Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aRf-9Cc1fdzL7NpUwOhcbWwpjlg.roa
File: aRf-9Cc1fdzL7NpUwOhcbWwpjlg.roa (raw, json)
Hash identifier: XkUb4XSTdy3i2pAb2KN0Fx1YBIPNCUupgi9/7cd6a0c=
Subject key identifier: 69:17:FE:F4:27:35:7D:DC:CB:EC:DA:54:C0:E8:5C:6D:6C:29:8E:58
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195CE16B69CC38723CAE267B62A309BDF1D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aRf-9Cc1fdzL7NpUwOhcbWwpjlg.roa
Signing time: Tue 25 Mar 2025 16:15:49 +0000
ROA not before: Tue 25 Mar 2025 16:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214773
IP address blocks: 2a05:b900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:16:b6:9c:c3:87:23:ca:e2:67:b6:2a:30:9b:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 16:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6917fef427357ddccbecda54c0e85c6d6c298e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:65:92:51:fd:3a:c7:37:2d:05:ea:7a:0b:
ec:63:7a:1a:f3:50:a5:8d:45:04:77:85:82:9f:22:
d7:bc:76:de:3d:ef:09:cc:76:4b:ce:78:0d:e4:b7:
4c:36:47:1e:48:b4:77:19:9f:d7:df:8b:6d:50:f2:
12:92:21:29:c9:67:73:98:b6:93:e2:50:63:2d:32:
ac:0f:ad:fd:26:c3:c0:22:49:2f:f5:e0:5d:7c:08:
51:29:50:da:1d:55:1e:4e:44:73:c2:e3:5f:f7:27:
a6:d4:8b:17:bd:70:fe:47:96:bc:75:b1:63:1e:f6:
4b:3a:ca:3d:0c:b2:50:19:50:39:4c:96:5e:e4:f7:
cc:98:27:bf:c9:8a:84:30:94:51:57:5c:65:67:0e:
15:39:54:13:79:d7:c5:46:58:cc:99:03:60:0a:14:
16:54:78:ab:f8:a7:68:e7:8a:6b:32:80:3e:40:89:
b1:66:dc:de:1a:f0:bb:43:9c:09:bc:1b:f7:b8:9e:
7c:51:75:4a:9d:df:4e:53:56:86:28:52:e5:11:c4:
0a:2b:46:2e:43:a6:30:2a:28:0d:ab:62:a6:92:00:
b0:5d:3d:5f:ca:61:eb:f2:8e:5c:62:ca:8c:7b:de:
01:04:5a:b7:f5:73:af:65:31:bc:52:24:7f:d3:e8:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:FE:F4:27:35:7D:DC:CB:EC:DA:54:C0:E8:5C:6D:6C:29:8E:58
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aRf-9Cc1fdzL7NpUwOhcbWwpjlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b900::/29
Signature Algorithm: sha256WithRSAEncryption
7c:d6:51:f6:59:2c:f8:23:cd:a5:c5:31:6e:1d:3c:a7:20:2d:
b8:16:c9:01:ba:66:96:7e:01:15:bd:56:87:5c:8b:a5:77:1b:
66:61:20:5e:59:31:86:f7:ce:8a:ae:7c:eb:af:89:4d:21:c2:
19:f5:52:bc:f3:63:34:6e:fd:67:a4:03:21:68:87:63:97:2f:
1b:95:35:fa:e9:42:43:af:30:27:9f:bd:6c:ad:2e:f7:0a:a9:
87:d2:e6:63:3b:02:2c:a9:ef:df:08:cd:b3:50:10:73:f2:74:
41:a7:d2:b5:25:54:73:ce:d1:a4:19:f6:e7:5f:5d:df:9b:af:
38:fe:9c:10:bc:48:11:0b:fb:c3:56:45:3d:f1:47:6f:9f:e8:
1d:65:c7:31:af:ee:12:6e:49:fc:cd:2f:83:8e:0f:10:49:ca:
54:4f:5d:96:36:4c:9e:73:70:9a:1f:9c:8c:c2:73:ec:d9:61:
a7:2b:7c:e0:b5:4f:c6:ff:0b:7f:fb:8b:b1:12:8e:fc:d4:d5:
88:f0:ec:02:fd:f3:88:5f:fe:c8:e8:d6:72:19:2d:61:46:c6:
4f:b9:b4:4f:7c:21:d6:97:fa:5f:31:4d:53:da:55:62:c2:ac:
4e:a6:59:4e:ab:ef:f9:1f:5d:08:97:76:21:27:ff:d9:27:89:
71:4e:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:31 2025 by rpki-client