Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa
File: 7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa (raw, json)
Hash identifier: RlyXBzHmtsm995ENs8O6yiu+NFUTpzrFveSmekzl2mQ=
Subject key identifier: EC:63:36:5E:A9:A7:EA:06:8C:14:CA:26:80:43:36:AC:09:0B:2A:8E
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 019420D603F36DCC178060497099B18618D5
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1054
IP address blocks: 2a0f:7880:201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:03:f3:6d:cc:17:80:60:49:70:99:b1:86:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec63365ea9a7ea068c14ca26804336ac090b2a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:57:58:93:c5:8b:8c:6a:8c:bd:b3:ea:9d:
e6:0e:09:29:5c:08:1f:ce:15:1d:c1:3c:ab:d0:19:
5c:c7:64:45:0c:9d:ca:2a:f8:ee:6d:cb:80:1f:75:
a2:9f:7c:f7:57:38:d5:18:95:00:98:10:21:64:2e:
d9:d3:82:b4:4e:a2:89:fd:b7:4b:d3:a5:14:bf:6b:
19:45:7b:ea:b3:1c:73:4b:60:01:fe:75:01:eb:56:
50:a2:37:05:72:55:41:9f:72:7b:7e:e3:cf:08:b3:
3f:0f:b5:7a:92:7f:39:c1:3b:13:c6:54:c8:e5:39:
7a:0c:82:bd:b8:97:f1:46:75:21:63:13:42:bd:aa:
d2:d2:38:ed:73:b2:45:de:e9:85:55:27:30:11:82:
64:0f:00:5d:ef:59:3b:38:dc:1d:6b:56:45:9d:51:
45:d9:0a:ea:4c:10:45:8e:d0:38:b5:31:56:2f:dc:
2c:74:11:82:0a:63:78:7d:74:3c:f2:90:2c:65:44:
c5:32:b7:da:0d:3f:9a:2f:0f:e0:9d:af:0d:9f:d2:
d7:74:0a:c1:32:59:5e:82:a5:59:38:f5:33:8e:c8:
c1:33:95:d6:69:b3:97:e5:77:dc:5b:0a:b9:0c:8f:
91:75:df:f0:59:e6:77:b0:f2:ff:c9:94:1a:ce:18:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:36:5E:A9:A7:EA:06:8C:14:CA:26:80:43:36:AC:09:0B:2A:8E
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:201::/48
Signature Algorithm: sha256WithRSAEncryption
91:d9:6e:ab:fd:27:00:4d:f8:20:73:e8:1b:30:3e:49:02:f0:
46:e6:e8:3d:a9:02:cf:4a:31:6b:43:83:3c:9f:98:d5:4f:bf:
57:11:cb:ba:a6:89:d6:c1:6a:27:8a:0b:b3:40:bf:d6:49:48:
fa:c2:32:c1:05:5a:93:2a:07:c3:fd:ce:09:36:08:a3:37:3c:
dc:f5:83:6e:bd:fc:05:f3:8e:55:17:6c:4c:17:f3:90:4e:13:
ed:9c:c6:97:16:d3:14:d3:59:33:a9:e0:86:d9:35:ab:a0:38:
a2:09:8e:ed:03:0a:cc:14:0d:66:23:ea:21:58:34:d3:10:d7:
29:97:e6:49:d6:58:be:87:f3:09:46:b2:cb:1d:73:de:4c:f3:
75:50:82:72:6a:b7:30:5d:a1:6a:93:d6:57:1d:72:1c:67:da:
ef:0d:01:49:ee:0a:cf:c4:c4:3f:e9:a7:77:de:f1:5d:35:5f:
b8:b1:3c:63:66:97:25:9a:e4:05:d1:7c:b1:bf:6d:51:1f:e8:
e5:31:d7:bb:a6:00:59:ce:8e:2e:14:f8:b1:83:b6:58:ba:8f:
f2:fc:1e:1c:7e:20:6b:05:fe:29:28:b8:6f:09:34:ea:f9:07:
95:6e:ff:b8:64:f0:94:9a:af:f9:c3:7c:af:d3:7c:27:82:de:
4f:63:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:12 2025 by rpki-client