Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/oL6upz__MRc0cTCTF_SeavWXEzg.roa
File: oL6upz__MRc0cTCTF_SeavWXEzg.roa (raw, json)
Hash identifier: egHe8JlphuWtDReyG46GxVSIFplE29h1V2wCSPqwxEg=
Subject key identifier: A0:BE:AE:A7:3F:FF:31:17:34:71:30:93:17:F4:9E:6A:F5:97:13:38
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019424B26AB273CE35074ABD37A3B3A50544
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/oL6upz__MRc0cTCTF_SeavWXEzg.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a0f:3380::/32 maxlen: 32
2a0f:3381::/32 maxlen: 32
2a0f:3382::/32 maxlen: 32
2a0f:3383::/32 maxlen: 32
2a0f:3384::/32 maxlen: 32
2a0f:3385::/32 maxlen: 32
2a0f:3386::/32 maxlen: 32
2a0f:3387::/32 maxlen: 32
2a14:4080::/29 maxlen: 29
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/29 maxlen: 29
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/29 maxlen: 29
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/29 maxlen: 29
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/29 maxlen: 29
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/29 maxlen: 29
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6a:b2:73:ce:35:07:4a:bd:37:a3:b3:a5:05:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0beaea73fff31173471309317f49e6af5971338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:79:f4:eb:20:60:53:e8:27:0f:bd:9b:64:
e4:96:7b:12:7b:01:61:6a:4e:55:6b:91:e8:06:28:
d0:56:6e:ef:fe:b3:80:15:3f:4c:73:9b:68:6b:c2:
cc:f7:09:94:55:9b:16:ca:ba:df:3a:76:1e:5a:de:
94:b0:a0:0a:1e:47:e5:d1:e6:f5:a8:84:1f:50:2b:
41:e6:10:67:31:6d:f5:d0:8d:1a:1b:52:f9:eb:22:
59:3d:50:4a:73:8a:b9:ba:38:36:2f:f5:1c:4b:5e:
ee:21:84:ad:de:6c:97:32:8f:60:3f:09:a5:cf:ac:
7d:4e:6f:c0:3f:63:be:b5:bc:0d:8f:3f:01:6f:4e:
a7:c7:39:e3:65:6e:86:9e:92:42:5a:29:eb:1e:52:
a5:e4:f4:33:6e:bd:00:46:88:50:aa:b8:42:d4:4d:
92:e8:46:67:c8:df:c5:b7:d3:98:88:d7:60:d6:7e:
48:1a:04:98:0f:15:18:70:04:5a:7e:bb:4a:b5:44:
9e:93:5c:f4:e3:1e:86:ae:04:05:93:e9:c6:ea:de:
6b:1f:91:a8:37:93:bf:a1:70:6d:fc:24:db:c5:ce:
36:06:35:ad:21:da:8b:b3:50:cc:bd:5c:d9:e3:10:
22:b5:7c:ed:0b:fd:5d:19:42:ed:d2:2e:6c:e5:ae:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BE:AE:A7:3F:FF:31:17:34:71:30:93:17:F4:9E:6A:F5:97:13:38
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/oL6upz__MRc0cTCTF_SeavWXEzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0f:3380::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
72:2e:6e:fd:5b:59:b0:c8:72:e8:b7:07:e8:d6:58:d0:e2:51:
45:ec:78:73:47:b4:18:c9:fa:8d:b7:7f:1c:fe:ae:5d:44:d2:
f3:9d:15:27:50:df:17:04:50:e5:07:3c:15:fd:61:37:fe:b0:
42:b7:d8:69:b7:86:0d:2c:e8:da:ab:15:8a:9a:e6:8d:32:b6:
90:85:db:f4:b9:74:fb:10:82:89:92:92:e1:51:0b:80:cd:53:
75:75:25:b2:87:60:c5:63:75:c3:41:89:f5:c9:d0:18:8d:37:
42:6b:9b:09:07:93:7c:d5:f7:22:42:52:42:79:09:66:aa:bf:
98:ec:5b:bd:f1:6f:c2:35:5f:f6:19:f3:4d:6b:cd:a9:3e:71:
29:a4:44:27:97:6e:52:0c:c9:93:de:0f:32:76:bd:e8:02:b0:
f9:fb:9d:8f:fe:64:f6:a3:d6:7e:75:09:cf:9a:59:ed:b5:35:
ed:21:8a:1f:90:25:b3:38:53:f5:80:9d:52:2a:a7:f6:0f:59:
81:24:c7:c7:3d:7f:50:00:26:e1:76:23:c7:53:d5:41:be:e1:
3d:5d:3f:3b:94:be:ad:d7:35:f9:7a:6e:99:c3:d3:9c:ac:4a:
18:1f:9f:7b:f8:07:1c:e9:89:23:67:d6:e9:0f:d9:ec:81:72:
7f:d0:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:42 2025 by rpki-client