Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa
File: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (raw, json)
Hash identifier: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=
Subject key identifier: 54:8A:B0:41:AF:2C:76:33:18:D5:F2:A5:1F:80:15:13:D9:97:EF:D6
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D6427762CBB1B13E2ABD037205EEB9
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213034
IP address blocks: 2a07:22c0:8002::/48 maxlen: 48
2a07:22c0:8003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:42:77:62:cb:b1:b1:3e:2a:bd:03:72:05:ee:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548ab041af2c763318d5f2a51f801513d997efd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:5b:76:af:b6:ab:e7:ff:4a:95:d4:c9:9b:
c3:03:cf:76:50:bd:33:5b:0a:19:b7:d8:d8:42:f2:
db:2f:69:44:73:9e:18:ac:33:4f:13:e3:6f:ef:a1:
b7:2d:f9:59:bc:16:9b:5b:ff:2c:41:55:97:6e:af:
54:42:e1:7e:f7:34:fa:83:ea:fc:93:63:89:88:53:
e7:f7:47:d6:47:69:c7:bc:22:3d:7c:63:7e:cd:70:
25:25:28:ec:69:21:14:de:e3:c3:7b:c1:33:eb:8c:
e0:94:f6:59:cb:d8:a5:4e:5d:fe:00:0e:77:9a:b0:
f5:1f:5c:f3:6a:b0:95:5c:1b:ac:7f:0d:29:bd:0e:
07:1d:a3:f2:f2:a5:a3:fe:39:ed:b7:7f:07:a9:32:
50:52:e8:84:46:6b:da:ba:1a:dc:71:ad:4d:d5:a6:
49:11:ef:bb:e2:41:f9:8a:26:b8:0d:37:c5:f8:c3:
85:fa:ac:ea:d1:a5:05:ab:73:20:f3:b8:16:7f:cb:
14:c7:d9:68:5c:7f:23:2d:e0:05:81:6d:a0:fb:8d:
ef:dc:1d:85:e8:9b:55:80:ff:95:e9:3e:62:56:64:
25:58:bc:0d:54:b4:fc:41:26:e0:4d:29:3f:81:f8:
51:cf:2d:6b:a9:e8:32:45:96:a8:bf:bc:48:62:ef:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:B0:41:AF:2C:76:33:18:D5:F2:A5:1F:80:15:13:D9:97:EF:D6
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c0:8002::/47
Signature Algorithm: sha256WithRSAEncryption
ba:4a:61:31:e6:f3:ed:19:e2:2a:bf:c6:da:7e:68:ad:c1:48:
f2:b8:de:1a:07:c7:60:91:d9:4a:eb:60:c9:c3:ef:25:0a:f4:
2b:a6:d0:86:a6:09:d8:01:80:15:73:da:80:06:86:60:1c:5a:
dd:35:61:6e:9e:2c:47:aa:b6:24:e3:ac:dd:63:af:2f:b4:80:
ec:40:51:60:16:4c:69:cd:ba:71:a9:53:53:ad:01:92:76:4b:
a1:59:39:4d:6d:8b:a6:ef:b9:77:d0:64:4d:56:50:54:ac:37:
13:cb:65:8b:8f:a5:bb:61:35:8d:a4:92:2b:6f:d9:21:9a:3e:
0a:d5:a1:61:f7:06:8a:83:c3:40:3a:a3:52:a1:30:1e:57:be:
3b:b3:a4:f3:4f:83:4b:cb:e5:38:e9:e8:4a:4f:ed:52:b9:dd:
ce:c6:43:f9:66:55:e8:10:e5:50:8c:d2:b6:a6:6f:40:22:54:
23:02:53:ab:b5:5f:2b:1c:f5:55:61:6d:1e:48:d5:0e:da:84:
4c:b0:a1:3f:91:dc:bb:fe:f0:ff:6d:25:69:81:eb:65:99:be:
c1:7b:73:81:80:9f:99:fd:64:72:f3:82:5f:56:e5:e7:7b:a3:
ef:16:26:58:b3:da:ca:12:e9:7d:f9:03:a3:21:84:02:de:61:
46:13:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:38 2025 by rpki-client