Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/By5FRMpWjFHE9CR_qRuFmke36Gs.roa
File: By5FRMpWjFHE9CR_qRuFmke36Gs.roa (raw, json)
Hash identifier: 72a5uuidJC+NIs7Z/vnlpKC3oH6rs6skkv29YrXoqP8=
Subject key identifier: 07:2E:45:44:CA:56:8C:51:C4:F4:24:7F:A9:1B:85:9A:47:B7:E8:6B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01949900F023544085BE074E1DAA9B4B5E61
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/By5FRMpWjFHE9CR_qRuFmke36Gs.roa
Signing time: Fri 24 Jan 2025 15:49:22 +0000
ROA not before: Fri 24 Jan 2025 15:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 2a0f:bc02::/32 maxlen: 32
2a0f:bc03::/32 maxlen: 32
2a0f:bc04::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a0f:bc06::/32 maxlen: 32
2a0f:bc07::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:00:f0:23:54:40:85:be:07:4e:1d:aa:9b:4b:5e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 24 15:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=072e4544ca568c51c4f4247fa91b859a47b7e86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:a3:dc:3f:6e:bc:9c:24:ba:6a:90:f7:bc:
05:b3:f8:e2:87:46:c4:77:5d:c7:1e:2e:63:59:30:
a1:f5:c9:38:b0:20:a4:28:4f:3e:50:61:c8:d5:d6:
ff:5b:17:15:a7:62:c0:6d:d4:49:c0:85:7f:88:df:
76:e2:02:7a:87:85:23:6a:08:57:19:3c:9e:1b:d7:
a5:b0:c1:8b:e1:45:17:8d:26:40:a6:ef:71:3f:8c:
09:87:d1:15:25:9d:14:6d:9f:87:f9:a2:8f:26:11:
88:51:c8:af:7b:41:1a:26:fa:e0:77:90:a1:e0:b0:
ec:34:4e:d7:ac:70:43:64:6e:57:f8:ae:82:53:37:
e0:2c:d0:3c:82:81:56:4b:ec:b2:8d:6e:ac:1b:63:
87:3c:a0:0e:dd:2d:89:85:88:f4:ee:de:be:4b:65:
02:dd:a6:61:ba:16:9d:f4:df:99:01:b6:d7:2b:64:
62:57:8b:41:cc:07:0c:7b:77:ed:c1:77:bc:b1:f9:
ac:44:ea:94:7f:e6:ac:4e:57:c5:fb:30:f5:32:24:
74:1a:9b:d1:12:5d:79:cb:e7:4c:c2:30:11:a0:1b:
5d:82:f4:05:c8:c2:57:a9:72:32:f2:50:23:72:92:
5b:16:be:38:f5:c0:a2:fe:5b:7d:48:3b:4e:31:71:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:45:44:CA:56:8C:51:C4:F4:24:7F:A9:1B:85:9A:47:B7:E8:6B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/By5FRMpWjFHE9CR_qRuFmke36Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc02::-2a0f:bc07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:b3:85:6b:96:30:f7:01:34:a3:c9:97:7c:74:ae:a2:e3:2d:
e0:b9:90:88:be:c4:60:1f:78:9c:cf:6f:eb:d4:f1:6e:22:13:
ea:7b:32:11:b1:35:49:b3:c2:99:8e:c7:44:34:2a:ff:be:ed:
a8:d2:ac:ca:1e:c8:12:76:8f:9f:77:fd:ab:24:1f:19:bd:b4:
c9:b5:00:44:3a:78:aa:ee:e2:d0:e1:6e:14:4e:85:0e:1a:60:
49:a3:a1:ec:bc:28:34:ee:ec:0f:8d:59:a9:ff:d7:49:9d:4a:
a3:1b:6c:55:53:97:dd:41:4f:28:04:10:ee:13:1b:c5:48:85:
62:6d:dd:67:37:75:2b:86:4c:f3:97:ad:4f:09:a1:3d:3f:53:
fb:e6:1a:1a:a0:30:d7:82:6e:21:2f:22:3e:cc:ff:55:5d:6a:
06:5b:03:aa:46:fa:bc:84:84:00:f7:f8:69:b0:ad:89:4f:0d:
bc:27:51:17:0a:e4:8c:69:8d:e1:2d:1e:49:d1:2a:c3:81:2c:
b1:21:05:7e:71:71:29:8d:c5:cc:97:40:fa:25:e4:f6:b4:48:
ab:19:ce:cb:5d:ea:ae:fa:51:a4:e2:c8:4e:c7:08:a6:b4:2c:
50:51:21:55:bf:18:da:f3:1a:6d:64:c8:a6:c5:cd:dc:2c:6c:
cc:b1:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:39 2025 by rpki-client