Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/QpucqboD9L8Uv9-I8wC2eqyytjM.roa
File: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (raw, json)
Hash identifier: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=
Subject key identifier: 42:9B:9C:A9:BA:03:F4:BF:14:BF:DF:88:F3:00:B6:7A:AC:B2:B6:33
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 019489AF7BD08C1AF46C53893CC65FF5878E
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/QpucqboD9L8Uv9-I8wC2eqyytjM.roa
Signing time: Tue 21 Jan 2025 16:26:06 +0000
ROA not before: Tue 21 Jan 2025 16:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 2a0e:e6c0:8000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:af:7b:d0:8c:1a:f4:6c:53:89:3c:c6:5f:f5:87:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 21 16:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=429b9ca9ba03f4bf14bfdf88f300b67aacb2b633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:7d:4e:14:2c:86:0c:5c:b6:09:59:80:2c:
f0:50:ee:f6:9a:89:e3:46:ff:12:d8:22:01:79:c7:
5a:c6:aa:a8:0f:05:96:bc:3c:0b:d9:77:5c:c9:6e:
15:66:67:87:b0:13:72:75:79:6b:1a:33:81:aa:64:
4a:3c:d3:8a:74:53:d5:d0:df:07:99:5a:13:11:a3:
c9:2a:a9:3c:cb:69:b9:84:ef:04:02:0c:5b:b5:2e:
e6:d5:bd:b1:fc:c3:3f:d8:5d:38:c7:a5:5f:00:87:
80:37:7a:72:15:82:e6:45:6d:c4:a1:ca:4f:3d:de:
07:2e:29:72:1d:c8:21:a4:33:bb:8c:c7:8a:de:dd:
43:bc:a2:b5:19:4b:a5:04:41:9e:68:61:05:c0:77:
b4:dd:e8:12:b7:13:09:8e:0b:0d:f9:c5:73:fb:8a:
15:dd:97:b3:4a:4c:76:ed:50:96:1d:8b:b2:bf:f3:
25:ca:d6:5d:c7:18:1f:58:69:e6:05:b2:10:d1:a1:
43:cc:b2:fd:3c:22:92:51:87:13:00:47:81:9c:01:
91:42:ed:54:90:10:b2:6e:18:55:23:a9:58:17:59:
a7:47:52:cc:97:f4:c8:59:5d:ab:9d:f9:2b:68:d6:
91:8a:16:d5:49:91:bd:0a:c7:14:e4:18:7b:a8:63:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:9C:A9:BA:03:F4:BF:14:BF:DF:88:F3:00:B6:7A:AC:B2:B6:33
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/QpucqboD9L8Uv9-I8wC2eqyytjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e6c0:8000::/44
Signature Algorithm: sha256WithRSAEncryption
7e:25:e2:59:b3:d7:3b:94:38:80:73:6c:8f:58:1d:78:19:fa:
57:7a:46:59:a0:e7:58:0a:22:d4:e5:e7:3e:3a:fc:22:1a:64:
e7:4a:e5:9b:29:8b:85:bd:2a:12:92:95:e6:f0:27:49:e7:ea:
ea:05:28:9c:0e:87:7b:75:10:21:d4:4d:82:b9:83:5e:e4:6c:
00:ae:59:85:d6:7c:60:b5:3d:df:3a:63:ae:b8:52:6b:6b:61:
f0:f0:d4:e9:e9:79:ea:a1:84:e6:05:bc:95:47:90:43:b0:1d:
ed:5b:26:04:f1:0b:94:47:b3:42:04:71:13:d7:e8:4d:f0:64:
cb:1d:5c:a2:d1:22:5c:5b:4f:8d:e2:81:ce:53:d1:e9:b6:b3:
70:c6:18:2c:3c:8c:79:cb:97:b5:26:d1:45:85:47:2e:13:6d:
d3:36:bf:03:0e:e1:4b:94:f1:78:5e:dc:58:3a:a8:0f:62:28:
25:f6:2b:00:ab:44:79:45:1e:01:f1:fc:30:6d:33:ac:27:3d:
af:e9:24:69:d2:0d:eb:97:1f:af:83:73:ad:86:9f:83:05:f3:
58:83:9c:27:7c:48:03:86:0b:9b:1c:5a:e0:c8:75:de:d8:62:
00:24:99:42:c5:64:53:30:b5:31:12:08:26:a2:76:a7:29:e8:
82:08:d3:ed
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZSJr3vQjBr0bFOJPMZf9YeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjUwMTIxMTYyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjliOWNhOWJhMDNmNGJmMTRiZmRmODhmMzAwYjY3YWFjYjJiNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCJ9ThQshgxctglZgCzwUO72monj
Rv8S2CIBecdaxqqoDwWWvDwL2XdcyW4VZmeHsBNydXlrGjOBqmRKPNOKdFPV0N8H
mVoTEaPJKqk8y2m5hO8EAgxbtS7m1b2x/MM/2F04x6VfAIeAN3pyFYLmRW3EocpP
Pd4HLilyHcghpDO7jMeK3t1DvKK1GUulBEGeaGEFwHe03egStxMJjgsN+cVz+4oV
3ZezSkx27VCWHYuyv/MlytZdxxgfWGnmBbIQ0aFDzLL9PCKSUYcTAEeBnAGRQu1U
kBCybhhVI6lYF1mnR1LMl/TIWV2rnfkraNaRihbVSZG9CscU5Bh7qGNdcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEKbnKm6A/S/FL/fiPMAtnqssrYzMB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvUXB1Y3Fib0Q5TDhVdjktSTh3QzJlcXl5dGpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7mwIAA
MA0GCSqGSIb3DQEBCwUAA4IBAQB+JeJZs9c7lDiAc2yPWB14GfpXekZZoOdYCiLU
5ec+OvwiGmTnSuWbKYuFvSoSkpXm8CdJ5+rqBSicDod7dRAh1E2CuYNe5GwArlmF
1nxgtT3fOmOuuFJra2Hw8NTp6XnqoYTmBbyVR5BDsB3tWyYE8QuUR7NCBHET1+hN
8GTLHVyi0SJcW0+N4oHOU9HptrNwxhgsPIx5y5e1JtFFhUcuE23TNr8DDuFLlPF4
XtxYOqgPYigl9isAq0R5RR4B8fwwbTOsJz2v6SRp0g3rlx+vg3Othp+DBfNYg5wn
fEgDhgubHFrgyHXe2GIAJJlCxWRTMLUxEggmonanKeiCCNPt
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:40:05 2025 by rpki-client