Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa
File: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (raw, json)
Hash identifier: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=
Subject key identifier: D2:AA:F0:53:70:07:7F:7B:A1:9D:82:B5:25:51:9D:04:24:6E:EB:3F
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019423696049AB355E666317E5BD34E7DDD6
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa
Signing time: Wed 01 Jan 2025 19:48:16 +0000
ROA not before: Wed 01 Jan 2025 19:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212717
IP address blocks: 2001:678:e24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:60:49:ab:35:5e:66:63:17:e5:bd:34:e7:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Jan 1 19:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2aaf05370077f7ba19d82b525519d04246eeb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:c7:76:62:4c:61:b0:f3:b9:9b:d1:31:d2:
6a:ff:02:8b:89:3f:50:51:21:22:81:b0:33:28:25:
a1:45:48:6a:31:c7:2d:23:78:bd:31:9a:e5:04:aa:
58:65:4b:c9:1f:bf:32:5b:97:7f:5f:13:8a:4c:d0:
59:e0:81:0c:53:79:43:71:e1:d4:2f:b1:72:9b:dc:
da:70:f2:1b:39:37:1e:28:52:f1:95:2f:a1:5d:92:
aa:f1:1c:31:da:50:7d:e2:1a:ab:4d:2e:2b:4e:11:
3b:28:0e:27:7a:13:7e:af:db:aa:5c:cd:ca:78:4e:
21:0d:d2:99:ec:09:8c:27:f9:82:04:d0:a7:52:97:
bb:8c:74:64:2f:16:93:05:25:28:9d:fb:85:da:d4:
80:89:2b:9b:38:bf:77:bd:f9:1e:0c:3a:ab:81:bb:
a3:78:39:0a:82:32:7c:3e:af:d8:8f:61:af:cf:15:
7a:26:9d:b6:8f:43:a5:fb:71:9d:1c:df:7d:a3:7e:
53:6b:d2:74:44:5c:68:90:ff:ad:37:ad:60:92:35:
c9:81:2b:41:58:ee:67:05:7a:61:64:62:b7:79:b8:
34:db:8b:53:6a:f2:b2:d8:0f:ee:5f:e8:25:c0:13:
8e:54:64:9a:70:74:5d:33:bc:d0:67:13:ee:7b:34:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:F0:53:70:07:7F:7B:A1:9D:82:B5:25:51:9D:04:24:6E:EB:3F
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e24::/48
Signature Algorithm: sha256WithRSAEncryption
29:2d:78:52:0c:81:d6:5e:e2:24:67:3e:a8:87:c3:a7:a8:32:
c3:ec:4a:6b:c7:e2:8a:64:77:85:26:15:b9:7b:07:b3:08:aa:
33:2c:1f:22:c2:2f:1b:aa:b9:e3:21:61:66:51:f7:f6:37:e7:
ca:1e:4a:e1:91:37:20:de:f0:dc:9a:47:ea:f9:7f:03:95:75:
3f:fd:49:bb:b6:91:8c:ca:33:50:71:33:a7:39:82:2b:1d:4c:
4f:ed:9f:cb:b5:f1:c7:c1:ab:f4:31:dc:2a:d7:60:8e:5a:63:
4c:e6:8c:cd:84:1a:67:fe:a2:da:2c:1c:d1:f5:20:53:31:96:
68:85:bd:08:e9:49:0e:de:0e:6a:73:ee:dd:9c:cc:4d:71:d4:
a1:c2:41:fd:b2:fb:17:bd:11:cc:ad:5c:c3:92:ce:a4:79:b0:
3f:1b:c5:dd:5c:b9:87:dc:a2:67:58:73:62:09:84:dd:2f:a8:
d5:0b:94:74:ce:70:92:cf:13:e8:b5:93:0c:48:eb:a0:5f:0a:
a9:e7:ec:88:24:b6:29:2d:8b:72:23:1f:34:6c:69:8a:55:67:
84:cf:08:ca:78:63:5d:73:58:67:de:7d:8c:ad:f8:cf:84:ac:
77:9e:7c:4d:d4:f6:fe:30:5f:ab:08:a2:ec:d9:0b:95:64:bb:
43:a2:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:32 2025 by rpki-client