Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Q8lsSRy1dunTFKW4QVQ4oB_5UZE.roa
File: Q8lsSRy1dunTFKW4QVQ4oB_5UZE.roa (raw, json)
Hash identifier: 2JDjc0fwJtopSNpgFsrGQ0jK0dihF2mZo+gzbdQPJtg=
Subject key identifier: 43:C9:6C:49:1C:B5:76:E9:D3:14:A5:B8:41:54:38:A0:1F:F9:51:91
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019089FBCCEE38FB57EFA5F965FEFBA83CB7
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Q8lsSRy1dunTFKW4QVQ4oB_5UZE.roa
Signing time: Sat 06 Jul 2024 21:38:18 +0000
ROA not before: Sat 06 Jul 2024 21:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 2a0f:eb04::/32 maxlen: 32
2a0f:ed01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:89:fb:cc:ee:38:fb:57:ef:a5:f9:65:fe:fb:a8:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 6 21:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43c96c491cb576e9d314a5b8415438a01ff95191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:d2:e9:b4:36:89:e6:56:85:70:bf:ef:20:
7b:ec:46:e8:ea:a1:da:b6:40:d2:2b:d6:e9:59:0e:
02:6a:ff:46:39:bc:a5:b5:fd:2e:35:94:6c:84:a6:
37:bc:bd:6c:ab:d8:c6:8a:07:f3:eb:4c:99:dd:9d:
bc:cb:f7:01:25:a8:77:77:94:37:cb:83:ed:3e:9e:
d1:73:8d:d7:24:89:cd:48:fe:8b:e3:96:25:18:23:
bc:2b:8b:49:60:68:31:1a:70:62:f5:49:98:7f:50:
49:e5:33:c4:fb:69:fa:cc:31:68:ad:d5:b6:22:df:
8e:bf:63:e3:3c:f7:3c:7e:a7:14:01:17:1b:58:c1:
9f:5d:35:1f:2f:e8:cf:f4:fb:f4:36:70:13:6c:d5:
88:ad:12:3c:38:37:91:4a:36:3a:ae:01:63:ba:6a:
90:5c:cc:c2:2a:69:a5:59:f7:30:40:6b:0c:20:e7:
49:51:a3:fe:b6:e3:b0:94:6e:fa:1a:36:a5:25:a2:
ba:9d:b1:98:fd:11:6d:2e:da:4b:bf:93:2a:9c:1b:
ff:a0:25:a5:4a:d2:86:c7:b9:11:16:fc:96:bf:31:
98:3a:df:34:59:14:df:05:c3:4a:79:d7:c5:c1:dc:
25:4a:62:71:84:a7:de:e3:49:5c:56:43:f3:c0:67:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C9:6C:49:1C:B5:76:E9:D3:14:A5:B8:41:54:38:A0:1F:F9:51:91
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Q8lsSRy1dunTFKW4QVQ4oB_5UZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:eb04::/32
2a0f:ed01::/32
Signature Algorithm: sha256WithRSAEncryption
4c:54:43:22:cc:8a:fe:7f:58:09:77:08:1f:45:df:76:ff:26:
e8:b7:0c:c3:fa:64:54:6b:77:18:33:0c:b7:e3:ea:23:fc:a6:
a8:e8:3f:ee:21:bf:93:72:dd:32:24:a1:3c:ce:91:35:f4:6d:
99:0f:fd:cb:c3:a1:96:70:f0:0c:2f:3e:74:5f:b4:e9:a2:ef:
58:a2:d9:85:9f:eb:9d:5d:1d:c9:55:bd:21:1d:bd:0d:c1:1e:
4b:fe:ce:71:2a:3f:62:33:5e:2d:fb:d5:d7:b4:72:55:97:7f:
59:e1:13:5c:f8:79:a4:7b:bb:08:0d:e4:9d:0e:06:17:bd:50:
64:c0:b3:bb:e3:b9:23:5d:7b:d8:f4:00:bf:cc:66:1a:8c:6a:
bd:9f:f7:26:3e:0b:31:d4:cb:84:05:96:a6:ef:18:55:14:b5:
71:3c:6a:d5:07:42:c7:e6:45:99:15:68:09:50:6e:f9:87:04:
74:29:2c:3b:e7:7e:80:12:e7:35:44:3f:66:33:c4:9a:58:31:
13:b5:f9:93:43:91:d6:42:35:d5:5c:2c:cd:bf:0e:13:d3:c1:
24:c3:ff:6f:fc:51:d9:e3:6f:30:fb:62:d8:f6:a5:57:f8:5e:
1c:5e:d6:24:d2:66:24:be:f4:3d:4f:c5:71:1e:1f:05:73:de:
1b:41:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:32 2025 by rpki-client