Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/q34zG9qVtCY8C3wIf9ymq-XLQxg.roa
File: q34zG9qVtCY8C3wIf9ymq-XLQxg.roa (raw, json)
Hash identifier: F/1MYUF0EH0Pq3Rhy3FecbiXrQFGDqS0/cQiDyWjSA8=
Subject key identifier: AB:7E:33:1B:DA:95:B4:26:3C:0B:7C:08:7F:DC:A6:AB:E5:CB:43:18
Certificate issuer: /CN=48a2700204c8e7820927bbe0bcd120c0c2410cf6
Certificate serial: 018EC4AD41C1A8FE84FEA3B2F112AE62041B
Authority key identifier: 48:A2:70:02:04:C8:E7:82:09:27:BB:E0:BC:D1:20:C0:C2:41:0C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/q34zG9qVtCY8C3wIf9ymq-XLQxg.roa
Signing time: Tue 09 Apr 2024 21:04:32 +0000
ROA not before: Tue 09 Apr 2024 21:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215131
IP address blocks: 2001:67c:e5c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:ad:41:c1:a8:fe:84:fe:a3:b2:f1:12:ae:62:04:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2700204c8e7820927bbe0bcd120c0c2410cf6
Validity
Not Before: Apr 9 21:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab7e331bda95b4263c0b7c087fdca6abe5cb4318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:59:82:dc:de:fe:b7:c7:29:a7:21:a8:74:
9f:34:f1:be:42:f5:93:39:e5:42:0f:03:eb:6a:07:
2e:da:f1:38:b4:55:e0:00:97:66:38:bd:c8:1a:48:
80:80:80:81:ee:70:4c:29:01:32:0e:88:d6:ab:fa:
6a:7e:e8:32:91:83:98:fe:5c:68:43:08:d1:bc:66:
79:c2:e8:11:13:bd:78:22:f4:b3:3e:2b:d2:80:fc:
d9:f1:6f:9a:84:e1:16:bd:cf:09:45:8e:28:8d:8c:
1d:74:d6:4a:73:f8:39:30:6b:6a:7f:cf:4b:42:72:
85:2f:e1:7a:54:ad:63:56:11:77:50:6c:53:c6:a6:
6f:2f:16:01:66:ea:3b:d5:13:05:77:21:a1:60:a1:
01:d2:d4:0d:53:c2:6b:05:59:43:39:76:8c:51:bb:
bf:13:9f:0b:f1:21:e1:44:8c:0a:f6:a3:94:03:38:
94:8e:9f:b2:68:09:96:99:d6:ad:a3:14:e1:fa:32:
62:b6:79:cf:41:71:84:3d:45:59:be:3a:d2:3e:1d:
6c:1c:24:23:51:30:b5:20:9d:b0:42:6b:81:ed:45:
6e:dd:7c:94:59:76:c5:95:bb:ab:f9:ea:ef:20:55:
ad:1f:87:62:bb:d0:66:b7:4f:7c:3c:e9:4b:ed:bd:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:33:1B:DA:95:B4:26:3C:0B:7C:08:7F:DC:A6:AB:E5:CB:43:18
X509v3 Authority Key Identifier:
keyid:48:A2:70:02:04:C8:E7:82:09:27:BB:E0:BC:D1:20:C0:C2:41:0C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKJwAgTI54IJJ7vgvNEgwMJBDPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/q34zG9qVtCY8C3wIf9ymq-XLQxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/fae93c-1c6d-4bf2-8476-130f52b359cc/1/SKJwAgTI54IJJ7vgvNEgwMJBDPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e5c::/48
Signature Algorithm: sha256WithRSAEncryption
c4:3a:ff:0c:c7:f3:25:c5:d3:bd:cc:a9:63:73:e7:c7:e0:64:
53:5e:67:5d:34:c3:f3:31:6f:c9:82:46:9e:e7:3e:b7:bb:f5:
28:b6:7a:2d:44:d6:16:3f:a9:cb:80:99:5b:bd:94:64:69:ce:
86:2a:82:d7:fd:c2:13:11:05:e1:0b:d2:8c:1d:c2:95:f3:c0:
c0:62:d0:5b:aa:c9:f5:7a:93:02:2e:6a:72:6d:c0:e3:07:30:
a0:59:63:72:08:2b:e8:e0:23:f7:50:38:6f:3f:d5:b1:01:8d:
ae:f2:24:c0:38:4e:d3:75:0a:8a:f7:e8:cd:68:58:8a:4c:14:
3c:52:3c:13:3c:15:e1:e7:80:41:7e:5b:d4:64:3a:a0:de:73:
12:9a:d4:1e:fd:e3:ef:d7:e8:99:0e:b2:3a:54:63:04:fb:26:
92:d4:49:02:b7:e0:94:23:1b:80:c0:ad:b2:d0:f7:5d:23:ff:
e8:db:45:6d:31:61:99:62:79:1d:17:08:53:37:80:9f:f0:a4:
a8:68:d1:cd:41:8e:35:53:df:25:b4:8f:cc:da:10:1d:22:59:
36:54:c7:5d:7a:4a:1c:c3:3e:4d:af:00:ed:bc:13:cd:84:1c:
48:96:cc:20:f9:48:0d:af:03:8a:c3:ad:69:78:dc:41:06:db:
8e:00:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:01:34 2025 by rpki-client