Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa
File: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (raw, json)
Hash identifier: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=
Subject key identifier: 40:DB:55:43:8B:91:0F:96:07:54:A7:A2:22:E3:AD:BD:F0:8D:77:BC
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019426D9836DE598DB6D1991419313DAC212
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200479
IP address blocks: 2001:67c:2344::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:83:6d:e5:98:db:6d:19:91:41:93:13:da:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40db55438b910f960754a7a222e3adbdf08d77bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:b0:02:f7:2b:be:be:b7:8d:78:e4:f6:a5:
8a:5b:21:2b:80:52:f3:e7:86:73:35:7c:16:fa:f6:
c4:f2:5b:53:8f:87:f9:fb:13:25:89:e2:b0:df:d3:
59:1d:db:1f:5e:91:48:32:da:77:6a:e8:2e:c1:a3:
06:db:53:43:e5:ba:52:80:e2:37:b9:63:51:41:d4:
71:62:64:9e:e4:25:9b:e3:40:29:85:88:39:1e:77:
e7:23:89:ea:9f:7c:da:5c:f9:a0:2d:ac:7b:8f:39:
b4:ee:c5:55:f2:e6:ed:2c:96:22:96:a0:17:69:f9:
d2:15:d3:a0:90:cc:56:15:aa:56:13:6b:c4:04:d3:
bf:47:cd:16:c9:b8:9e:e5:3a:de:70:3d:d3:df:04:
5b:a8:1d:8f:7f:63:52:60:79:11:02:58:0f:07:a1:
fa:74:92:4b:b0:91:71:99:fb:05:cf:6a:cf:c2:c3:
61:5a:98:bd:c3:9e:d0:b1:66:b3:10:04:3b:02:33:
0e:6d:be:e9:fc:71:aa:08:bb:57:a5:6e:e3:2b:d8:
34:03:e2:fc:ba:08:f4:d9:fd:9a:70:50:d2:81:25:
e5:b5:7b:fd:2a:c9:00:be:fd:b4:ac:4e:29:5c:20:
a6:2a:ec:cd:10:28:b9:a7:52:e9:b7:ec:0e:9f:df:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:55:43:8B:91:0F:96:07:54:A7:A2:22:E3:AD:BD:F0:8D:77:BC
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2344::/48
Signature Algorithm: sha256WithRSAEncryption
56:4e:2f:49:68:f9:3d:5a:1b:1e:89:1b:4c:71:a0:99:3b:11:
aa:b4:b7:65:4a:f5:21:8b:68:fc:ff:c3:a3:f9:e3:82:be:45:
c7:da:ff:54:e1:ed:ba:66:7c:cc:f6:f8:0b:69:c8:34:84:eb:
a8:7a:37:c2:b3:58:ac:16:7a:02:f7:1e:16:fc:eb:f4:75:a1:
cf:82:21:ba:48:77:e7:e9:3a:cc:22:27:de:22:23:ac:85:c8:
db:78:f1:98:4b:59:21:85:a9:14:03:54:41:14:dd:7f:80:46:
93:15:9c:49:0e:d2:05:f7:e3:ef:fc:c2:04:73:24:7d:db:53:
63:9b:8d:28:9a:14:e5:20:31:40:94:1f:79:f4:08:55:63:50:
d3:69:37:33:73:8d:c0:7b:8f:5b:61:06:94:a7:5a:ee:66:d1:
d9:74:96:e5:ef:0b:d0:68:2d:a3:30:df:ea:2c:f0:80:c0:b0:
2a:b7:ec:15:c8:74:cf:fb:f3:00:4f:2e:09:37:08:60:d7:93:
2d:7c:c4:3a:de:8a:f1:71:e0:9c:93:ba:a3:bb:36:20:ba:d2:
6b:3a:88:f0:08:55:88:35:e9:f7:dc:94:95:34:aa:81:73:f0:
ae:16:1b:31:46:59:5d:d0:6b:de:ae:ce:b8:c8:30:7a:07:f6:
1c:2c:4d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:48 2025 by rpki-client