Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa
File: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (raw, json)
Hash identifier: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=
Subject key identifier: AB:07:E9:6D:96:C1:F4:7E:29:9A:73:AA:FA:CD:A2:E6:0B:20:72:E1
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 019425FDDC3958D4459870DFF674D5B948FC
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42861
IP address blocks: 2a00:1e68:100::/47 maxlen: 128
2a00:1e68:100::/48 maxlen: 128
2a00:1e68:101::/48 maxlen: 128
2a00:1e68:112::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:39:58:d4:45:98:70:df:f6:74:d5:b9:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab07e96d96c1f47e299a73aafacda2e60b2072e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:b5:1a:12:9b:14:f7:f7:a6:06:8c:d3:a3:
30:ee:6c:10:d1:1c:1e:fa:53:71:d5:0d:52:f4:d2:
5d:7f:74:a1:cd:ac:e5:84:f9:28:e5:1e:f5:36:f2:
09:42:f8:44:15:ed:6c:23:f0:79:3b:bf:43:bd:45:
c0:b9:33:8c:34:be:9d:b3:81:1c:bd:2f:2f:82:a0:
a7:e5:5c:46:f2:9f:3a:84:38:ae:23:32:a0:b7:f3:
14:a9:3d:0d:b0:24:81:c7:8b:c7:92:29:1b:12:65:
2d:a1:c3:1a:88:52:39:0b:10:40:59:e8:f8:db:77:
ed:9d:ee:50:24:3a:d5:ab:db:70:c7:eb:00:e4:d1:
d7:58:1e:27:d7:87:f8:a8:6b:7c:b6:59:23:23:53:
6b:87:d1:4e:0f:cf:46:66:9b:75:3b:68:81:6a:5e:
96:32:be:cd:e3:c0:d8:82:af:1a:f6:37:5f:76:78:
b3:3f:1d:c4:23:95:80:f1:65:0b:73:e2:66:98:75:
e8:c4:4b:81:7e:65:d2:c1:f8:73:77:f6:df:cf:99:
03:02:46:71:60:ac:12:66:c0:b6:2c:6c:bd:59:77:
a3:18:bb:f0:7c:e5:3a:c1:45:19:68:09:f2:dd:ef:
0d:d1:7a:71:17:35:ee:be:79:32:4c:db:e0:51:76:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:E9:6D:96:C1:F4:7E:29:9A:73:AA:FA:CD:A2:E6:0B:20:72:E1
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e68:100::/47
2a00:1e68:112::/48
Signature Algorithm: sha256WithRSAEncryption
a3:28:f4:e7:24:54:ba:1c:2c:cc:da:fd:10:1f:fc:b1:27:60:
2a:43:86:f6:7f:52:30:06:a3:60:79:48:74:a3:e6:f1:5d:69:
a0:81:12:f1:e7:e8:c7:8c:34:d8:c9:4c:8e:29:c2:b6:32:49:
71:3c:a5:ad:3b:e0:f5:63:26:3d:8c:ba:5c:13:e4:6f:3c:28:
57:53:21:bf:6f:1d:12:22:e2:72:a9:94:66:37:52:e9:74:3f:
b8:77:b7:e1:5f:f7:28:f0:e8:9e:4f:04:5d:79:9c:80:ff:d8:
60:b3:da:cf:29:87:bc:04:9b:0e:d4:11:27:e4:f0:50:be:81:
18:73:9f:07:8d:72:58:3f:77:30:01:10:e7:3c:5a:66:fe:e8:
1d:c3:e0:42:4e:76:57:45:e7:ff:25:9a:02:a2:7e:6b:b3:dc:
71:f0:90:ec:79:ef:fd:6a:dc:bf:31:5a:bd:0a:77:88:e9:25:
3f:38:c4:ca:ad:0c:c8:b0:e0:8e:3e:54:e9:23:23:39:c6:35:
04:aa:9f:48:dc:37:01:ca:7b:87:41:a5:e8:24:24:00:21:09:
39:99:56:f8:57:1f:00:de:a2:1d:83:93:b3:64:c6:e1:81:24:
38:e4:2c:7e:38:09:5f:17:35:21:fa:ca:b3:0b:b5:46:6c:e7:
b0:49:e0:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:51 2025 by rpki-client