Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/7YhCJ28wSxD6190KY3LsL2-jFBY.roa
File: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (raw, json)
Hash identifier: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=
Subject key identifier: ED:88:42:27:6F:30:4B:10:FA:D7:DD:0A:63:72:EC:2F:6F:A3:14:16
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D64139AB47ACB975F31082015EB451
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/7YhCJ28wSxD6190KY3LsL2-jFBY.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212856
IP address blocks: 2a07:22c1:10::/48 maxlen: 48
2a07:22c1:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:41:39:ab:47:ac:b9:75:f3:10:82:01:5e:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed8842276f304b10fad7dd0a6372ec2f6fa31416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:d8:a1:e7:01:07:b5:f2:b9:78:cc:88:36:
58:41:f7:bb:4b:c8:0f:17:1f:4d:02:c6:27:18:36:
ea:32:2e:0a:88:54:e6:08:c2:ae:e9:50:d4:46:36:
69:29:6c:67:bc:8e:b6:38:61:71:a2:c2:12:94:3d:
09:68:a1:6e:aa:84:0a:41:b3:bc:58:f4:f8:ee:e5:
d5:7b:0e:e7:c2:20:49:81:b9:0c:ad:ce:27:56:59:
e7:61:d5:04:a0:79:1b:91:49:b3:e8:7f:0d:22:70:
5a:20:6f:a0:ec:40:fd:f4:f2:20:55:dd:0e:46:7c:
6e:76:be:f4:17:f4:33:31:81:f0:2a:78:41:02:72:
f8:0a:c6:4b:c7:61:38:1f:1b:02:f4:63:3c:de:b9:
6a:df:5c:9c:69:e6:68:ee:bf:c1:0e:6d:40:04:cc:
80:29:c5:4d:9f:45:9d:34:4b:9f:57:17:ac:c3:21:
e3:00:de:66:e7:61:81:4c:4e:54:23:39:27:4c:12:
35:50:a7:45:8a:d6:33:62:2e:0d:c3:4a:65:2b:51:
5a:36:b1:15:43:1f:51:ad:00:58:7c:a2:d8:51:77:
95:8d:50:15:d2:cf:a5:d1:49:24:c7:a4:be:6f:3e:
63:01:86:53:79:c8:de:d1:c0:a0:af:6c:85:56:17:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:42:27:6F:30:4B:10:FA:D7:DD:0A:63:72:EC:2F:6F:A3:14:16
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/7YhCJ28wSxD6190KY3LsL2-jFBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:10::/47
Signature Algorithm: sha256WithRSAEncryption
6e:7b:1c:89:d7:4c:05:21:ce:3b:3c:e3:78:c3:09:3e:bc:c3:
61:50:ee:c8:49:72:81:29:77:18:1f:35:04:dc:b8:f7:d7:88:
dd:f9:94:51:be:6c:5f:61:95:cb:df:7a:73:84:83:b6:e5:9b:
1d:89:42:19:3d:37:6d:da:68:fd:e8:52:e9:81:87:bb:2e:15:
d7:77:c4:e2:e4:7a:3a:23:a4:89:83:e7:f8:1e:21:c0:c2:f8:
42:cb:b9:9f:5d:98:6e:8e:73:a7:70:80:68:67:ed:3e:44:f3:
22:aa:11:32:5a:a6:d2:5d:e3:27:b4:42:ae:eb:da:26:5a:1b:
2e:28:62:e1:3c:b4:c1:b6:2f:61:d3:10:77:e9:ca:ce:04:02:
57:1c:d5:ed:4e:ac:56:98:49:79:99:4a:b4:2e:13:6f:ac:6a:
2e:e3:d3:fd:b7:15:54:f9:42:8e:2c:52:a1:b4:74:bf:97:c1:
e1:39:0e:43:ba:07:59:2f:11:fa:29:8f:ba:7c:48:f4:7f:5c:
c0:a3:64:ff:2c:46:8b:b4:57:9c:70:fb:61:12:28:ef:28:ce:
b0:4c:8e:a9:10:32:32:8c:74:8b:04:eb:21:d1:79:03:bf:ef:
57:c2:67:94:66:ff:ec:d6:07:ea:3c:79:b5:7f:66:1b:a1:8e:
6d:e3:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:42 2025 by rpki-client