Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_dDLroWRZnu4duygZ_3X2JpXBd8.roa
File: _dDLroWRZnu4duygZ_3X2JpXBd8.roa (raw, json)
Hash identifier: n0MYgtCgRO3I+67nJukpoH3TzpHFt82Hl/WZpuUZdoo=
Subject key identifier: FD:D0:CB:AE:85:91:66:7B:B8:76:EC:A0:67:FD:D7:D8:9A:57:05:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195DCFDB9115B6A55ADF96CFA4E89299165
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_dDLroWRZnu4duygZ_3X2JpXBd8.roa
Signing time: Fri 28 Mar 2025 13:42:50 +0000
ROA not before: Fri 28 Mar 2025 13:42:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213542
IP address blocks: 2a09:17c0:8743::/48 maxlen: 48
2a0e:f600::/48 maxlen: 48
2a0f:1581:100::/48 maxlen: 48
2a0f:3d80:49ff::/48 maxlen: 48
2a0f:df45:25b::/48 maxlen: 48
2a0f:df45:fe5e::/48 maxlen: 48
2a0f:e7c3:1::/48 maxlen: 48
2a0f:ea43:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:fd:b9:11:5b:6a:55:ad:f9:6c:fa:4e:89:29:91:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 28 13:42:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdd0cbae8591667bb876eca067fdd7d89a5705df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:9b:a6:27:3e:64:98:4b:3a:f2:02:14:a7:
c8:6a:ec:66:9e:60:8e:12:a3:3f:bb:15:d6:89:e0:
c3:b6:7a:6e:df:29:ef:be:2e:76:67:a2:b1:a1:84:
6d:0d:22:27:6a:40:7b:41:a5:5b:02:7b:1a:36:f0:
b2:b5:b8:90:d6:fd:1c:f6:5b:ba:14:85:84:9f:f4:
47:bc:35:a6:e4:52:58:95:79:72:0e:ad:cc:e9:95:
49:24:87:88:03:3f:51:db:10:ed:71:d8:32:c5:24:
ba:50:9d:ce:f9:a0:ab:53:07:30:dc:03:07:51:74:
4c:0d:11:7d:9d:25:63:6c:b3:3b:da:86:f7:0e:f9:
e7:a5:22:c9:82:ad:57:6f:ab:58:7b:a5:80:20:9f:
e0:fb:bf:5e:bd:ee:63:29:88:22:5f:20:a1:bb:f6:
a7:2b:02:0c:ab:da:23:62:fb:f5:82:85:d3:93:3e:
1b:ac:b8:69:8f:8b:19:44:4b:47:43:89:a4:a4:cc:
4b:cd:4f:13:e5:02:2d:5f:27:cd:f8:ce:7c:f6:e7:
85:03:cd:18:c0:39:4c:c2:ef:93:84:72:59:cc:8a:
d9:78:55:4c:71:4b:15:4f:ac:08:5a:7a:30:51:9e:
28:af:e1:51:58:41:bb:70:77:ff:32:48:03:90:f4:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:CB:AE:85:91:66:7B:B8:76:EC:A0:67:FD:D7:D8:9A:57:05:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_dDLroWRZnu4duygZ_3X2JpXBd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:8743::/48
2a0e:f600::/48
2a0f:1581:100::/48
2a0f:3d80:49ff::/48
2a0f:df45:25b::/48
2a0f:df45:fe5e::/48
2a0f:e7c3:1::/48
2a0f:ea43:1::/48
Signature Algorithm: sha256WithRSAEncryption
51:27:76:00:aa:04:d6:60:c5:7a:68:4a:93:a3:44:51:1d:89:
2f:d4:45:5d:bb:a4:83:78:97:6f:25:80:24:87:fd:b0:07:4c:
7c:84:b9:74:b4:68:c7:e4:d4:3c:ac:2b:ec:26:8b:32:0c:e8:
13:ff:93:79:f8:5a:53:16:ad:aa:af:0b:55:57:27:46:f3:bb:
2e:82:92:1a:54:1b:8d:90:8f:86:ae:a1:1c:ee:3d:4e:67:e2:
ac:8d:e4:8f:61:d0:cd:74:e0:a6:ff:88:66:91:11:39:55:4c:
b8:c3:a8:01:67:97:cf:5d:c1:24:ec:7f:ef:4b:b4:f3:73:d4:
bb:b2:91:b7:8d:10:b8:b3:77:bf:32:33:6f:07:ad:3c:8d:66:
64:99:82:78:ba:af:1a:1c:2b:f5:44:a8:14:3c:20:0e:ff:42:
9c:0c:c6:2e:02:d7:11:7c:d8:e2:a3:44:0a:55:25:89:66:21:
ae:de:86:ed:99:66:0f:73:a0:0d:f3:e8:e1:00:bd:5e:d5:a6:
a4:06:37:73:7b:02:1c:75:83:95:4e:1d:30:25:cb:43:62:af:
d5:35:81:21:a1:d5:99:41:d4:b9:40:c0:68:34:bc:a4:ac:f7:
a9:3e:39:dc:5f:b3:85:cf:53:60:8e:f8:d3:5b:29:45:c9:26:
ba:24:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:57:18 2025 by rpki-client