Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SSwIL9IFwFXFpZVK2TITfr5rFxs.roa
File: SSwIL9IFwFXFpZVK2TITfr5rFxs.roa (raw, json)
Hash identifier: OYS4SBcqWCSyxscZ5iLpkNPOM5q/y/pj0lettQUKvK0=
Subject key identifier: 49:2C:08:2F:D2:05:C0:55:C5:A5:95:4A:D9:32:13:7E:BE:6B:17:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01944AA5AE37649A55A86B5DCEFF11DBE0E9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SSwIL9IFwFXFpZVK2TITfr5rFxs.roa
Signing time: Thu 09 Jan 2025 10:39:19 +0000
ROA not before: Thu 09 Jan 2025 10:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 2a0f:2dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:a5:ae:37:64:9a:55:a8:6b:5d:ce:ff:11:db:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 10:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=492c082fd205c055c5a5954ad932137ebe6b171b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:35:0c:fb:f3:ff:9c:f7:13:9b:3e:6a:25:
00:4c:80:f6:fb:fa:38:6d:68:31:96:5f:1e:2e:1a:
60:f5:3b:4b:e2:e1:7d:07:b4:59:51:bb:d0:0e:27:
9b:1a:3b:61:cf:b4:2b:b7:18:a6:d5:4b:1e:ad:58:
d6:68:f4:5f:2b:91:cb:c9:54:0f:cf:ef:a1:81:92:
ec:aa:ce:39:7e:bd:21:0c:9d:3a:30:80:9e:13:61:
64:0d:9f:0c:a0:06:03:07:8d:91:8b:18:fd:b4:d4:
89:cf:13:82:ad:88:78:7e:10:17:10:94:fb:df:ab:
83:67:eb:c5:9d:0d:e6:25:b5:6f:ba:11:87:6d:08:
57:1d:76:14:a5:86:9e:57:4a:9a:c5:99:c9:64:0c:
9e:f0:62:20:5c:8a:c3:fd:e2:48:49:6b:f8:2a:e5:
fd:f9:dd:1a:f7:bc:8b:22:a0:ef:2a:a5:43:bc:bd:
e2:9e:5e:64:c0:ee:8b:5b:02:8a:a6:69:72:c2:bf:
57:d8:b8:32:27:23:23:86:2d:47:c9:53:5b:0d:e7:
9f:56:9f:fd:81:7d:6c:a1:60:e9:43:79:b2:1e:52:
2d:75:f2:45:9b:35:a9:fa:e2:26:1f:57:72:6c:d1:
2a:78:f2:71:05:2c:13:65:b6:b7:93:61:50:79:3a:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2C:08:2F:D2:05:C0:55:C5:A5:95:4A:D9:32:13:7E:BE:6B:17:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SSwIL9IFwFXFpZVK2TITfr5rFxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
13:55:50:3c:53:4b:d5:97:48:f3:6d:cc:b7:df:cf:b2:7b:85:
17:9b:f4:1c:5f:64:b2:3a:5e:11:f5:12:df:18:37:93:bf:d2:
03:a3:0d:08:7b:61:4b:86:39:b1:58:97:64:55:db:cf:de:63:
1a:54:fd:65:b6:77:4c:37:b2:5d:ea:bf:74:ea:5a:96:86:cb:
ed:47:fa:7c:b4:0d:65:51:7e:d7:18:4f:e5:24:fd:52:53:cd:
3d:ba:28:d8:ae:62:b3:8c:a6:ba:28:e8:f7:bf:42:83:08:9b:
0d:04:51:cf:9d:99:5f:e2:ec:c1:0f:9a:3d:04:2d:b4:e6:38:
94:c0:e3:54:32:93:7c:3e:0c:45:01:dc:0b:87:b2:9e:cc:8b:
f3:79:ce:44:49:84:be:c6:66:47:a0:35:d2:70:80:f3:2c:25:
4e:68:86:4d:e8:d1:41:89:63:95:8c:6a:a5:5d:98:d7:49:0f:
3b:da:7e:c1:cb:f9:c7:1b:53:55:ad:8c:3c:31:63:43:e3:94:
1d:7f:33:b3:97:4e:fe:55:fa:b8:98:1f:a3:a3:ff:7e:40:64:
9d:f9:4b:d9:03:c7:27:60:ae:15:f1:cc:f5:1f:5b:ba:0c:81:
b4:a0:93:73:8a:8a:3d:70:2f:2d:22:9b:93:90:f1:54:76:af:
0e:bd:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:28 2025 by rpki-client