Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ewg9JrqWg8hhFVfijCy5TDGZ_qs.roa
File: Ewg9JrqWg8hhFVfijCy5TDGZ_qs.roa (raw, json)
Hash identifier: mwu1uN0XKJJxqdWtSHcsIhpfTrWSICHmn/D5WT0FhLk=
Subject key identifier: 13:08:3D:26:BA:96:83:C8:61:15:57:E2:8C:2C:B9:4C:31:99:FE:AB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019519824675040D1096B2E20E14B2817DEB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ewg9JrqWg8hhFVfijCy5TDGZ_qs.roa
Signing time: Tue 18 Feb 2025 14:42:02 +0000
ROA not before: Tue 18 Feb 2025 14:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133504
IP address blocks: 2a09:17c0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:82:46:75:04:0d:10:96:b2:e2:0e:14:b2:81:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 18 14:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13083d26ba9683c8611557e28c2cb94c3199feab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:52:61:2a:65:83:08:02:20:14:9f:6a:ee:
bb:b5:59:c1:f6:a2:97:0f:bb:18:50:91:5b:3d:b7:
1a:9b:16:04:8f:51:22:86:bf:63:68:7a:3e:79:70:
d8:a6:6f:b9:e0:41:49:64:81:49:34:ff:98:1c:12:
9c:f8:00:f3:76:48:36:25:63:f7:0e:73:3a:67:36:
0c:ce:47:c3:03:9d:68:c9:94:b1:28:e6:a9:35:5a:
95:a1:0a:b8:8c:09:67:14:4f:5f:0a:85:a3:79:15:
41:c8:d3:a8:95:58:07:d2:54:08:f3:c7:bc:99:e9:
61:1d:02:6e:2c:6f:6a:5a:fa:46:6e:14:f4:26:47:
7c:3f:14:30:1b:19:82:c6:bd:57:5f:11:37:11:18:
24:6c:e1:7c:05:0d:e4:6d:92:44:5f:1b:e1:a7:77:
8f:3e:1d:06:11:49:68:20:81:33:dc:67:a0:e7:0c:
9f:8a:b2:a5:b3:0c:26:cc:66:f9:5d:e3:36:91:c6:
e7:e9:3b:0e:78:13:33:7a:a5:22:5c:43:54:e6:c8:
69:db:30:66:f4:61:9a:37:a4:25:cf:89:d8:ef:10:
57:f3:a1:6e:d9:fd:c3:35:e2:bc:84:63:c4:63:7d:
f5:f6:68:77:93:5e:c3:a9:63:3d:3a:d1:b5:d0:38:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:3D:26:BA:96:83:C8:61:15:57:E2:8C:2C:B9:4C:31:99:FE:AB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ewg9JrqWg8hhFVfijCy5TDGZ_qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
bf:a5:16:46:f7:23:f1:2c:b7:12:46:1f:dd:97:2b:40:e8:47:
9e:2e:76:6e:37:e9:bd:02:ff:4d:8e:88:10:ee:2f:f7:13:5a:
a5:be:e0:f2:fc:03:66:e5:9a:f4:9b:ba:bb:0c:6b:8a:ea:2c:
97:cf:58:ed:70:ef:ae:15:8f:4a:f6:18:fc:a3:cf:d6:ad:ee:
3d:6d:a3:76:12:1a:d0:df:10:62:fa:fb:54:a9:06:ca:25:1c:
50:bb:e7:59:46:35:76:31:1e:d3:e8:dc:dc:82:1c:1c:67:13:
d9:3c:8c:5c:45:9a:6c:f1:ae:73:94:6e:d8:ed:b4:40:75:55:
f3:f4:95:2b:a9:d7:82:7e:e9:93:88:7c:0c:0b:4c:43:6d:e3:
79:bf:99:53:c7:bf:ae:f5:35:73:b7:4a:3a:2c:0f:cb:29:55:
77:0e:5e:79:43:d2:cf:10:dc:09:37:00:7a:ec:ff:3c:58:ca:
8c:a5:bd:73:a4:8e:88:d6:9c:d9:5c:18:f3:36:33:b2:58:c6:
5c:c6:24:ce:07:eb:17:d1:a6:d1:c0:55:d3:b0:14:08:7c:30:
fe:af:dd:5e:5c:15:4c:91:df:c8:af:5d:63:a6:72:6a:35:58:
e1:28:85:60:89:51:6c:14:1e:e9:e2:8e:02:1a:70:ea:b3:83:
5d:c1:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:38 2025 by rpki-client