Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa
File: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (raw, json)
Hash identifier: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=
Subject key identifier: 6B:09:F6:D5:C7:13:D8:E1:2F:F5:1A:5F:8E:1E:03:86:6B:93:92:14
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D6439F31D14E5C5876B564A15ABBED
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213189
IP address blocks: 2a07:22c0:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:43:9f:31:d1:4e:5c:58:76:b5:64:a1:5a:bb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b09f6d5c713d8e12ff51a5f8e1e03866b939214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:8f:04:ef:bc:82:b9:f8:41:99:8f:75:99:
21:15:a8:9b:8d:d2:c6:c1:81:2a:6f:ed:04:24:91:
90:2e:c7:c9:04:c8:f5:67:7d:d8:9e:7f:86:19:76:
c5:9f:a6:fb:a4:5f:71:35:ff:a5:fe:1d:b9:bc:52:
d7:4a:90:9c:07:e8:55:2e:61:da:47:a7:87:2a:a9:
85:a6:4f:fb:5b:28:41:61:c4:c2:01:55:41:85:2d:
f2:53:92:31:9d:cb:45:aa:3e:45:aa:99:c1:8d:0e:
e1:c9:7d:36:e4:3b:4f:20:fc:23:8e:06:76:f1:0b:
86:c8:20:70:71:9e:ee:4f:75:33:41:64:d7:9b:23:
3b:01:33:f6:d5:cd:0a:76:ba:f6:48:0d:f9:e2:a2:
8d:92:0b:de:a8:6c:a2:46:0b:1a:c9:18:91:51:56:
33:58:a3:cf:f9:85:3e:35:02:30:5e:15:c7:47:81:
4c:2e:7f:8e:b1:47:24:85:de:cd:52:6d:f4:c5:71:
0a:61:a1:5f:da:ed:99:f3:01:5a:f2:86:e0:f5:f9:
09:8a:a7:6f:8e:52:fa:af:11:73:37:c0:bd:96:9a:
3e:69:41:ec:fa:f6:78:e3:01:fd:c4:27:35:d6:69:
f5:ff:6a:2b:03:9b:eb:51:f2:e4:e5:62:ac:06:70:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:F6:D5:C7:13:D8:E1:2F:F5:1A:5F:8E:1E:03:86:6B:93:92:14
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c0:c000::/40
Signature Algorithm: sha256WithRSAEncryption
0a:2a:ae:0c:af:cc:cb:df:3a:c1:72:9a:c7:22:85:72:f0:a9:
c7:47:20:89:b9:89:61:b9:75:1c:c6:7c:f0:7e:27:8b:b2:af:
59:05:91:83:d6:52:fd:18:9a:0b:c2:86:37:1f:c3:bd:17:f7:
5f:a0:9b:12:a0:9b:eb:9b:3a:13:bb:c3:4d:94:34:01:3e:d9:
05:05:c6:8a:99:bd:6d:5b:fa:3c:8b:53:cd:d0:2e:5e:df:98:
93:67:b3:92:e6:d7:d2:92:d4:8b:fe:90:b9:1f:45:55:0f:b5:
fb:9c:46:d9:9d:d6:13:33:82:ed:9f:fd:40:1d:69:05:81:d9:
d1:fe:02:77:77:75:7a:48:20:f1:07:78:04:81:23:23:64:66:
dd:d1:fa:0b:f5:8a:ad:f5:a8:59:2e:5d:ec:fa:2e:6d:40:5d:
66:e8:21:24:f6:4d:fc:f3:a5:f2:62:bd:54:25:84:bd:3a:db:
1f:a0:0d:cd:a7:06:d5:b2:38:16:3a:82:c5:c9:11:a4:03:61:
e4:90:e4:9f:bb:3d:9d:e3:ab:36:40:70:1e:1b:6a:54:62:8a:
24:a0:be:3b:24:0a:8e:68:9c:e6:5a:6a:d0:6e:a6:8b:6d:dc:
a6:dd:bd:d3:7a:7f:8a:94:64:ac:4a:d0:61:40:25:08:46:6e:
e0:20:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:18 2025 by rpki-client