Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Krg9bisAUC8MAGRZHFESpAUO3RI.roa
File: Krg9bisAUC8MAGRZHFESpAUO3RI.roa (raw, json)
Hash identifier: pQjQWbrKpx9clKUSNyE/fAXw3cuHdZqQn9kovB6DUGw=
Subject key identifier: 2A:B8:3D:6E:2B:00:50:2F:0C:00:64:59:1C:51:12:A4:05:0E:DD:12
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482DCD67AB5626F9253CBC49BAA27B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Krg9bisAUC8MAGRZHFESpAUO3RI.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a0e:15c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2d:cd:67:ab:56:26:f9:25:3c:bc:49:ba:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab83d6e2b00502f0c0064591c5112a4050edd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:e6:62:21:ea:7e:3c:55:88:e7:a0:71:89:
e7:47:40:46:73:b8:e1:14:a7:0d:e5:08:87:d7:54:
6d:9c:ea:9d:ec:89:63:a2:1c:92:94:4e:cd:4d:3d:
56:7b:38:cb:97:4e:36:f4:36:e1:c4:b7:3d:88:8e:
f5:80:eb:2e:e2:58:18:df:7a:0d:67:ce:6d:f2:05:
7e:96:40:e7:a1:8d:f8:fe:3e:fb:b0:4a:18:90:c2:
e6:d6:4a:08:a5:90:2a:01:ef:61:20:0c:eb:99:22:
7c:bc:09:11:e9:04:f2:4d:cf:5e:a1:48:e5:0a:bc:
ad:18:a2:7a:27:2c:f8:22:b7:75:4f:81:d9:8a:5b:
63:1c:8f:c5:c9:9a:11:75:60:6f:5b:51:d5:f4:14:
c3:f0:14:a4:93:c8:88:74:41:d0:0c:78:78:b1:15:
95:db:ae:0c:b9:03:77:f0:52:6a:b0:c9:07:17:42:
fb:90:a2:05:69:1e:55:b4:b4:e3:03:50:5e:68:bb:
ac:97:78:a1:32:bc:63:23:62:ae:59:d5:4d:56:eb:
41:9f:2d:89:25:ff:61:42:ca:d9:aa:61:b0:0e:a0:
43:67:a1:02:e6:60:67:31:ee:31:2e:0a:7a:5b:54:
ca:c4:90:68:c0:41:46:9f:01:ce:95:f8:5d:ad:48:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:3D:6E:2B:00:50:2F:0C:00:64:59:1C:51:12:A4:05:0E:DD:12
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Krg9bisAUC8MAGRZHFESpAUO3RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c4::/32
Signature Algorithm: sha256WithRSAEncryption
5c:9c:d3:5f:30:57:cd:6a:13:e2:17:5a:ac:f0:fb:3a:b5:7c:
9a:5b:31:64:cd:f8:28:d3:63:76:b6:99:1a:4d:c1:25:bf:e7:
82:91:b9:94:ba:10:a5:a9:e4:26:6b:26:69:e0:31:e4:76:5e:
4f:fe:66:4a:84:59:ad:39:56:96:d0:b2:63:92:fb:46:e2:f7:
53:64:a7:d6:86:19:25:b2:75:f7:d7:cb:bd:4b:5f:d9:a6:ad:
c0:a9:6e:f4:e3:d7:dd:48:9d:83:82:b3:08:06:58:cb:7b:76:
39:78:80:3b:ff:68:1c:d0:4d:1e:82:72:c0:d0:41:f0:2e:21:
e2:98:1e:2a:28:18:e6:45:b5:6d:51:0e:3e:a2:9d:42:ee:44:
cd:8d:87:13:0e:bb:4e:a1:4e:8e:af:ec:c3:83:d0:05:d4:4b:
07:fe:5c:d4:d0:94:3b:8a:65:82:b4:d4:b4:52:40:5e:37:62:
85:3a:c4:c1:ee:a1:dd:f4:36:a8:1f:d9:aa:d6:17:e4:99:c4:
4b:aa:7b:e2:2e:db:fe:8d:21:37:88:e2:66:3b:4d:64:f0:34:
98:97:28:df:3c:dd:00:5a:0d:18:9b:30:4a:d2:ef:77:e1:66:
18:dc:74:6d:c3:9d:42:bd:a7:ba:f8:36:44:7b:79:a0:f5:86:
b3:16:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:33 2025 by rpki-client