Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/70DaS-BciC84KwV_rHo58wHYy90.roa
File: 70DaS-BciC84KwV_rHo58wHYy90.roa (raw, json)
Hash identifier: d7KK6DkbioaeDPL6eqmMpDylv+b0J27tBYF931yhubc=
Subject key identifier: EF:40:DA:4B:E0:5C:88:2F:38:2B:05:7F:AC:7A:39:F3:01:D8:CB:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195866600B352A308A1C1EDE930BBB94B7C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/70DaS-BciC84KwV_rHo58wHYy90.roa
Signing time: Tue 11 Mar 2025 18:09:46 +0000
ROA not before: Tue 11 Mar 2025 18:09:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:d540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:66:00:b3:52:a3:08:a1:c1:ed:e9:30:bb:b9:4b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 11 18:09:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef40da4be05c882f382b057fac7a39f301d8cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:bf:e4:de:60:20:43:2c:ae:18:c3:41:3e:
9b:91:b2:a6:e0:a3:a4:9c:72:b1:4a:54:a7:b8:d1:
69:6b:eb:9b:89:66:02:f5:2e:85:f8:86:be:c7:97:
98:bd:a0:83:5a:73:42:57:d3:bb:45:6a:15:bd:c0:
41:46:c8:3b:15:e3:7b:95:2a:dd:32:97:19:f8:21:
51:1a:4e:69:90:69:35:91:c9:b6:96:ee:d4:5c:e1:
67:40:d1:b6:ca:7d:2f:56:b5:ad:f6:02:49:5c:58:
f0:6b:96:f1:0c:b5:58:08:10:84:d2:59:56:12:a1:
8f:d5:0d:0e:f4:40:5a:04:a2:f7:52:7c:c9:91:76:
75:f1:80:37:26:35:33:be:d7:67:a8:ae:29:53:31:
fc:7c:cf:2f:94:17:a7:f1:c0:d6:6b:68:b4:79:bc:
7e:de:0a:e0:31:0e:10:59:fc:bc:01:7b:e9:6e:3a:
ba:07:6a:3c:60:c8:6f:69:e8:a1:27:63:53:c5:b0:
93:07:47:f5:62:76:4e:92:4f:f8:2f:8d:ed:35:50:
69:66:e5:60:9b:49:77:25:1c:a3:35:c3:e3:49:4b:
fb:20:05:75:ed:9d:10:43:11:60:12:5b:f8:fe:20:
23:10:aa:d0:32:e9:47:94:59:9c:94:47:35:44:33:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:DA:4B:E0:5C:88:2F:38:2B:05:7F:AC:7A:39:F3:01:D8:CB:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/70DaS-BciC84KwV_rHo58wHYy90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
b5:32:3e:4c:f9:f1:27:8d:50:fe:c3:c7:10:cf:76:3b:56:a5:
b3:5a:48:3f:8e:b5:94:e4:4b:ab:b1:32:ed:66:b9:66:e6:42:
73:90:31:2d:c2:0f:83:7b:39:9d:5d:03:ea:bd:c1:45:9f:02:
e3:af:6e:34:c4:d7:7f:ec:a5:76:72:fc:79:98:f9:67:88:32:
ba:5b:27:7c:03:85:61:11:c2:06:91:88:14:5c:d4:f9:68:bc:
42:90:a4:0e:b3:3b:db:c0:e5:5b:00:8e:ee:25:c2:df:ef:28:
89:99:54:d9:09:fb:c0:8d:69:1e:b6:fc:3a:2f:1b:cb:3f:bf:
01:9d:ff:0a:e7:d2:24:e6:0d:b6:0c:50:2b:96:16:9a:9a:2e:
af:d8:19:16:3f:0c:83:9c:a0:32:86:8d:d2:11:bb:17:58:c7:
38:74:48:ee:45:b6:ea:6d:bf:67:31:06:74:fc:70:e8:d2:29:
07:ee:e2:bd:94:e0:96:17:08:cf:96:11:00:b4:b3:2a:6c:02:
3d:59:68:eb:68:0c:01:31:03:fd:a3:6d:ab:2a:73:5a:7f:a3:
ba:25:ef:3c:36:c5:26:e6:98:33:08:68:f7:0b:b2:4d:cb:04:
99:e4:6e:32:57:cf:f6:1f:56:b2:f6:54:13:cf:83:80:47:1d:
64:8e:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:44 2025 by rpki-client