Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fqMjRcgFdc6K02p2yuxU2p2SqmE.roa
File: fqMjRcgFdc6K02p2yuxU2p2SqmE.roa (raw, json)
Hash identifier: T7cmt2jPz+E6ph+La+B7bw0DSEX7Lj1M4zh9nwsd1jw=
Subject key identifier: 7E:A3:23:45:C8:05:75:CE:8A:D3:6A:76:CA:EC:54:DA:9D:92:AA:61
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748303685BBD37913F73ACBEBAEA7ED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fqMjRcgFdc6K02p2yuxU2p2SqmE.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d06:66::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:36:85:bb:d3:79:13:f7:3a:cb:eb:ae:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea32345c80575ce8ad36a76caec54da9d92aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:34:75:eb:f3:e8:77:57:8a:52:fb:9c:1c:
53:23:6a:b4:83:53:bb:70:25:5c:23:80:d1:5f:ee:
a2:e1:93:50:39:65:e6:21:b0:5a:99:69:ae:c1:b2:
91:6b:e5:56:e6:ee:a7:61:1d:60:b1:f1:29:a4:27:
b7:fe:a3:da:be:d4:13:d3:b1:1b:bf:54:8c:8f:c7:
0c:20:82:f4:b0:19:0c:3d:90:cd:ba:17:c7:49:a1:
bb:09:f6:57:d5:2b:9a:bf:78:93:35:f3:5c:5e:e8:
58:3e:70:a6:bc:c7:e9:d0:00:00:4c:fa:d4:fd:4a:
c1:c1:6a:79:e3:c5:20:1e:da:b9:d2:ae:49:7d:49:
1f:ea:55:b3:2d:14:51:2e:92:06:b3:54:ab:cb:ef:
28:0a:0b:64:7e:80:3b:b7:5d:ca:0b:36:f1:5a:41:
fb:ad:66:5b:be:be:cb:24:8c:04:2c:3b:82:cd:a7:
e8:01:e4:3c:00:ab:89:ae:fb:1f:5b:46:9a:88:9e:
f2:72:33:c1:d0:b6:e2:39:0d:f2:a2:66:62:94:c9:
0e:0a:52:5b:42:fd:61:f6:80:b3:e1:12:ca:bb:f9:
18:c5:5e:74:44:2b:69:3c:b9:c3:5f:e0:9c:e0:9f:
44:2f:75:f4:72:f2:58:41:cc:98:f1:d1:12:e6:17:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:23:45:C8:05:75:CE:8A:D3:6A:76:CA:EC:54:DA:9D:92:AA:61
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fqMjRcgFdc6K02p2yuxU2p2SqmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:66::/48
Signature Algorithm: sha256WithRSAEncryption
4a:6f:0a:d2:7f:a8:21:b2:f1:f2:90:1c:58:6a:ca:60:e0:d8:
9d:bf:aa:16:ec:50:68:42:62:2d:2c:ef:fc:44:19:62:06:e6:
6a:22:60:f9:56:a7:53:c3:7f:56:41:99:8a:e0:8a:a8:7d:65:
43:fe:ca:2e:f2:76:3b:73:e5:9b:c6:b7:25:c9:64:a2:0a:76:
7b:c7:02:5a:f2:53:f6:82:b2:9c:4a:0f:76:03:d3:d8:ec:f5:
12:fe:ae:c7:42:17:f8:3a:39:4c:f0:29:1a:39:38:25:42:0c:
c6:9d:fe:88:3d:8e:e0:ff:aa:87:e5:76:c4:51:88:ed:65:dc:
d6:9e:44:3a:ac:3b:b7:ff:c2:e4:31:9d:63:e6:26:f4:5e:16:
91:25:07:08:05:ac:b0:c2:e1:ea:76:d3:a9:59:29:37:fd:99:
38:59:70:07:24:be:21:9d:11:3d:c8:86:fd:c4:00:b0:f6:49:
4a:0e:4d:0e:65:6d:65:a2:7f:63:b6:fe:18:53:7b:10:82:01:
1d:1d:c4:fc:46:6e:88:27:2d:b1:8e:5a:6b:8c:1c:d3:f3:c9:
14:ef:05:a8:44:2d:9c:cc:c2:85:e7:e8:50:7a:5e:bd:44:66:
ff:f7:c8:86:81:4a:60:20:ee:42:ce:e8:99:94:50:d2:60:2e:
5f:05:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:15 2025 by rpki-client