Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/qvNjDJ9eS48JlV1R7hV7YEei3s0.roa
File: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (raw, json)
Hash identifier: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=
Subject key identifier: AA:F3:63:0C:9F:5E:4B:8F:09:95:5D:51:EE:15:7B:60:47:A2:DE:CD
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 019420682AA5829B244956F846EBC54C11D1
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/qvNjDJ9eS48JlV1R7hV7YEei3s0.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214857
IP address blocks: 2a14:52c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2a:a5:82:9b:24:49:56:f8:46:eb:c5:4c:11:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf3630c9f5e4b8f09955d51ee157b6047a2decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:41:4a:f3:ef:1c:14:24:ea:a8:7a:b9:ac:
27:fd:b5:69:04:36:e8:9a:6c:da:bb:12:55:6c:c4:
19:a2:0d:62:08:61:81:71:ec:e5:00:99:da:54:a3:
0b:c3:91:f1:3c:7c:bc:85:a0:f6:63:80:9b:4d:36:
6c:cb:9d:d3:f6:fc:31:6d:9c:6c:c0:b7:8b:45:fc:
85:71:16:4c:f5:58:bd:00:1d:12:47:5e:f7:10:7b:
8b:43:6f:43:81:db:d1:ec:c2:53:9e:e1:1b:c6:9e:
a9:a4:45:b2:27:f9:12:66:14:b3:ed:67:3b:b2:10:
83:00:cb:4a:21:93:48:96:21:7c:22:c8:86:9b:ba:
9a:e4:48:26:f2:ff:af:c1:23:b8:11:fe:32:b2:a7:
8a:50:68:47:f2:ea:b4:a3:e3:b4:8a:57:af:a4:6b:
c7:0f:35:5b:dd:b7:d0:4d:8b:96:e3:33:74:82:1b:
b0:19:1f:1b:75:34:b8:0a:f8:e5:00:65:fa:52:16:
cd:2f:97:c6:b2:22:4c:f6:b2:df:24:ad:8f:a0:ca:
77:95:38:3a:08:83:45:1d:ae:d1:ef:77:49:ac:13:
bc:d5:70:da:84:2a:d9:93:b3:68:4c:c4:ff:89:eb:
52:5c:a1:2c:82:27:14:e3:82:e3:a1:c9:6c:93:11:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:63:0C:9F:5E:4B:8F:09:95:5D:51:EE:15:7B:60:47:A2:DE:CD
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/qvNjDJ9eS48JlV1R7hV7YEei3s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:52c0::/48
Signature Algorithm: sha256WithRSAEncryption
15:73:ab:2e:d7:9c:af:b7:0f:84:ff:f6:70:6b:d1:40:77:7d:
d3:ed:b9:c6:e8:74:f6:8c:98:68:00:b9:94:6c:60:8f:01:5d:
2e:d3:3b:d5:bd:53:81:45:4d:c3:c3:48:39:26:b7:fb:34:80:
87:53:f2:a0:93:ab:7d:d8:29:e0:2f:a8:4c:8c:90:ff:d5:d9:
73:c5:be:d5:d0:20:44:e7:aa:be:14:9e:98:90:38:65:16:07:
1a:61:75:38:7c:06:45:65:e7:96:dc:91:c8:01:4c:34:d8:7b:
94:30:33:5f:54:06:37:cb:f0:5e:ce:31:dc:dc:eb:5b:76:f3:
1b:59:8b:e1:1c:f1:a9:5f:a9:ec:9a:41:ce:ed:90:c6:f0:34:
d2:fb:e2:07:7e:83:70:94:3f:6d:05:8a:df:a1:24:63:41:df:
b5:88:52:71:3c:e5:64:10:1f:c2:48:60:5d:32:25:8c:3e:b6:
3c:d3:90:05:de:74:da:f7:5d:89:85:af:91:b8:be:b8:20:c6:
66:91:b0:ab:df:de:10:64:62:87:ef:1e:1e:da:7f:71:44:08:
78:44:62:68:33:3c:b0:2e:83:2e:f4:1c:e2:ba:6f:5b:85:26:
21:40:63:32:ff:b8:74:b0:4f:de:60:61:22:8a:a6:f2:03:9c:
93:5e:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:41 2025 by rpki-client