Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7lQVo-xdDJdsreH_gNFNs71XYy0.roa
File: 7lQVo-xdDJdsreH_gNFNs71XYy0.roa (raw, json)
Hash identifier: 7Cfst5dinCXgNVe5fEGMKC3NZRbO9bDOpGHPqvPVOzQ=
Subject key identifier: EE:54:15:A3:EC:5D:0C:97:6C:AD:E1:FF:80:D1:4D:B3:BD:57:63:2D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195718693E38F2F7A9E29C6AEA0E0E75CA1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7lQVo-xdDJdsreH_gNFNs71XYy0.roa
Signing time: Fri 07 Mar 2025 16:53:19 +0000
ROA not before: Fri 07 Mar 2025 16:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 2a0a:2d04:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:86:93:e3:8f:2f:7a:9e:29:c6:ae:a0:e0:e7:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 7 16:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee5415a3ec5d0c976cade1ff80d14db3bd57632d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:fd:68:51:07:0f:fc:5b:8b:34:f2:d4:36:
ce:5d:1c:52:2f:50:e7:9c:b5:ba:54:12:7d:67:45:
cd:6e:0e:43:7a:11:ee:80:17:1f:91:10:e7:f0:1a:
6d:f5:28:06:13:cc:35:ad:c1:ef:dc:df:3e:d3:e6:
1c:d9:d9:d7:40:a2:7e:4c:43:df:93:5b:22:fe:3e:
88:f3:28:8e:3a:cc:c4:fd:b6:02:2e:9d:08:d8:97:
0b:60:1b:a1:4b:b0:c7:31:09:e5:9c:81:cc:05:7f:
6d:8b:28:41:1e:7d:37:41:59:61:f0:a2:f2:09:cd:
04:c6:98:b6:6c:89:c6:08:8d:58:24:90:a0:fe:fb:
e8:29:7c:f0:3a:56:b1:5c:bc:1e:7a:1c:13:68:0e:
30:86:98:3d:f0:8b:04:4a:bf:0c:51:0c:0f:3d:e6:
3a:f7:b2:ce:28:c4:fc:44:7c:e7:7c:92:74:5a:ca:
04:c5:26:35:83:42:89:fd:c8:9a:84:8e:f3:eb:8c:
a1:90:5c:c6:3d:cb:4f:96:26:95:53:c3:30:45:27:
67:ac:07:8a:80:fa:bb:73:22:a2:f9:39:db:bb:c4:
5f:b1:91:cf:40:45:72:c7:99:7f:5d:e6:4a:28:39:
e0:c1:06:2a:69:6b:38:88:aa:eb:b0:a5:bb:9b:47:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:54:15:A3:EC:5D:0C:97:6C:AD:E1:FF:80:D1:4D:B3:BD:57:63:2D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7lQVo-xdDJdsreH_gNFNs71XYy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d04:f::/48
Signature Algorithm: sha256WithRSAEncryption
2c:b6:62:4c:9a:2e:ab:09:39:84:b4:d2:32:2a:f2:c8:58:18:
b4:3b:d5:bb:ac:fa:60:e5:e6:32:21:be:03:6e:1c:84:a1:d9:
48:18:85:99:60:d3:0d:6a:74:a6:6c:07:0a:f5:ec:77:9e:b8:
fc:48:1f:e0:27:b1:c8:60:73:da:21:c8:18:2b:e7:95:22:40:
73:25:ee:9f:8c:75:fe:fc:bd:10:85:c7:59:a4:3c:8d:8b:19:
5d:58:f2:4a:63:a2:e5:62:2a:f1:f6:69:3b:30:5f:bf:57:80:
c1:14:72:63:dd:23:23:85:62:c7:bf:4b:f4:60:ce:3c:95:f3:
6f:70:8a:f9:47:9d:f5:bb:0d:bc:2c:86:6e:b3:db:04:65:a0:
1d:d5:7f:ed:43:89:7e:df:a9:ce:3a:2d:e5:2f:d6:8f:7c:47:
62:97:d7:ae:f5:4c:13:46:52:63:79:04:31:22:f8:11:82:e6:
f0:ee:72:f3:2f:79:26:ad:81:c4:6e:cb:73:26:ef:00:20:92:
6f:66:65:34:43:54:a7:21:44:48:85:fc:82:34:6b:67:d7:c9:
c0:2c:bb:05:fe:f7:bd:25:f0:99:21:b1:57:99:1e:90:bb:03:
3d:d1:03:8d:6a:2c:34:cb:c2:2e:3a:fd:f5:f5:70:ce:5e:65:
8e:38:ae:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZVxhpPjjy96ninGrqDg51yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzA3MTY1MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTU0MTVhM2VjNWQwYzk3NmNhZGUxZmY4MGQxNGRiM2JkNTc2MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIn9aFEHD/xbizTy1DbOXRxSL1Dn
nLW6VBJ9Z0XNbg5DehHugBcfkRDn8Bpt9SgGE8w1rcHv3N8+0+Yc2dnXQKJ+TEPf
k1si/j6I8yiOOszE/bYCLp0I2JcLYBuhS7DHMQnlnIHMBX9tiyhBHn03QVlh8KLy
Cc0Expi2bInGCI1YJJCg/vvoKXzwOlaxXLweehwTaA4whpg98IsESr8MUQwPPeY6
97LOKMT8RHznfJJ0WsoExSY1g0KJ/ciahI7z64yhkFzGPctPliaVU8MwRSdnrAeK
gPq7cyKi+Tnbu8RfsZHPQEVyx5l/XeZKKDngwQYqaWs4iKrrsKW7m0dXgQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO5UFaPsXQyXbK3h/4DRTbO9V2MtMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvN2xRVm8teGRESmRzcmVIX2dORk5zNzFYWXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgotBAAP
MA0GCSqGSIb3DQEBCwUAA4IBAQAstmJMmi6rCTmEtNIyKvLIWBi0O9W7rPpg5eYy
Ib4DbhyEodlIGIWZYNMNanSmbAcK9ex3nrj8SB/gJ7HIYHPaIcgYK+eVIkBzJe6f
jHX+/L0QhcdZpDyNixldWPJKY6LlYirx9mk7MF+/V4DBFHJj3SMjhWLHv0v0YM48
lfNvcIr5R531uw28LIZus9sEZaAd1X/tQ4l+36nOOi3lL9aPfEdil9eu9UwTRlJj
eQQxIvgRgubw7nLzL3kmrYHEbstzJu8AIJJvZmU0Q1SnIURIhfyCNGtn18nALLsF
/ve9JfCZIbFXmR6QuwM90QONaiw0y8IuOv319XDOXmWOOK7o
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:02 2025 by rpki-client