPUPONiZDxeSjWnqQrerQ.roa
File: QP7dOzAPUPONiZDxeSjWnqQrerQ.roa (raw, json)
Hash identifier: RZBk3eba7BOow5OmJ6ySYcjTCilJwqbo7ZNfS7g6YDc=
Subject key identifier: 40:FE:DD:3B:30:0F:50:F3:8D:89:90:F1:79:28:D6:9E:A4:2B:7A:B4
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 09B814A2
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/QP7dOzAPUPONiZDxeSjWnqQrerQ.roa
Signing time: Wed 22 Jun 2022 12:05:34 +0000
ROA not before: Wed 22 Jun 2022 12:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61272
IP address blocks: 2a0e:2b03::/32 maxlen: 32
2a0e:2b01::/32 maxlen: 32
2a0e:2b05::/32 maxlen: 32
2a0e:2b00::/29 maxlen: 29
2a0e:2b07::/32 maxlen: 32
2a0e:2b04::/32 maxlen: 32
2a0e:2b00::/32 maxlen: 32
2a0e:2b06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163058850 (0x9b814a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 22 12:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40fedd3b300f50f38d8990f17928d69ea42b7ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:5c:d3:53:3c:62:42:a3:ee:0a:d7:a1:93:
c6:df:6e:68:e2:f8:c2:46:8b:e3:24:b6:2c:c1:af:
90:5e:11:6f:2c:b1:0f:c9:e1:0c:8e:7c:ea:e5:c1:
c5:02:97:ac:4d:ff:10:a5:65:36:8a:82:bb:24:64:
22:36:6f:79:93:df:35:77:9a:43:4b:95:9a:e8:d5:
da:2b:4f:54:2b:bd:d9:99:a4:d4:b3:92:e6:3e:0e:
75:15:03:25:89:7f:a0:b3:01:8b:f9:8f:2f:6a:15:
ed:a0:01:5f:5f:d1:22:8a:26:3a:16:77:99:8a:6f:
0a:05:39:a5:bf:75:24:50:c9:67:ec:a5:e0:b2:25:
ec:cc:cc:3e:02:83:e8:50:42:a0:09:d1:f7:67:7d:
66:05:e2:ef:39:8f:08:fa:09:9f:ae:02:64:41:e3:
66:97:94:2c:d2:ca:23:6f:cd:0f:42:c7:33:f2:0b:
3b:8d:ce:2c:b3:b7:fb:00:f1:c7:9f:b2:56:87:68:
04:b6:13:9f:70:a1:d2:85:d9:fc:37:64:87:b8:23:
c4:eb:0e:86:62:9b:e0:5d:97:cb:02:4b:52:f1:e4:
a6:cd:c7:ac:3a:a8:ef:68:50:5c:43:e6:98:57:86:
40:b9:56:5f:d4:ff:1f:09:e1:f1:fa:18:77:3b:62:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:DD:3B:30:0F:50:F3:8D:89:90:F1:79:28:D6:9E:A4:2B:7A:B4
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/QP7dOzAPUPONiZDxeSjWnqQrerQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2b00::/29
Signature Algorithm: sha256WithRSAEncryption
0a:de:85:c9:a1:cb:df:d0:46:cb:25:6f:ed:86:84:a6:27:eb:
01:79:f8:6a:9f:a2:3b:8e:6d:7d:9f:be:85:0a:55:00:2a:33:
40:23:e2:82:38:36:74:bc:f1:61:06:47:c6:a5:f1:93:f9:fa:
50:1c:79:f8:9a:08:42:8a:02:03:75:de:e7:8c:95:ac:77:89:
b3:8e:6c:60:a0:91:6a:8c:dc:ef:38:c1:47:fd:71:74:58:fd:
41:40:75:77:1f:3e:79:8a:15:19:3f:5c:69:be:4f:17:c3:4c:
9e:e2:7a:2c:3c:b2:a3:b7:9b:97:1f:1b:cf:16:10:22:ec:fa:
66:23:a3:4c:6b:b9:33:cb:2b:85:98:f1:eb:4f:24:62:ae:2e:
68:1d:28:b2:af:b4:b8:f0:79:a8:d1:dd:16:61:e3:a6:b2:39:
bf:8a:d1:3b:81:84:4f:69:b6:b7:38:db:a0:e0:c5:89:01:65:
51:ee:e5:14:8f:9c:dd:76:ed:11:3f:48:9d:59:56:9d:d1:58:
2a:80:36:b7:97:a6:73:e7:01:d8:91:20:c7:3d:c1:f5:7b:65:
5f:0c:6a:a7:8a:1c:12:ac:26:be:e4:59:d2:fd:c9:74:3a:55:
50:af:31:c8:d8:d9:83:5f:c0:5e:5d:bc:62:70:8c:3a:fd:93:
5b:40:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:19 2025 by rpki-client