Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/Q3JTPjWcEREqifdCmIjbHLzzn7s.roa
File: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (raw, json)
Hash identifier: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=
Subject key identifier: 43:72:53:3E:35:9C:11:11:2A:89:F7:42:98:88:DB:1C:BC:F3:9F:BB
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 0194228DED3EF740BD4B0D3DE0C508C1EC27
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/Q3JTPjWcEREqifdCmIjbHLzzn7s.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8832
IP address blocks: 2a00:1498::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ed:3e:f7:40:bd:4b:0d:3d:e0:c5:08:c1:ec:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4372533e359c11112a89f7429888db1cbcf39fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:7b:4f:49:91:e2:5e:e1:ac:98:a3:9b:dc:
c4:ac:ee:ff:c2:70:b9:38:c1:56:11:d2:03:e5:f7:
1a:de:de:f3:0c:a3:e5:de:83:d9:d6:ed:7f:30:77:
5d:60:41:38:94:26:58:68:8e:cd:61:5d:59:a6:9e:
77:c1:69:2f:f7:d1:65:b6:e0:94:0e:84:53:40:15:
3c:b0:66:a5:48:b7:12:71:d3:c1:cc:57:dd:2d:f2:
42:9d:a4:04:a5:ad:2f:7b:5a:4c:ad:55:fa:08:be:
79:6b:46:c2:a5:9e:54:06:5e:1c:f8:71:47:e1:34:
27:ba:0a:2d:6f:83:92:34:6b:9f:ab:4c:5b:9c:01:
0a:5f:c6:d2:ff:de:d4:11:23:04:fa:dc:e4:db:94:
8c:88:3f:8f:4e:83:ab:68:58:5a:63:7a:90:c9:95:
b2:dc:7c:2d:19:76:d8:4f:cf:f3:01:88:4e:59:5a:
92:cf:74:31:67:6c:f1:81:d2:73:ba:be:fb:f3:bd:
ea:e9:11:34:f0:fe:75:f0:0c:49:b0:f5:06:2c:00:
ea:f4:fa:f6:01:c5:a9:f8:05:40:37:f3:c9:fa:d5:
4a:bf:47:60:89:0c:11:17:56:6c:e6:ec:c5:d2:43:
dc:0e:b7:58:25:55:0b:bd:8d:d4:b2:ad:be:0f:e8:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:53:3E:35:9C:11:11:2A:89:F7:42:98:88:DB:1C:BC:F3:9F:BB
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/Q3JTPjWcEREqifdCmIjbHLzzn7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1498::/32
Signature Algorithm: sha256WithRSAEncryption
19:37:c7:8a:ba:12:fb:33:89:ad:a4:27:09:32:49:31:98:53:
03:33:36:59:bd:8d:13:e4:85:ac:95:ee:8d:41:3d:1d:bd:1f:
82:23:71:a4:ab:a9:31:be:e4:85:f7:1e:33:13:3a:2f:00:c5:
e9:94:8d:6d:68:25:ea:48:e4:c3:87:ae:3e:e8:5a:cf:a7:6c:
72:0f:a1:51:06:57:1a:ba:fc:51:5f:a1:eb:2b:bb:cd:2b:a5:
03:f8:57:89:9f:5f:dc:24:32:1f:1e:07:65:e3:e5:1c:19:ee:
0a:2c:57:ee:e1:b2:8b:d7:58:6d:5d:a3:74:62:f7:b7:8e:8f:
39:1e:7a:27:0c:27:b7:eb:82:9d:e6:c9:b1:26:57:60:db:48:
b6:6e:24:c6:7e:69:76:bc:d4:8e:08:e0:c8:ae:34:53:4b:fd:
94:6c:3f:d9:55:10:d9:7f:4e:e6:fd:b0:28:09:3d:4a:3e:a5:
17:db:6f:69:00:4d:30:75:25:79:58:c7:6c:d8:5e:cc:a1:bb:
0d:0a:ec:51:fe:88:cb:ed:46:1a:3f:5a:25:45:55:1c:38:a8:
af:c1:db:51:51:7e:b9:fc:5d:df:10:4a:a4:eb:c2:05:a2:fb:
36:d9:e9:f8:4a:7c:bc:f4:b2:1b:de:67:63:28:48:a7:2f:c4:
fd:57:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:32 2025 by rpki-client