Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/7md33wTGzdjzkpdm2YWPb96DeAE.roa
File: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (raw, json)
Hash identifier: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=
Subject key identifier: EE:67:77:DF:04:C6:CD:D8:F3:92:97:66:D9:85:8F:6F:DE:83:78:01
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBD5FB53269DEDFC1A8EA6BA0C10B
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/7md33wTGzdjzkpdm2YWPb96DeAE.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214731
IP address blocks: 2a01:e281:ad00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bd:5f:b5:32:69:de:df:c1:a8:ea:6b:a0:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee6777df04c6cdd8f3929766d9858f6fde837801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:da:50:fb:a7:7d:a1:4c:46:65:30:9b:78:
54:d7:a3:4c:3e:3d:f5:04:36:39:ca:a3:33:b2:2a:
fc:68:60:a2:52:53:21:eb:bf:46:7c:ae:8a:69:3f:
2e:b4:2f:ee:98:37:32:3d:57:9e:43:3b:42:30:92:
20:c4:55:4d:e9:d4:d1:3d:7d:a0:27:b8:cb:46:cc:
71:96:4c:c7:b8:f5:3d:da:d4:c4:49:88:c1:9c:67:
ea:1a:99:ae:d9:0c:21:a5:bd:44:e3:d0:fb:a2:24:
3c:15:7a:a9:30:1e:e5:50:f7:0c:04:bb:b3:f9:c5:
84:2c:00:d1:9a:6c:ec:17:7d:21:75:e9:f0:27:9a:
9d:0d:b5:d3:1c:cb:08:f6:34:19:0a:d8:cf:cf:c2:
8c:c6:cf:af:41:55:37:8c:02:d4:6b:a3:33:41:55:
6b:00:4e:62:22:39:9f:5b:17:fe:dd:32:96:ab:c2:
3d:26:e6:75:4e:57:61:4c:76:31:34:30:81:47:f1:
97:b0:98:d5:23:e9:94:cf:4d:40:2c:32:e3:d1:f6:
c0:aa:0f:13:6b:52:3b:f6:86:1f:fc:22:33:81:ad:
1f:c5:85:98:e4:64:65:0f:2d:17:83:92:5f:4c:44:
48:c2:b6:bf:c4:2e:53:db:b1:cb:35:6b:9b:24:5a:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:67:77:DF:04:C6:CD:D8:F3:92:97:66:D9:85:8F:6F:DE:83:78:01
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/7md33wTGzdjzkpdm2YWPb96DeAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:ad00::/40
Signature Algorithm: sha256WithRSAEncryption
83:05:6b:da:4e:bb:44:6a:d2:9d:8c:2b:c4:ec:74:17:d2:75:
fe:67:bc:84:cb:a8:34:bf:39:06:da:98:06:ac:39:7c:76:f2:
65:ea:ef:32:7d:2a:df:91:3a:85:f3:ef:b5:70:f0:50:e8:ba:
5b:bb:8f:b2:d2:64:d4:3b:ba:8c:10:98:fe:17:01:b1:f4:01:
07:a8:50:93:97:dd:bc:4d:be:0c:aa:a4:eb:65:a8:db:c4:e1:
43:9d:dd:ee:b2:7a:8d:b0:52:e4:ac:d4:ea:03:12:c8:b2:79:
ea:57:24:1d:51:d3:c6:65:9b:31:fe:6b:94:f1:76:b3:85:4f:
0b:3f:2b:f7:33:59:ef:00:67:67:e1:a9:db:6a:41:a6:54:64:
b9:6b:92:6e:d6:5c:49:a4:30:77:45:7a:49:65:1b:6d:6f:08:
b2:fd:5f:5d:7d:4f:48:42:39:b4:53:cb:5d:b7:11:a7:69:a5:
e7:27:00:23:ac:b6:3c:a5:fa:a5:87:83:c5:c5:0b:3d:1f:d4:
e0:69:d4:01:24:01:e9:f1:8f:c3:f1:80:bd:d8:fd:2f:60:14:
2c:e9:41:19:54:16:a2:7d:df:59:de:1b:0b:70:1a:dc:17:46:
42:90:d7:34:cb:60:68:0e:6a:60:88:f9:e3:dc:b3:c6:07:28:
1c:dd:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:15 2025 by rpki-client