Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/7lLNSdRgFkagzNZ_PxDt07LNcFU.roa
File: 7lLNSdRgFkagzNZ_PxDt07LNcFU.roa (raw, json)
Hash identifier: zb0uWUvhf0Y2RjUoPc33KFhra8h65X89U7INDqQICpc=
Subject key identifier: EE:52:CD:49:D4:60:16:46:A0:CC:D6:7F:3F:10:ED:D3:B2:CD:70:55
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 01953D525C3E33C1AC296D27BAB13B2F1E36
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/7lLNSdRgFkagzNZ_PxDt07LNcFU.roa
Signing time: Tue 25 Feb 2025 13:36:02 +0000
ROA not before: Tue 25 Feb 2025 13:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64286
IP address blocks: 2a01:e100::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:52:5c:3e:33:c1:ac:29:6d:27:ba:b1:3b:2f:1e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Feb 25 13:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee52cd49d4601646a0ccd67f3f10edd3b2cd7055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:b0:e7:5c:7d:1d:6a:05:5f:ea:3a:02:3e:
37:74:5f:21:82:20:9d:39:36:b7:16:a0:42:c2:33:
53:58:7b:8a:d9:9d:94:1e:41:cc:1e:1e:5c:50:dd:
66:39:c5:46:f7:24:a5:64:77:a7:29:42:0b:23:39:
86:bf:5c:74:21:0b:ec:0e:8e:d7:35:6e:24:d9:29:
b7:4e:fb:97:6d:15:4d:fa:0d:f1:9c:31:48:97:db:
b8:ca:cc:3d:b1:39:15:7b:83:a5:c6:69:e8:9c:b5:
0e:74:2f:a9:b6:bf:76:58:c7:23:bc:d5:87:55:0b:
74:a1:8d:34:93:78:c6:41:b4:b8:68:0d:11:74:14:
4e:94:d0:77:1e:de:6b:38:07:0a:29:68:88:fb:fb:
90:67:76:bc:97:71:bd:94:eb:41:32:51:26:10:f9:
cb:a9:95:67:2a:50:24:e5:59:9f:a5:88:b1:e2:a2:
9c:5f:a0:80:b5:70:13:7e:ef:ab:47:7b:5f:51:a8:
5a:2e:20:aa:3c:25:b5:40:b9:a4:2c:e0:86:ad:05:
3a:16:90:3f:8a:8c:9e:e1:c7:5e:21:e6:92:cf:79:
0f:2b:29:04:4a:d9:0b:ed:22:cd:f7:f2:24:10:9a:
09:77:4b:a0:c8:4d:b7:6f:b7:51:13:6b:c2:68:ae:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:CD:49:D4:60:16:46:A0:CC:D6:7F:3F:10:ED:D3:B2:CD:70:55
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/7lLNSdRgFkagzNZ_PxDt07LNcFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e100::/29
Signature Algorithm: sha256WithRSAEncryption
9b:a7:5f:cd:ce:6d:14:2e:2b:2f:fc:68:4e:63:ed:fa:e7:ba:
22:55:12:75:54:27:36:24:9e:20:90:f4:c2:a0:3e:4e:ca:1f:
4e:92:7b:ea:12:d3:7b:c8:68:56:80:52:38:ab:15:4c:df:96:
54:14:30:af:3e:b5:d8:cd:ef:57:66:0c:84:13:42:0c:2b:40:
8c:9c:b0:d2:59:f9:27:e8:6a:2b:06:ae:b7:29:96:8b:59:59:
fd:72:52:1c:dc:d8:c6:a6:df:65:a9:b3:ca:32:29:ea:5a:9f:
57:4c:fd:a6:06:e9:74:07:9b:25:8a:4e:55:97:c4:25:17:b2:
dc:b4:f7:0e:dd:f5:d9:5a:c8:08:e0:f1:e0:32:59:21:36:0b:
81:43:c1:9c:2f:24:59:ab:61:37:d2:fb:e5:d6:81:fc:43:ff:
92:92:d2:7a:47:c2:94:1b:16:7a:53:9e:f1:06:1f:d3:8f:94:
b1:b6:3c:69:c9:15:d2:13:03:fb:6e:16:ac:f6:1d:07:56:a1:
4b:84:3c:4f:ca:1b:4b:8f:d6:66:e3:1f:ad:f9:36:3e:ee:f1:
63:53:d9:44:3a:90:af:46:c4:1c:49:1c:3c:9a:f5:e3:2c:45:
c7:f7:50:3b:0d:72:c4:03:08:d3:52:ad:19:1d:eb:e5:a6:0f:
a7:6d:79:3f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZU9Ulw+M8GsKW0nurE7Lx42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj
ZGUzYWEwHhcNMjUwMjI1MTMzNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTUyY2Q0OWQ0NjAxNjQ2YTBjY2Q2N2YzZjEwZWRkM2IyY2Q3MDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgmw51x9HWoFX+o6Aj43dF8hgiCd
OTa3FqBCwjNTWHuK2Z2UHkHMHh5cUN1mOcVG9ySlZHenKUILIzmGv1x0IQvsDo7X
NW4k2Sm3TvuXbRVN+g3xnDFIl9u4ysw9sTkVe4OlxmnonLUOdC+ptr92WMcjvNWH
VQt0oY00k3jGQbS4aA0RdBROlNB3Ht5rOAcKKWiI+/uQZ3a8l3G9lOtBMlEmEPnL
qZVnKlAk5VmfpYix4qKcX6CAtXATfu+rR3tfUahaLiCqPCW1QLmkLOCGrQU6FpA/
ioye4cdeIeaSz3kPKykEStkL7SLN9/IkEJoJd0ugyE23b7dRE2vCaK4JdwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFO5SzUnUYBZGoMzWfz8Q7dOyzXBVMB8GA1UdIwQY
MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt
NzMyMjcyMDIzZWMyLzEvN2xMTlNkUmdGa2Fnek5aX1B4RHQwN0xOY0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy
LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHhADAN
BgkqhkiG9w0BAQsFAAOCAQEAm6dfzc5tFC4rL/xoTmPt+ue6IlUSdVQnNiSeIJD0
wqA+TsofTpJ76hLTe8hoVoBSOKsVTN+WVBQwrz612M3vV2YMhBNCDCtAjJyw0ln5
J+hqKwautymWi1lZ/XJSHNzYxqbfZamzyjIp6lqfV0z9pgbpdAebJYpOVZfEJRey
3LT3Dt312VrICODx4DJZITYLgUPBnC8kWathN9L75daB/EP/kpLSekfClBsWelOe
8QYf04+UsbY8ackV0hMD+24WrPYdB1ahS4Q8T8obS4/WZuMfrfk2Pu7xY1PZRDqQ
r0bEHEkcPJr14yxFx/dQOw1yxAMI01KtGR3r5aYPp215Pw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:12 2025 by rpki-client