Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/qj36an1eVHYA4OOKGVQ9mSzX2PM.roa
File: qj36an1eVHYA4OOKGVQ9mSzX2PM.roa (raw, json)
Hash identifier: Ua2cuLMIEy7SePDUWI5iA83sPYTSLEctreA4EXkvcMs=
Subject key identifier: AA:3D:FA:6A:7D:5E:54:76:00:E0:E3:8A:19:54:3D:99:2C:D7:D8:F3
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019424B29531293CF0EAB0233527C5F7AA4A
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/qj36an1eVHYA4OOKGVQ9mSzX2PM.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204873
IP address blocks: 2001:90f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:95:31:29:3c:f0:ea:b0:23:35:27:c5:f7:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3dfa6a7d5e547600e0e38a19543d992cd7d8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:7a:27:b9:6e:f7:23:39:cd:7a:9c:90:e1:
af:11:68:2c:09:ec:df:3a:5c:51:e1:ad:c9:e7:63:
ae:94:60:fa:b1:a7:ac:4c:de:7f:56:8c:ff:28:77:
59:8f:d9:b6:cc:f8:7c:b8:83:9c:ac:73:c7:1a:ba:
cd:62:82:14:d9:f5:28:07:a7:a8:83:d1:79:14:3f:
04:28:8d:70:77:9f:08:20:7a:f6:36:b9:7b:95:ee:
7b:42:54:c9:71:59:cf:6a:9e:95:db:85:20:36:c6:
63:f3:d1:e3:84:bd:8e:5d:1a:30:37:6e:d3:71:b4:
dd:5f:c5:e5:d6:33:59:93:a8:25:44:ef:41:e8:53:
5e:40:cf:7d:7f:67:9b:a6:6b:ad:49:dc:6d:5b:6c:
19:ab:78:80:55:6c:c7:a9:76:05:6d:9c:a7:c0:91:
63:27:37:2c:40:8b:eb:30:37:ec:51:23:89:91:9f:
23:44:7e:8e:8d:e1:32:fb:f5:20:fe:3d:c5:f5:bb:
a0:86:43:72:2f:4e:88:f0:18:34:43:55:53:08:63:
36:c0:12:de:f5:78:a9:c7:10:1b:b5:15:21:af:a7:
af:af:33:65:0f:9a:44:5a:a0:07:cc:40:cd:f9:19:
79:99:7e:10:30:1b:72:74:34:52:96:63:c1:73:da:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:FA:6A:7D:5E:54:76:00:E0:E3:8A:19:54:3D:99:2C:D7:D8:F3
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/qj36an1eVHYA4OOKGVQ9mSzX2PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:90f::/32
Signature Algorithm: sha256WithRSAEncryption
0a:55:d9:f4:98:73:53:39:18:7d:ff:f0:43:b9:81:a1:99:17:
d6:e8:39:9d:06:fc:87:63:40:ea:e0:d7:4a:5f:37:2d:31:87:
ea:ff:77:40:b2:d9:60:00:52:f2:64:11:59:b7:fe:a4:48:01:
e3:0c:aa:41:b7:0c:27:41:bf:5d:27:a6:30:52:18:ce:ec:d2:
89:46:8b:e7:29:bc:fb:eb:17:79:e1:0f:95:7c:c5:5c:1c:36:
73:a7:c7:5d:c8:e0:18:bb:00:9b:d7:b0:0f:19:bc:d2:91:c0:
81:e4:9a:56:99:d1:39:87:ff:58:34:37:f7:95:3a:1f:c4:ba:
cd:b4:c3:41:c4:e2:57:ad:ee:27:4b:a4:04:b2:10:38:17:95:
ce:d6:49:d0:18:77:34:5d:6e:00:66:b4:0a:9c:2d:b3:e5:65:
8c:6a:ae:f1:8c:e4:fc:38:ca:18:60:2b:c6:45:e4:dd:04:af:
c4:24:be:6d:a1:da:4e:59:1b:67:70:3a:de:6e:cb:0c:4d:07:
a3:79:04:2a:42:af:04:c7:35:20:e3:f2:ee:7b:4b:44:05:7c:
8b:fd:09:d0:0b:cc:e7:11:fd:73:50:a6:fa:c8:48:fe:21:c5:
4f:b5:10:71:7f:47:09:61:78:9c:b7:1f:f4:00:ee:58:51:6f:
b1:28:90:7c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkspUxKTzw6rAjNSfF96pKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm
NzE0YTAwHhcNMjUwMTAyMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTNkZmE2YTdkNWU1NDc2MDBlMGUzOGExOTU0M2Q5OTJjZDdkOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdN6J7lu9yM5zXqckOGvEWgsCezf
OlxR4a3J52OulGD6saesTN5/Voz/KHdZj9m2zPh8uIOcrHPHGrrNYoIU2fUoB6eo
g9F5FD8EKI1wd58IIHr2Nrl7le57QlTJcVnPap6V24UgNsZj89HjhL2OXRowN27T
cbTdX8Xl1jNZk6glRO9B6FNeQM99f2ebpmutSdxtW2wZq3iAVWzHqXYFbZynwJFj
JzcsQIvrMDfsUSOJkZ8jRH6OjeEy+/Ug/j3F9bughkNyL06I8Bg0Q1VTCGM2wBLe
9XipxxAbtRUhr6evrzNlD5pEWqAHzEDN+Rl5mX4QMBtydDRSlmPBc9qAAwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKo9+mp9XlR2AODjihlUPZks19jzMB8GA1UdIwQY
MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct
NDQ3ZWRjNGY5YWY2LzEvcWozNmFuMWVWSFlBNE9PS0dWUTltU3pYMlBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2
LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEJDzAN
BgkqhkiG9w0BAQsFAAOCAQEAClXZ9JhzUzkYff/wQ7mBoZkX1ug5nQb8h2NA6uDX
Sl83LTGH6v93QLLZYABS8mQRWbf+pEgB4wyqQbcMJ0G/XSemMFIYzuzSiUaL5ym8
++sXeeEPlXzFXBw2c6fHXcjgGLsAm9ewDxm80pHAgeSaVpnROYf/WDQ395U6H8S6
zbTDQcTiV63uJ0ukBLIQOBeVztZJ0Bh3NF1uAGa0Cpwts+VljGqu8Yzk/DjKGGAr
xkXk3QSvxCS+baHaTlkbZ3A63m7LDE0Ho3kEKkKvBMc1IOPy7ntLRAV8i/0J0AvM
5xH9c1Cm+shI/iHFT7UQcX9HCWF4nLcf9ADuWFFvsSiQfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:36 2025 by rpki-client