Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/tqykBPembWmJSozaQFY-vJ8PvBA.roa
File: tqykBPembWmJSozaQFY-vJ8PvBA.roa (raw, json)
Hash identifier: UnB7nNML8TlKLCM9VrIzpRbd6b1KxYJcxgvRkbD5Ga4=
Subject key identifier: B6:AC:A4:04:F7:A6:6D:69:89:4A:8C:DA:40:56:3E:BC:9F:0F:BC:10
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0195CEE2E0FDFD297CD94B898B7AE010AE07
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/tqykBPembWmJSozaQFY-vJ8PvBA.roa
Signing time: Tue 25 Mar 2025 19:58:50 +0000
ROA not before: Tue 25 Mar 2025 19:58:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 2a0e:13c1::/32 maxlen: 32
2a11:643::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:e2:e0:fd:fd:29:7c:d9:4b:89:8b:7a:e0:10:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Mar 25 19:58:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6aca404f7a66d69894a8cda40563ebc9f0fbc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:14:8c:ce:ad:13:ef:55:62:d4:8c:b7:83:
10:a1:a6:0b:41:be:f1:43:66:f7:cc:44:a1:e3:b1:
36:80:5c:da:e3:d4:67:65:b5:04:ae:e6:45:1c:76:
9b:21:e1:aa:08:2c:fa:41:33:eb:c6:d7:7b:a4:e0:
b4:cb:08:aa:16:d3:2d:20:31:f5:9c:c5:0b:66:b9:
5a:ea:33:04:b0:14:b4:04:b2:49:92:b7:ab:dc:51:
20:00:c4:ae:15:07:7c:54:1c:2a:90:45:c4:f5:e5:
8f:05:ce:49:35:3e:f5:f2:dd:e9:83:f0:7f:9a:2b:
73:3b:a6:b9:ea:6c:6e:26:92:2a:27:d7:44:12:e5:
a1:08:86:57:c8:9e:74:2c:50:79:1e:eb:65:6e:7f:
aa:c1:23:bf:13:9a:db:84:63:7a:a4:d5:07:55:a9:
81:ff:47:f7:c8:75:28:09:4e:c7:db:e3:2f:b1:7b:
93:63:20:ca:32:e8:c4:cb:4c:da:4f:f0:46:a0:c8:
ad:19:21:42:29:03:78:94:d5:08:d3:d3:b1:95:62:
19:34:ef:8c:51:35:0e:73:8b:0d:29:67:1e:d4:34:
64:91:5d:c1:47:1d:e8:e1:92:30:20:b0:ba:2e:64:
34:97:26:65:64:84:6a:78:63:01:9b:7c:51:db:90:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:A4:04:F7:A6:6D:69:89:4A:8C:DA:40:56:3E:BC:9F:0F:BC:10
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/tqykBPembWmJSozaQFY-vJ8PvBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:13c1::/32
2a11:643::/32
Signature Algorithm: sha256WithRSAEncryption
79:2a:48:de:24:25:2b:18:6f:59:44:7c:e2:34:e7:45:9b:3f:
3f:2f:7b:4f:c0:e1:8f:8d:ab:43:72:df:4f:97:ca:cc:be:4f:
84:02:f6:a6:77:5c:36:13:3d:b5:06:da:1a:61:a9:22:3a:32:
ae:c2:fb:40:e0:d0:64:97:ef:33:5f:45:77:59:2b:ea:5e:42:
39:1c:02:4f:f5:2c:15:9d:69:92:f7:84:50:51:69:a0:c9:4d:
fe:fb:0d:10:82:f8:1b:99:f3:81:d6:c5:63:23:6e:c1:f2:a3:
f1:4e:0e:c0:1b:16:1c:f7:ed:9b:6d:ab:a6:6d:e5:fd:ef:1e:
31:71:69:03:2e:c6:a9:94:a7:7c:af:8c:4c:af:ed:80:f0:cf:
2b:c0:54:69:a0:bb:5f:a4:52:26:0c:58:c9:65:fb:c1:8b:c5:
86:58:4b:06:b6:8b:c9:4a:ce:bd:0d:2e:99:22:cc:8d:c2:8d:
a4:29:47:cc:1b:23:7b:26:a1:af:34:7b:3a:63:fc:7a:02:a8:
27:4d:aa:e3:9a:d8:d4:0b:87:85:1b:96:2b:c1:32:71:29:7c:
7f:3b:72:a3:26:81:80:f1:4c:09:32:83:cf:98:44:99:2c:a7:
54:ae:b8:2b:5b:ef:03:60:59:81:c2:f6:d3:0a:0a:53:00:e8:
c7:b1:d8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:13 2025 by rpki-client