Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7cJg8Ph0dEiKQwTguF2ZDYk6SU8.roa
File: 7cJg8Ph0dEiKQwTguF2ZDYk6SU8.roa (raw, json)
Hash identifier: WnsWABajGb2GRvOY5kbzPd2NdYcP4O2JHQU4vUlyulg=
Subject key identifier: ED:C2:60:F0:F8:74:74:48:8A:43:04:E0:B8:5D:99:0D:89:3A:49:4F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194883D9CFD3D6054ECB2B405E9B72D43D6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7cJg8Ph0dEiKQwTguF2ZDYk6SU8.roa
Signing time: Tue 21 Jan 2025 09:42:06 +0000
ROA not before: Tue 21 Jan 2025 09:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:dfc0::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:3d:9c:fd:3d:60:54:ec:b2:b4:05:e9:b7:2d:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 21 09:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc260f0f87474488a4304e0b85d990d893a494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:42:17:a1:e3:51:16:6c:71:cd:4e:39:80:
82:ad:f8:18:78:89:e5:a6:a6:32:32:47:4c:7c:b6:
62:ff:2d:49:7b:14:64:31:9d:b3:a5:43:2e:65:cc:
03:c0:98:2d:3f:cd:5d:32:aa:da:a8:93:82:41:5e:
e0:79:5f:da:32:2e:7c:e7:36:38:8d:c0:f7:3d:f1:
d1:e1:96:5c:4c:85:9a:96:28:65:f4:7f:e4:f6:50:
37:2f:ad:8d:b8:b9:8c:00:a1:c3:28:41:9c:ac:55:
31:7c:97:f4:be:5f:04:9a:df:56:b0:3c:c4:04:07:
c6:b9:ee:47:ee:81:b1:bf:b6:6d:fe:26:d0:be:6e:
aa:cf:c2:6c:bb:52:91:4c:42:2d:44:dd:70:ad:98:
25:fd:a7:09:48:8f:29:6c:e6:ec:b1:d6:b4:d2:12:
a2:6b:54:99:0c:85:3c:1f:21:7e:8b:23:8b:e7:f3:
4d:43:f0:cd:f2:2e:db:8d:3b:8b:7a:7d:4c:16:59:
00:f6:29:f9:7e:7b:32:19:f1:93:37:2f:4b:30:1f:
fa:53:2a:be:6f:5b:a9:5a:2f:78:bf:d7:99:1c:e7:
d1:59:ce:98:5e:03:e1:c0:ba:70:21:f3:7a:24:b1:
f6:df:72:26:e7:12:70:5b:f8:3a:9a:5c:72:02:79:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:60:F0:F8:74:74:48:8A:43:04:E0:B8:5D:99:0D:89:3A:49:4F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7cJg8Ph0dEiKQwTguF2ZDYk6SU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:dfc0::/29
2a07:95c0::/29
2a0d:1140::/29
2a0d:a9c0::/29
2a0f:16c0::/29
2a0f:1a40::/29
2a0f:27c0::/29
2a0f:2e40::/29
2a0f:3740::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:3640::/29
2a10:6300::/29
2a10:6900::/29
2a11:e580::/29
2a11:f040::/29
2a12:cd00::/29
2a13:200::/29
2a13:cc0::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
20:76:85:70:b7:66:9a:60:19:3c:cf:64:cb:76:1f:f9:a4:9d:
53:b9:8f:18:63:e1:29:c8:28:df:b9:c0:7b:3c:66:c5:21:6b:
d1:c0:34:9d:f3:ee:f2:68:d2:bd:22:92:09:5a:a8:6b:3b:93:
53:28:d5:2b:21:b9:93:07:ec:be:99:b8:5b:a5:ab:fc:44:fe:
bf:8d:6f:5e:de:01:b9:51:db:a6:7b:9e:aa:82:23:79:c0:de:
75:ad:6b:90:d8:99:cf:32:c6:a1:20:57:2a:96:05:bd:3e:f3:
d7:5a:8f:e2:a6:10:02:81:e8:97:26:21:6a:ff:ae:c3:af:7a:
5f:13:9b:56:74:e0:b2:ec:4f:88:a6:1f:49:3f:ab:04:79:d5:
a8:6a:51:88:1a:42:78:eb:1e:1a:9b:59:76:44:2f:1c:2f:1e:
ca:b1:53:57:d5:c4:fa:97:51:94:14:9b:1f:ae:f0:e7:ab:4c:
ad:46:20:6c:63:87:6d:32:f1:2b:d6:53:cc:33:42:1a:ab:2a:
55:e1:57:ea:13:25:6b:c8:70:5b:da:a9:d5:bb:fa:04:ff:0a:
0d:c3:07:38:a0:e6:e1:f0:52:01:18:9c:2b:ff:55:e5:8c:b3:
42:a5:f3:b5:4d:13:e7:7c:23:33:a6:3a:bb:a8:14:ae:4a:e5:
a3:88:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:04:43 2025 by rpki-client