Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/DqWqWWUy5sm-gqrVg_icW_4BBuU.roa
File: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (raw, json)
Hash identifier: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=
Subject key identifier: 0E:A5:AA:59:65:32:E6:C9:BE:82:AA:D5:83:F8:9C:5B:FE:01:06:E5
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D63E5A5D49D804B847A6931B8F041E
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/DqWqWWUy5sm-gqrVg_icW_4BBuU.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208454
IP address blocks: 2a07:22c1:ffec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3e:5a:5d:49:d8:04:b8:47:a6:93:1b:8f:04:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ea5aa596532e6c9be82aad583f89c5bfe0106e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:08:1f:36:78:99:94:50:51:b2:2c:8d:5f:
d6:90:da:92:4e:2c:8d:db:8f:2a:57:bb:84:ad:2c:
58:f8:41:3d:e2:0f:eb:6d:10:6b:52:4a:5f:46:2b:
45:c4:43:3f:72:fe:e2:7c:86:da:6c:1c:c9:d8:5a:
9e:02:93:42:60:95:5b:db:83:49:e2:3e:1d:90:10:
c9:c4:31:ff:56:13:44:70:dc:30:91:a8:e0:b8:08:
b1:92:71:7e:e3:c3:64:52:8f:84:9c:3a:37:0c:6d:
17:b1:34:56:25:5c:db:04:d9:08:fb:69:7e:8f:7a:
b6:80:36:53:a7:6f:34:14:15:d4:5a:37:67:14:ad:
fd:a8:3f:66:c7:85:43:c3:8c:2b:92:92:a2:55:f3:
44:d9:fd:72:c8:b3:c6:e7:25:2c:5e:06:60:93:d2:
83:3b:76:07:cd:cb:1b:ad:e7:8c:8a:d8:06:46:ef:
53:11:31:be:16:5b:a1:30:2a:56:a2:84:cd:c2:22:
d0:2d:48:e6:79:8e:0c:7b:80:5f:ed:35:b4:60:74:
18:e5:47:94:5b:74:38:19:9f:8e:a0:4f:57:d8:72:
95:f2:83:81:04:e6:89:4b:51:59:41:da:fb:04:8c:
49:5d:5b:5b:6d:dd:c7:fa:ee:67:cc:a3:60:cd:ff:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:AA:59:65:32:E6:C9:BE:82:AA:D5:83:F8:9C:5B:FE:01:06:E5
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/DqWqWWUy5sm-gqrVg_icW_4BBuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:ffec::/48
Signature Algorithm: sha256WithRSAEncryption
38:2c:62:97:ea:2c:ea:8b:45:be:8b:61:c1:87:f3:84:d4:bf:
fa:5c:4f:be:e0:c2:9b:10:19:af:78:0b:af:cf:7a:1b:5f:42:
49:8e:40:ea:78:96:c5:26:dc:b3:c7:dd:74:72:ea:20:18:5a:
41:7a:5f:30:8e:f6:5b:7a:2e:7e:66:ec:d5:e3:da:e5:fe:96:
18:bd:12:03:e3:f9:81:e3:a4:1d:6b:2d:f0:cb:50:63:1b:48:
92:ba:b9:17:29:8f:e7:db:50:f8:1d:fa:53:28:c1:40:79:69:
95:d9:f4:07:da:09:ef:5a:48:3b:8b:ec:e5:91:ab:9e:3a:e8:
87:fe:9f:e8:cc:55:0e:dc:cf:2d:cb:18:30:00:b6:0c:56:17:
23:65:9b:74:35:1c:2e:9f:e2:e3:a4:dd:33:83:37:ea:57:ec:
22:50:33:3c:39:4d:23:1c:df:24:71:ee:13:87:33:4c:b3:21:
75:80:e6:27:df:53:f4:86:56:0a:4b:a4:9c:e1:cd:b8:3f:ce:
2d:74:05:9f:47:eb:d4:b0:c4:28:70:f4:75:19:85:3e:3e:8d:
3a:56:e7:09:1a:86:af:a5:48:d9:b9:61:25:33:26:45:c3:1a:
d4:9f:aa:ef:7e:e2:ee:dc:ea:cc:2e:b0:81:7c:eb:5c:fa:d8:
05:cc:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:59 2025 by rpki-client