Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/a1UPsQjeoFgrASQvINSJJ7_1FEI.roa
File: a1UPsQjeoFgrASQvINSJJ7_1FEI.roa (raw, json)
Hash identifier: IUZiF8ty9Ran6Rx7Q+49/A+HVghw43cz7NyFFJcOacw=
Subject key identifier: 6B:55:0F:B1:08:DE:A0:58:2B:01:24:2F:20:D4:89:27:BF:F5:14:42
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7C61587B564CEE1DE4ECB7B396B9
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/a1UPsQjeoFgrASQvINSJJ7_1FEI.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208421
IP address blocks: 2a01:e901:106::/48 maxlen: 48
2a01:e901:116::/48 maxlen: 48
2a01:e901:126::/48 maxlen: 48
2a01:e901:136::/48 maxlen: 48
2a01:e901:146::/48 maxlen: 48
2a01:e901:156::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7c:61:58:7b:56:4c:ee:1d:e4:ec:b7:b3:96:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b550fb108dea0582b01242f20d48927bff51442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:7d:9b:f6:91:a6:e7:73:4b:4d:6c:15:c6:
b2:df:2b:33:e5:e9:1b:65:95:b8:05:88:d3:7e:2c:
bb:ad:d3:d6:5c:f1:d9:36:be:fd:46:d4:e0:da:bd:
8f:55:ee:88:89:58:ef:a3:18:66:01:c6:13:a3:a1:
b4:6b:bc:b6:11:99:97:01:b7:52:d3:dc:44:5a:be:
4b:a0:f3:aa:98:ab:ea:4d:78:a3:56:09:e4:c4:30:
69:e2:a2:3a:34:f6:c6:7f:35:6a:c7:0a:3a:3d:4c:
9e:b8:af:9b:83:20:e7:2a:e5:9b:58:d1:88:c4:96:
c2:d1:98:14:ca:69:0d:3d:3c:56:3f:a2:55:cb:28:
1a:9e:41:38:b1:69:6f:4e:3f:62:e8:33:e4:35:c0:
60:d6:6d:03:cf:5a:0b:cc:8a:ab:e0:2c:db:f9:3d:
b3:c1:5a:97:9d:6a:53:95:66:4d:37:61:01:4b:35:
5d:48:33:c9:f4:e4:22:e2:34:83:48:05:10:9b:b3:
c6:3c:ef:f1:e6:4b:b5:e2:3c:d7:54:19:26:0a:4b:
6e:11:1c:85:e2:41:a3:f7:69:0e:df:a8:61:93:d3:
ef:4b:ec:75:45:e0:c3:65:2d:19:d9:10:a4:c0:82:
12:67:c5:cd:d3:7d:13:c6:28:4f:4c:f0:dd:19:81:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:0F:B1:08:DE:A0:58:2B:01:24:2F:20:D4:89:27:BF:F5:14:42
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/a1UPsQjeoFgrASQvINSJJ7_1FEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:106::/48
2a01:e901:116::/48
2a01:e901:126::/48
2a01:e901:136::/48
2a01:e901:146::/48
2a01:e901:156::/48
Signature Algorithm: sha256WithRSAEncryption
5b:63:b5:3d:93:fa:36:85:08:31:57:f9:33:e2:d2:5d:a8:cd:
db:2d:8e:73:df:e7:a2:3f:2c:d3:13:0b:14:b0:28:f8:d1:21:
2a:02:4d:14:06:05:37:46:f5:ea:20:3f:54:1a:4e:b8:06:70:
8a:8a:8f:95:61:ef:67:b3:7c:f2:e3:20:94:7d:5a:ce:8c:0c:
6f:8b:26:9c:32:bc:3b:12:0a:53:6e:13:38:3c:55:15:d7:1b:
5b:37:96:40:08:56:b9:b8:47:be:2c:a8:97:97:c5:3c:6e:0a:
86:a3:c5:f5:6f:d0:63:87:06:ea:bf:76:1b:70:cc:ee:71:46:
0b:ca:19:0d:b7:6c:c3:1d:5b:0c:81:aa:31:e9:8b:b9:ed:15:
02:1a:3a:7e:02:61:36:a0:31:0f:70:ba:f3:45:63:42:a4:3c:
63:4e:6f:fe:50:b4:9a:ca:4c:02:0d:be:52:92:e5:17:c5:4b:
49:e9:70:3b:e2:9b:dc:94:93:03:d6:e7:bf:99:25:66:1b:25:
42:80:2f:a1:16:36:d2:81:54:8c:a6:04:22:b2:dd:ee:f4:0d:
fd:35:76:7e:cd:72:e5:a4:68:2e:5d:3f:c8:dc:92:55:23:77:
0f:74:fe:fe:a1:23:4f:f9:fd:44:61:27:ed:88:d3:e2:86:16:
83:5c:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:33 2025 by rpki-client