Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa
File: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (raw, json)
Hash identifier: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=
Subject key identifier: AA:A1:98:85:9C:90:D4:97:F6:C8:18:90:4F:19:C5:66:49:58:DE:64
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019426D9876EFCE4A8825B5EB3CBE20861A2
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215230
IP address blocks: 2001:678:a30::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:87:6e:fc:e4:a8:82:5b:5e:b3:cb:e2:08:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaa198859c90d497f6c818904f19c5664958de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:f7:04:4e:94:a7:ee:be:eb:a4:22:92:c8:
1c:75:2f:97:5b:0a:73:57:f4:02:10:06:92:5c:df:
fb:a6:4f:72:99:e0:e3:b6:1c:a7:38:c6:c5:5d:c1:
3f:a6:92:36:2d:31:fc:27:ef:4e:ec:40:52:c8:e4:
9d:0f:29:9e:66:a3:bf:ca:42:1e:67:a4:12:8a:9f:
ef:11:9f:ed:d6:53:44:4c:96:07:75:26:93:ca:80:
90:b7:73:66:33:be:8c:ae:7d:32:e6:f3:20:41:44:
56:c5:8d:18:b6:6b:96:83:d4:b6:90:0a:b0:eb:79:
b8:2a:69:d9:33:02:49:93:b7:6a:88:6a:5d:dc:9b:
b0:8c:91:1b:30:2e:ee:7c:af:48:ab:df:57:a9:56:
12:91:e5:cc:23:8d:bb:92:c4:ec:d0:d2:1a:f6:8c:
be:06:3c:fc:33:23:a9:e4:65:e4:e9:37:f2:65:08:
ac:31:09:47:75:87:8a:16:42:08:33:c6:8a:b7:9e:
13:d0:2e:ad:13:fe:86:fb:ae:9e:55:f5:13:ae:2a:
01:96:62:4d:b7:9f:df:d0:41:e3:a7:82:3e:cb:9c:
80:0d:4b:39:87:f7:09:6e:37:b5:16:eb:b0:c6:d5:
10:54:7c:a3:a0:a1:fe:a3:35:44:85:a6:19:ab:6d:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:98:85:9C:90:D4:97:F6:C8:18:90:4F:19:C5:66:49:58:DE:64
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a30::/48
Signature Algorithm: sha256WithRSAEncryption
0b:44:3f:24:b7:a4:54:60:04:50:4e:2b:a8:92:11:96:ad:9a:
23:4d:d6:28:81:13:ea:0c:8f:fa:5b:d1:d4:a6:84:38:8a:f6:
84:34:c8:9c:8b:e2:cf:d8:81:09:ef:4e:1a:90:b8:97:21:49:
c3:db:86:d6:58:7a:87:4f:34:9e:49:61:bd:42:0b:17:c4:aa:
2c:9c:7b:67:ad:58:2f:8a:12:78:ee:2b:fe:3b:90:30:b7:f6:
4a:cb:d0:31:0e:41:1c:7f:68:84:01:cf:f4:30:c7:2f:3e:d2:
88:9b:52:2f:ec:17:8a:f5:95:2a:1b:60:9e:9a:45:3c:26:33:
e4:8c:e1:6c:22:b5:0c:d9:fe:29:81:80:72:9c:6a:4c:67:88:
dd:ca:32:b6:7b:1a:97:18:12:b1:69:bf:3a:75:4a:da:30:96:
15:b4:df:70:44:3a:f8:3a:74:78:69:1a:86:18:5b:bd:64:d3:
80:26:be:d9:8b:60:ad:2d:8d:ab:fc:d9:a4:94:60:35:97:bf:
68:00:89:fb:87:61:81:07:b0:71:91:8c:84:14:2c:d0:13:2c:
57:27:68:c7:dc:3a:27:e8:9b:a8:0a:d7:5b:61:e1:66:79:58:
56:54:fb:29:63:9b:c8:7d:46:b1:da:77:42:b5:a8:ee:8d:69:
4c:ce:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:41 2025 by rpki-client