Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/v7txDad3obC4fM89n81NhQg4Yeg.roa
File: v7txDad3obC4fM89n81NhQg4Yeg.roa (raw, json)
Hash identifier: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=
Subject key identifier: BF:BB:71:0D:A7:77:A1:B0:B8:7C:CF:3D:9F:CD:4D:85:08:38:61:E8
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019427B3B6BCBFB943736BAD65354B623981
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/v7txDad3obC4fM89n81NhQg4Yeg.roa
Signing time: Thu 02 Jan 2025 15:47:56 +0000
ROA not before: Thu 02 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47292
IP address blocks: 2a0b:7e00::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:b6:bc:bf:b9:43:73:6b:ad:65:35:4b:62:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jan 2 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfbb710da777a1b0b87ccf3d9fcd4d85083861e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c9:f8:6d:30:e6:b6:22:e9:c4:8f:8b:45:0e:
82:f7:55:ea:f7:34:5b:ad:f9:91:ff:8a:49:35:e6:
53:46:37:5c:88:5c:3e:c9:71:25:b1:ff:a7:24:c0:
45:c6:67:4f:6e:74:30:9e:86:2e:fb:a4:a5:0f:86:
a3:2a:8e:63:96:4f:a1:73:7e:1f:68:cb:51:a3:86:
cf:bc:8e:e0:7e:29:bc:2e:fd:b3:e9:eb:17:fd:80:
d4:df:34:c6:46:24:af:37:eb:9f:8c:76:09:1d:c7:
e6:b9:c9:b6:03:75:1e:6e:80:96:34:c3:2b:cc:31:
27:31:f1:f0:45:1c:f4:3f:a8:87:59:57:d8:7f:75:
91:ff:02:85:27:9a:8b:68:5a:c4:e0:3e:a3:bb:18:
24:a4:7b:90:2c:54:f5:43:cb:b4:76:54:29:c7:26:
5f:9e:f3:65:b0:6d:51:5f:85:0c:b8:19:0c:b1:bd:
93:f8:97:e2:19:fa:6b:53:9f:79:7e:34:3a:56:87:
e6:83:e1:b5:7a:5d:12:75:4b:e4:3d:f8:36:fa:37:
e4:07:9b:84:6a:53:d2:1e:50:b0:62:41:53:d2:a3:
dc:05:23:8c:ea:60:da:4f:f8:4b:81:92:5a:51:0e:
9a:4e:0b:b8:30:9f:fa:c8:2a:f3:29:db:4c:cb:f4:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:71:0D:A7:77:A1:B0:B8:7C:CF:3D:9F:CD:4D:85:08:38:61:E8
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/v7txDad3obC4fM89n81NhQg4Yeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7e00::/36
Signature Algorithm: sha256WithRSAEncryption
20:3e:0c:eb:f5:b3:6e:74:4f:ab:88:27:1d:85:74:2c:12:5d:
39:cd:a2:ea:5f:20:d6:a3:13:ce:46:1f:3c:fd:29:4d:8f:ae:
f5:2d:a0:fd:bb:2b:65:83:46:89:dd:2c:21:f5:2c:45:89:0c:
ce:77:9e:5e:5d:20:1c:9e:4d:4a:ad:94:2c:f2:40:1c:b1:7c:
84:14:8c:6e:93:08:49:f0:9f:2c:70:02:4f:1b:a0:4f:06:36:
bf:c2:af:a4:8e:10:bd:07:5d:14:4b:47:54:fa:df:f8:c3:d5:
4f:6c:b1:04:d5:dd:47:a1:47:d0:1d:2b:22:c4:0f:9a:28:b0:
19:15:d2:66:24:fd:16:ba:54:43:01:2f:c6:c6:95:73:26:3b:
bb:47:27:d9:ad:89:b3:cf:5c:36:a6:fa:cb:77:14:c0:46:c9:
31:c6:05:e2:87:85:8f:66:11:b9:31:84:c5:76:c2:4f:8f:3e:
66:da:ed:79:32:3c:23:af:99:20:1f:13:e0:56:82:e0:00:fb:
df:b5:ba:68:84:2f:4a:52:dc:85:d8:aa:cd:68:74:cb:d7:7d:
0a:11:54:ef:df:6f:7c:37:03:d6:04:b2:3e:0a:57:25:49:31:
1d:0c:2b:7b:28:26:e5:32:94:d1:c4:70:56:96:d8:8b:4a:c9:
c5:ec:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:18:32 2025 by rpki-client