Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa
File: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (raw, json)
Hash identifier: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=
Subject key identifier: E9:BE:D1:19:AB:8E:E9:6C:36:AA:0D:7E:59:B7:7C:F2:BE:1E:DC:A6
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D64435662E19F6C9107581087314EF
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213388
IP address blocks: 2a07:22c1:fff0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:44:35:66:2e:19:f6:c9:10:75:81:08:73:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9bed119ab8ee96c36aa0d7e59b77cf2be1edca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:32:6f:88:43:de:fc:03:28:b7:1e:0f:23:
f6:09:ce:4c:4e:a2:33:75:b9:06:91:08:f4:65:80:
60:f4:d0:e7:d2:7d:a4:23:4f:93:29:21:a4:a9:27:
ff:fd:31:c3:7e:96:62:33:bf:87:e2:5f:23:1f:8c:
18:18:d0:97:00:e9:fa:00:ee:f6:8c:aa:b3:d8:08:
96:16:de:cc:2e:13:b3:3d:49:39:a6:c3:c9:bf:82:
53:94:dd:65:76:0e:62:99:05:22:66:db:64:51:24:
a3:9e:63:74:70:15:12:82:cb:c5:56:fc:fe:28:48:
8a:44:7f:08:29:bc:dc:6a:dd:66:7f:ad:23:c8:9d:
36:70:fa:d5:3b:3e:1b:5b:8a:e1:8a:a2:50:d8:68:
c7:1e:6e:42:f5:d7:e2:a1:f0:85:f2:30:a9:5e:b2:
9f:40:8a:aa:0d:2f:b4:bb:c8:58:7b:d2:0f:4e:36:
5e:ff:d4:d5:00:8e:8a:75:dd:9d:ed:17:83:b5:15:
ee:98:4d:a4:1e:7b:ee:0e:75:8e:10:03:be:8e:1f:
65:89:b9:2a:61:86:4b:52:94:bc:cd:f4:d3:f2:6b:
ae:d7:ab:ed:aa:fc:2d:d4:23:77:65:67:49:b2:95:
f9:d8:a0:e8:94:de:5c:5a:45:64:0c:0c:cc:ab:b9:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:D1:19:AB:8E:E9:6C:36:AA:0D:7E:59:B7:7C:F2:BE:1E:DC:A6
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
2e:cd:09:ae:e4:dd:6b:19:c0:6a:d7:df:42:41:81:45:3f:6d:
8c:0f:0b:56:7d:7e:43:4f:c6:83:4c:18:d7:ef:04:9f:0f:ee:
76:7e:ae:0c:60:8e:23:8b:1d:27:68:c8:f4:6e:44:7e:0e:f7:
29:20:93:ee:f3:40:7d:2a:1e:a7:98:c4:5a:8c:c9:33:1c:75:
35:82:c0:28:c0:c6:ec:ac:cd:39:1c:11:f0:a2:5c:90:d6:2a:
91:38:02:3e:3a:4d:40:47:0b:86:3f:8e:96:5a:a4:5e:81:e1:
87:87:36:27:47:ed:36:82:01:19:74:53:94:71:30:93:85:23:
b0:f0:68:90:8e:1b:9e:0b:ea:16:5a:68:fd:1f:94:2e:c9:fa:
35:38:c4:1b:28:0c:e8:73:16:03:f3:13:da:3f:50:2a:cd:b9:
59:14:e8:d4:76:5d:a9:69:3f:a6:89:3f:0f:4e:6e:17:b2:21:
7e:59:fd:37:01:ac:49:3a:a9:5d:fc:50:0f:01:1e:2a:12:54:
8d:ec:5e:7e:8c:5d:53:2c:f7:94:24:ae:fe:9c:f3:23:20:ba:
3b:c5:35:b7:20:76:ce:66:6c:f8:f5:54:1b:91:8c:3d:70:db:
df:6e:fc:57:2f:5d:99:79:c4:65:a5:09:41:f6:b9:b5:6d:62:
89:ae:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:21 2025 by rpki-client