Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/qCZRDftN7safEGDSy49dx5X7bWc.roa
File: qCZRDftN7safEGDSy49dx5X7bWc.roa (raw, json)
Hash identifier: 9f9+AJZ2FKO47dOj0KUE2CxyPBT85uHO+ZxOkQi6T+M=
Subject key identifier: A8:26:51:0D:FB:4D:EE:C6:9F:10:60:D2:CB:8F:5D:C7:95:FB:6D:67
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDB6FB5AE6D4C022A8DA8F69B516B0
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/qCZRDftN7safEGDSy49dx5X7bWc.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13127
IP address blocks: 2a04:9a00:1118::/48 maxlen: 48
2a07:3501:1080::/48 maxlen: 48
2a07:3501:1081::/48 maxlen: 48
2a07:3502:1190::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b6:fb:5a:e6:d4:c0:22:a8:da:8f:69:b5:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a826510dfb4deec69f1060d2cb8f5dc795fb6d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:73:52:b5:4e:9e:a0:ae:f7:34:40:e6:d1:
b1:b7:dd:b7:6f:44:e4:36:cb:a5:66:8d:87:44:1f:
22:10:95:0d:47:f1:fe:56:d6:af:cc:cf:bf:78:d7:
5b:aa:4f:92:ea:e6:64:9a:e2:e0:f3:22:ff:10:18:
e4:7b:85:51:46:c1:1f:27:d6:25:07:26:0b:79:6d:
f3:80:e2:d3:0b:4e:87:a0:51:54:fe:0f:15:4b:98:
7b:01:e3:0c:7e:12:91:c6:b0:fe:2f:a2:d3:d7:8e:
f6:98:15:18:88:1a:21:5e:9a:10:a0:1c:f6:44:cc:
10:80:1f:4e:9c:bd:02:9e:84:b7:e6:9a:cb:6f:28:
35:83:1d:b8:f8:75:78:f9:d8:8f:02:fa:e7:5c:ce:
7b:30:9c:19:af:01:43:e3:65:24:7e:29:19:f3:c6:
ef:62:ea:88:28:77:53:8f:46:f4:5e:b8:a2:48:a5:
b3:6e:e2:41:06:5f:c4:c1:3e:04:c8:12:d5:11:4f:
80:07:6e:a8:63:ba:33:96:4a:40:14:68:b0:7d:8b:
22:df:81:47:dd:6e:6d:db:ae:ac:74:63:48:b8:27:
22:7c:b1:1c:26:af:41:d3:f0:9b:97:d4:b9:c6:ba:
3f:dc:27:dd:3b:8a:08:76:8a:49:61:8b:d2:b9:78:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:51:0D:FB:4D:EE:C6:9F:10:60:D2:CB:8F:5D:C7:95:FB:6D:67
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/qCZRDftN7safEGDSy49dx5X7bWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1118::/48
2a07:3501:1080::/47
2a07:3502:1190::/48
Signature Algorithm: sha256WithRSAEncryption
8b:56:a5:c7:3c:2f:f6:77:49:b7:f3:7f:80:d4:d7:80:f0:2e:
e8:71:fc:b6:c7:0c:5f:2e:0e:8c:e5:b2:f2:89:b1:41:3d:f9:
bd:bd:ce:a6:b6:da:a7:21:46:20:68:8f:5d:af:31:6d:b3:d0:
41:2a:5b:d0:f7:d2:c1:d5:41:bf:77:5e:9e:8d:4e:20:67:b2:
c0:a9:88:1b:f4:b1:d5:44:f6:ef:88:d3:99:d1:f2:f4:ba:fe:
ed:df:12:70:b2:19:36:ba:8f:2b:0d:9a:c2:01:69:1e:66:2f:
69:67:20:64:f9:f0:04:b1:81:30:ee:b4:da:4e:1e:a6:7b:5a:
47:cf:c4:a5:ea:6e:c5:c0:39:29:57:92:4f:d6:2d:ed:1a:92:
b0:ab:47:d4:0e:af:45:f7:e7:a3:3a:ac:2f:aa:0f:d0:a6:e1:
14:dd:44:3e:99:46:e2:1f:27:ae:b6:1d:30:67:41:ea:31:93:
a6:7c:44:4c:71:95:ae:7e:27:d9:56:85:c0:96:c1:1a:91:7c:
2a:3d:dc:d8:6e:43:82:c9:3e:61:e8:03:35:a0:b7:7b:1e:f9:
35:37:6c:74:ca:91:f9:60:77:fd:ba:ab:01:cd:58:92:8e:d5:
61:9a:08:7b:e4:d6:42:20:89:ce:4e:2c:a3:a7:46:a8:9b:14:
05:32:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:37 2025 by rpki-client