Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Ea5MWEUVN_bMAJWQV-J7fbi1_w.roa
File: 2Ea5MWEUVN_bMAJWQV-J7fbi1_w.roa (raw, json)
Hash identifier: 6PFVgp9Xjq8xLq1jDoizZUOfEn89GeA4Rm4Hrfty8OQ=
Subject key identifier: D8:46:B9:31:61:14:54:DF:DB:30:02:56:41:5F:89:ED:F6:E2:D7:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019542E5ACFABD6B6A9B017576B1B9E671E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Ea5MWEUVN_bMAJWQV-J7fbi1_w.roa
Signing time: Wed 26 Feb 2025 15:35:03 +0000
ROA not before: Wed 26 Feb 2025 15:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 2a0e:1a85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:e5:ac:fa:bd:6b:6a:9b:01:75:76:b1:b9:e6:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 26 15:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d846b931611454dfdb300256415f89edf6e2d7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:1f:5b:67:f1:18:2d:24:2a:53:53:2c:cd:
dd:05:c0:38:a4:3c:83:b4:ed:fd:ce:50:06:bc:d5:
f1:3e:51:90:df:7f:55:ed:df:11:c2:cd:dd:21:88:
18:55:88:0f:42:92:a8:a1:06:f6:46:d6:db:92:78:
f0:74:89:d1:ff:d9:80:d6:a0:e1:ea:15:36:31:da:
c2:14:74:ea:58:3a:11:c0:83:68:78:5f:f1:c2:43:
d9:ef:4a:d5:88:43:2a:a4:6d:53:c2:c0:cc:80:ca:
97:c0:ab:87:e3:34:9a:00:0d:91:cd:4f:bb:92:8d:
4f:1b:8b:4d:92:18:68:2e:08:18:9d:b2:f9:b1:fb:
64:ea:a2:5c:c0:96:80:05:50:6a:63:c4:22:49:a5:
f1:d6:81:2a:0c:bf:0c:70:df:ae:bd:1e:b8:ef:65:
7f:fb:40:2c:cd:77:da:18:57:10:4f:d8:3a:d2:35:
2f:1f:91:1f:aa:3d:c5:5f:d1:ac:1f:8a:ce:58:2d:
30:0d:4d:ce:13:38:e4:38:50:82:37:95:37:9d:bb:
58:d5:19:6b:46:4d:48:4e:a0:04:d3:ab:81:2c:09:
3c:ca:eb:54:89:ac:66:44:d7:14:e1:fb:15:70:56:
9a:19:e5:39:f6:07:25:13:9b:55:15:4c:c9:88:5a:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:46:B9:31:61:14:54:DF:DB:30:02:56:41:5F:89:ED:F6:E2:D7:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Ea5MWEUVN_bMAJWQV-J7fbi1_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a85::/32
Signature Algorithm: sha256WithRSAEncryption
0d:55:3b:b5:cf:3c:be:43:3e:f5:00:79:9a:b3:d3:47:ab:36:
97:f3:64:40:8a:b8:4c:b8:a2:b7:54:f6:fd:2b:29:f3:c0:ed:
0a:29:0d:03:a3:a6:b8:59:39:d3:a0:62:97:93:a9:32:e8:92:
d7:79:0a:d4:48:23:c1:ae:1b:c7:b6:a6:68:f8:ec:87:b3:ab:
33:3d:4c:02:83:1b:10:b6:28:e5:47:5b:44:4e:5f:e9:cb:68:
6f:be:f8:07:64:7c:2d:db:88:3c:55:6a:8e:75:6f:4a:27:f2:
36:d1:c0:56:8f:3a:c9:d3:39:2a:1c:8c:34:cc:8f:87:37:a7:
2e:2d:87:d5:4b:bc:79:81:83:e2:8a:15:85:df:9e:17:89:6b:
63:2e:1f:85:31:2f:5c:e4:9a:b4:e0:ed:64:36:17:47:83:b7:
9d:85:e8:0b:34:1c:b3:46:5b:0b:81:2b:25:90:fe:e8:3d:4a:
23:ab:d5:a8:c7:d3:bf:c4:7b:e2:f1:2d:6f:54:d6:3e:88:53:
a5:71:35:ab:29:37:6e:2e:73:85:7c:3a:a1:6c:5e:22:e1:25:
e5:a7:f4:da:5f:81:f1:5b:23:c5:7a:a8:29:7a:2a:16:88:f8:
1b:d4:72:7f:1f:42:99:66:1a:f1:e2:c5:e8:4d:b2:14:75:d1:
fd:82:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:04 2025 by rpki-client