Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/qlhTst1KI05-IXjT0Jjp1aMzFfc.roa
File: qlhTst1KI05-IXjT0Jjp1aMzFfc.roa (raw, json)
Hash identifier: AXRjUWRMdXCLNCZlSVsLAGGspUQ5o0C4cdNp8OmuROM=
Subject key identifier: AA:58:53:B2:DD:4A:23:4E:7E:21:78:D3:D0:98:E9:D5:A3:33:15:F7
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 01942143C7E657D8EA8EAE083433A819994D
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/qlhTst1KI05-IXjT0Jjp1aMzFfc.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211551
IP address blocks: 2001:678:f20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c7:e6:57:d8:ea:8e:ae:08:34:33:a8:19:99:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa5853b2dd4a234e7e2178d3d098e9d5a33315f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:99:71:7c:f2:60:4e:37:5c:22:62:e9:c8:
f9:a0:25:3d:1f:b4:0b:aa:96:c6:01:01:bd:c2:90:
9f:e9:aa:88:a6:c3:aa:24:64:3d:ae:a0:d5:31:bf:
fb:1b:b8:91:71:93:cf:71:8e:8d:45:a9:b8:6a:08:
a9:b2:38:7e:47:f1:8f:e1:54:26:61:46:2a:32:2e:
9a:b4:0e:bb:11:ad:05:02:97:47:e0:43:bf:e0:94:
67:6e:65:3c:77:e1:aa:98:ca:e9:c0:27:f9:e7:0f:
08:a5:b2:f1:d9:bc:8d:93:c1:06:58:ab:be:85:64:
a7:c9:e3:50:0b:09:19:24:04:e5:b1:6c:d8:34:11:
b3:57:a3:e1:9f:8e:51:7c:7d:49:c3:14:e5:56:3b:
f4:0e:08:38:71:ec:aa:0e:49:e4:df:d0:d6:e8:12:
42:03:c5:ae:e4:81:5c:41:2a:65:b5:47:5c:29:49:
98:71:6c:b9:14:6b:a6:80:ae:1d:77:a1:d4:a3:1b:
fc:3a:48:8c:f0:38:5d:7b:c5:59:f1:90:da:24:7d:
12:34:91:96:54:2d:52:0a:f5:32:d5:9f:d2:db:ab:
ed:a2:2e:74:c8:f8:4e:1a:cf:87:83:27:80:b6:41:
c8:51:f1:99:96:ee:fe:54:a4:2c:60:27:84:ec:ae:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:53:B2:DD:4A:23:4E:7E:21:78:D3:D0:98:E9:D5:A3:33:15:F7
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/qlhTst1KI05-IXjT0Jjp1aMzFfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f20::/48
Signature Algorithm: sha256WithRSAEncryption
09:19:37:03:0b:e1:f6:0c:6b:cc:6a:c6:ad:4b:40:40:fd:fa:
51:18:f4:9e:01:e3:2e:f9:be:da:b3:cf:4b:01:b2:75:19:00:
0b:b6:1b:54:c9:35:bd:f8:ff:aa:6d:02:96:1c:53:ab:fe:3f:
71:4f:d0:e4:30:16:d4:86:12:d6:43:49:30:a6:54:9c:75:a0:
9a:2e:cb:aa:a5:f0:ae:32:aa:5a:7a:f6:80:bc:95:91:23:88:
1e:5c:75:8b:8b:e5:cc:cf:01:2e:ff:c8:f5:7a:41:59:fb:59:
4a:f0:07:c1:1b:61:19:ca:ad:6d:a5:a7:d0:14:70:2b:54:2d:
bc:b5:5f:48:e8:de:e4:c2:df:71:ed:7f:77:fa:42:54:38:e6:
24:e3:c9:d4:a5:85:68:30:fd:e8:dd:86:65:a6:e1:43:36:21:
45:1d:e5:9f:ff:c8:58:30:87:24:4f:e7:88:70:10:29:e8:2a:
cf:9e:0c:f3:fd:d7:f6:4a:25:36:aa:80:cb:75:46:b7:ec:18:
13:e1:dd:60:d1:a4:14:98:68:f9:b9:4e:f5:9f:6b:4a:d3:9d:
b8:99:18:3f:db:a7:06:c1:a8:a4:29:6e:62:1c:79:71:68:3a:
50:4c:16:88:ea:16:60:f2:54:87:3c:0f:b9:55:57:a5:79:99:
67:b0:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:26 2025 by rpki-client