Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/qispPpKIlPSWV1rI1EAZQtlT-p0.roa
File: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (raw, json)
Hash identifier: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=
Subject key identifier: AA:2B:29:3E:92:88:94:F4:96:57:5A:C8:D4:40:19:42:D9:53:FA:9D
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0EF80D9D11351A999750EE7900C3
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/qispPpKIlPSWV1rI1EAZQtlT-p0.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213395
IP address blocks: 2a10:2e41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0e:f8:0d:9d:11:35:1a:99:97:50:ee:79:00:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2b293e928894f496575ac8d4401942d953fa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:d0:20:31:2f:e3:9b:40:68:c8:fd:b9:c1:
35:4f:d6:79:6d:48:46:99:a2:34:db:0b:b7:00:7c:
af:bb:7c:21:ae:e8:29:f0:7a:f1:a8:32:aa:91:2a:
07:84:5a:e1:c3:67:ce:4e:f4:df:a0:f7:37:1f:01:
bb:04:9a:da:ae:49:53:e8:19:15:49:b1:7c:59:ac:
05:fd:6e:dd:e3:66:dd:16:a5:ae:92:39:a1:da:25:
bc:4f:0d:8d:58:81:9d:53:76:f2:fe:54:a4:46:69:
19:58:12:e8:bd:15:f5:db:72:55:9a:c4:fe:fb:96:
08:67:0c:3e:44:67:55:5f:04:54:1f:24:93:1b:ca:
68:09:65:23:91:06:4d:2f:32:3d:e6:cd:ef:f3:92:
ba:61:ba:8d:52:57:b1:da:ae:11:f8:a4:2d:16:52:
53:93:c7:54:d2:72:6b:d3:de:9a:9b:f5:a9:55:72:
43:15:ac:33:e8:01:ec:2f:fc:94:cd:cf:7a:46:4c:
ba:e1:ba:7a:91:86:cf:38:8a:91:95:ca:3e:00:ca:
a0:d0:67:34:06:48:5c:b7:19:1b:e6:d2:f9:47:b1:
b7:61:76:e3:c7:f2:21:0f:8f:57:59:53:2c:80:04:
ed:58:c2:5b:76:c3:8b:6a:c9:93:e5:34:a2:44:cd:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:29:3E:92:88:94:F4:96:57:5A:C8:D4:40:19:42:D9:53:FA:9D
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/qispPpKIlPSWV1rI1EAZQtlT-p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2e41::/32
Signature Algorithm: sha256WithRSAEncryption
55:b9:cb:34:e8:2d:65:aa:84:14:3b:e5:d7:4f:5d:8a:24:39:
13:2f:5a:e0:e2:65:e7:f5:47:c3:49:64:0d:0e:3a:70:a9:60:
37:7a:d1:1b:5c:87:fb:e5:d6:20:0b:df:b4:53:9a:d1:84:a6:
59:ba:44:70:60:fc:88:94:31:65:d4:9c:72:13:24:c3:44:35:
1c:9c:bb:1e:74:9a:5c:de:6a:27:36:82:47:16:c7:b3:89:7c:
93:55:26:5c:93:17:0f:d5:2f:41:d8:30:f9:66:75:df:5f:44:
54:cb:ee:8e:c8:92:59:9d:0d:ee:a8:5e:a9:31:54:4b:c9:e3:
69:b7:1e:8c:f2:af:32:d3:36:69:6b:ed:73:4a:48:e5:23:af:
6e:0d:74:8d:43:c2:ba:d1:42:6c:cd:26:28:6e:f1:14:24:8a:
6a:54:41:ba:56:9f:65:32:f4:bf:07:6e:be:70:11:fc:65:04:
b8:f7:6f:73:83:f3:61:d7:95:85:1e:0d:53:6e:58:53:b2:8a:
f8:9d:b9:52:d5:90:18:36:5d:19:33:f6:95:c2:e3:77:83:a1:
bb:02:ed:a6:4a:18:bb:09:eb:5c:fa:64:7c:a9:8f:66:a9:c7:
e3:4d:ef:61:b6:d2:75:6d:7c:4e:b5:41:d0:12:13:ce:2a:bc:
70:0f:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:58:31 2025 by rpki-client