Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa
File: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (raw, json)
Hash identifier: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=
Subject key identifier: 43:1E:AA:30:5A:EE:7C:43:D9:BF:C9:96:BB:D5:E0:8C:BB:0B:30:1F
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479D27292B17E0B442038E9AA62ECD
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42167
IP address blocks: 2a0b:b840:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9d:27:29:2b:17:e0:b4:42:03:8e:9a:a6:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431eaa305aee7c43d9bfc996bbd5e08cbb0b301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:0f:20:e1:a7:f1:a1:5d:c7:c7:af:de:bf:
23:2d:86:ee:96:5e:71:ec:25:a7:85:1c:16:fb:0d:
f4:58:33:e7:8c:49:fd:c4:97:12:00:bc:c9:80:40:
40:5b:cf:f7:7d:f9:49:b3:3f:96:fc:11:01:7f:20:
45:8d:d7:a3:2b:87:26:df:a2:fe:39:ab:13:1e:83:
58:60:e9:97:ea:95:2b:0d:74:f6:e5:70:1d:7f:0f:
31:00:a2:7c:8d:96:02:77:b8:fb:ff:74:c9:fa:0b:
6e:1e:25:8f:46:20:57:e5:d7:46:4b:32:a2:fd:cb:
08:31:a9:a9:af:c5:9e:ac:74:9b:2e:76:1b:f7:9c:
c4:e8:ef:26:0c:5a:1f:8e:44:69:07:ef:ae:1c:51:
46:95:b7:00:00:30:05:a9:a4:e7:d8:a9:5a:80:86:
98:38:a0:a6:f4:cb:f1:9b:81:8f:41:ea:4f:48:27:
57:3a:50:6e:3e:c3:bb:5b:a8:1b:f6:6f:3b:27:83:
2f:2d:fc:c9:0c:8c:b3:89:e4:3b:39:1f:fc:57:ed:
0d:57:ca:df:5c:72:1d:0b:f0:40:30:2f:ac:34:0c:
5a:20:1b:93:59:76:c0:f3:bb:45:6e:18:fe:c3:df:
8d:82:06:5f:9d:91:ec:5b:2c:40:52:4a:08:2d:74:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:AA:30:5A:EE:7C:43:D9:BF:C9:96:BB:D5:E0:8C:BB:0B:30:1F
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b840:1::/48
Signature Algorithm: sha256WithRSAEncryption
a5:a5:96:d7:1d:55:76:95:4c:f7:66:53:48:f6:c0:48:4a:75:
87:5b:6a:ad:63:69:54:56:84:32:b0:10:3b:00:29:e5:9d:19:
c8:fa:87:9a:30:8f:d2:1c:8d:f5:45:c4:ef:18:79:ae:74:d2:
e6:dd:20:82:04:e0:93:ec:ae:c6:5a:42:be:c8:18:bc:74:25:
80:69:d5:7a:e4:08:f5:66:2a:98:fd:60:0a:27:15:be:7b:ef:
81:ae:61:9d:73:43:34:c0:54:7c:11:f9:43:3d:ed:65:89:01:
c6:2b:0d:b2:11:1f:31:1d:43:34:e4:d3:63:ba:69:7d:5d:85:
47:56:54:5b:a9:46:db:52:5e:f3:78:de:88:42:15:d9:ed:40:
d9:76:99:56:e9:a3:f9:4f:bd:6a:b5:0e:7f:6c:4e:18:1d:9f:
91:9c:bf:25:5b:0a:bd:74:e5:4e:02:d1:d4:55:fe:08:65:d3:
7c:f6:58:c1:72:0d:7f:d5:75:b4:8c:e7:8f:45:64:d0:0d:a1:
6b:16:74:75:de:c8:d4:64:66:58:18:1a:39:47:32:55:bb:0d:
ad:7a:48:59:99:a9:8f:58:3f:05:4a:4f:0b:f7:ec:61:c6:9f:
de:c6:a7:df:70:da:73:6a:23:2c:90:92:48:90:32:71:6f:0e:
a6:91:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:07 2025 by rpki-client