Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-A-QA-_AjVUZ4rL2aqlnJb4OEnY.roa
File: 1-A-QA-_AjVUZ4rL2aqlnJb4OEnY.roa (raw, json)
Hash identifier: 8o47yyHRx5XOwPi+KE63QVHpBtLvNB5PiBx0UCIZe6w=
Subject key identifier: F8:0F:90:03:EF:C0:8D:55:19:E2:B2:F6:6A:A9:67:25:BE:0E:12:76
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01956BEF9CA0FB1ECF50F978AF38E03AA644
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-A-QA-_AjVUZ4rL2aqlnJb4OEnY.roa
Signing time: Thu 06 Mar 2025 14:50:20 +0000
ROA not before: Thu 06 Mar 2025 14:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 2a11:8240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:ef:9c:a0:fb:1e:cf:50:f9:78:af:38:e0:3a:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 6 14:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f80f9003efc08d5519e2b2f66aa96725be0e1276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:e6:3a:8c:17:17:47:8e:53:0f:01:a1:37:
b6:6e:f5:32:73:cb:97:71:35:74:80:6b:f6:47:dd:
09:2c:e0:00:47:69:3a:96:ee:7d:4f:6e:59:78:31:
6c:62:dd:21:11:78:ea:c6:5e:cc:6b:2c:76:0d:22:
05:1f:a5:13:a7:35:87:c9:02:0f:97:75:d3:fb:5c:
1e:53:32:30:52:d6:bd:8b:f3:b0:a8:29:9e:50:15:
41:28:61:47:47:b6:f4:d0:19:ff:a8:40:11:1d:25:
ae:b9:f4:26:95:72:13:c7:5a:5b:c6:8a:fe:ab:d4:
18:f0:d3:0e:a1:50:ef:81:f2:84:4c:fd:df:5e:96:
5b:f1:fb:f8:2f:aa:e4:f9:a6:af:78:cf:f5:24:a4:
3f:86:72:4b:93:d1:d7:e7:c6:5a:aa:89:54:31:6f:
9c:96:24:44:40:f4:81:f4:94:84:fe:f3:19:8d:02:
5c:93:4f:55:cf:cd:d9:f6:c7:ff:cd:db:9e:e2:36:
d3:11:8d:0a:53:47:38:dd:8a:f7:cd:9f:41:59:98:
ba:20:30:4b:e6:62:01:4b:e9:40:12:12:d6:c9:4f:
03:1b:94:f6:7e:4b:90:56:70:6c:4c:44:1c:2e:7c:
30:92:07:68:bf:77:10:25:27:ed:0e:18:74:6a:8b:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:90:03:EF:C0:8D:55:19:E2:B2:F6:6A:A9:67:25:BE:0E:12:76
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/1-A-QA-_AjVUZ4rL2aqlnJb4OEnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8240::/29
Signature Algorithm: sha256WithRSAEncryption
56:91:7f:5a:40:99:9c:a3:46:df:ad:a9:de:c4:5b:07:b1:29:
7a:6a:73:ab:80:c9:f9:f4:da:14:2f:42:a9:d2:bd:62:08:3e:
7e:3e:13:6a:2d:4d:16:0d:62:77:94:1d:3e:01:6a:9f:0c:44:
86:c6:4b:29:ed:e3:4b:ba:4f:54:1c:60:52:d3:0d:25:6e:1b:
a0:aa:e8:77:07:30:58:ab:28:55:73:62:bf:a4:57:b8:1b:ea:
3d:99:ba:7a:a1:24:b3:80:d0:0b:9c:a1:78:ac:81:76:4c:92:
fd:60:a5:78:0f:35:ac:20:19:c3:89:3e:8a:f9:ca:32:31:f3:
2e:61:8f:35:57:a5:3c:01:7e:b0:4e:ea:cd:0e:46:c8:5e:cb:
5f:48:6d:aa:8f:88:e2:ce:e7:b3:ad:17:09:f0:38:77:80:ab:
4b:66:1d:90:af:ca:ce:47:25:9f:c5:0b:31:85:8f:da:f8:88:
d8:df:0c:69:be:3b:52:f4:c7:15:ad:28:79:f7:07:e0:29:91:
7e:7d:be:cd:5d:8e:da:81:cf:ce:8b:cf:2f:87:bb:86:53:86:
93:56:d8:2b:3f:53:73:94:72:cd:f7:3d:09:ee:14:d8:2a:9b:
e6:67:ad:5e:c6:35:47:cc:8d:cf:61:f2:c1:5d:13:7f:3a:14:
71:01:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:34 2025 by rpki-client