Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa
File: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (raw, json)
Hash identifier: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=
Subject key identifier: 6F:7E:F2:03:4B:C1:C3:DC:FD:35:73:A3:3F:79:E0:38:2F:A7:B1:D4
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 019570A1B1D768372FEE3CEC5031E8625DAC
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa
Signing time: Fri 07 Mar 2025 12:43:19 +0000
ROA not before: Fri 07 Mar 2025 12:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211979
IP address blocks: 2a01:ffc7:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:a1:b1:d7:68:37:2f:ee:3c:ec:50:31:e8:62:5d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Mar 7 12:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f7ef2034bc1c3dcfd3573a33f79e0382fa7b1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:75:c8:53:2c:3d:88:66:50:34:42:01:2f:
e0:97:87:fd:cf:58:2d:8f:bf:9b:ed:ee:74:ae:88:
ca:80:e9:f6:6d:e8:09:3a:37:23:68:c6:fe:f6:73:
10:f5:39:03:4f:35:04:80:6f:b7:94:05:8c:70:33:
da:63:0b:85:e3:b6:2d:1f:fc:8a:56:b7:f1:e7:fb:
9d:b4:5b:cb:a0:bb:cf:7a:f6:a2:bd:92:26:eb:f1:
07:e5:d1:bf:33:13:a5:f0:89:10:a0:25:f4:b8:eb:
6c:ea:3d:cd:a7:ea:69:fc:ac:16:de:bf:0b:1a:a2:
35:93:8b:5e:a3:3a:09:c2:05:53:28:e2:cc:6b:86:
4b:b1:59:bc:c3:3a:bf:08:0b:66:21:51:c4:88:01:
f9:cb:5c:08:f3:da:81:4a:a1:16:4a:52:6f:eb:08:
4a:83:dd:6c:a5:14:7e:65:c3:44:a8:81:c7:85:bf:
5b:c3:2e:c2:5b:00:d7:f4:8d:8e:77:b1:b1:20:e0:
83:de:97:65:03:7d:47:8e:14:60:c3:01:7d:9f:cd:
6c:13:44:31:8f:7e:b6:49:d5:3b:cd:df:b8:36:19:
97:c2:0f:1f:37:d1:49:02:d1:40:d7:c5:79:25:37:
79:af:42:d3:08:5b:77:87:30:d6:3d:68:8d:a2:19:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7E:F2:03:4B:C1:C3:DC:FD:35:73:A3:3F:79:E0:38:2F:A7:B1:D4
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc7:100::/40
Signature Algorithm: sha256WithRSAEncryption
4d:02:ae:3b:90:03:79:66:06:14:90:8f:e8:8a:d4:78:12:41:
64:5d:b4:fe:67:52:f7:e7:50:69:b1:70:c6:22:49:07:fb:b8:
73:51:6b:d0:7c:4c:55:c8:5f:a6:3d:8c:c6:90:d6:38:06:ed:
41:27:f1:82:8b:46:91:50:b1:e4:ba:be:19:26:3a:f7:d6:08:
fd:21:c9:dd:1f:90:a5:e0:bd:41:8a:80:69:13:3f:ea:3d:dd:
48:7a:6a:fe:5b:7b:88:66:00:bd:95:8f:25:63:c2:3b:f7:59:
c7:6b:d6:2e:74:c7:87:2d:1e:f7:43:a2:a3:e5:ad:f4:9e:af:
7d:96:a5:a9:5a:4b:00:d8:bf:a6:3f:74:78:ba:c0:cc:82:2a:
ee:17:cb:47:14:5a:8a:9d:14:53:23:2d:3a:bd:2a:a2:38:7a:
ca:53:55:77:1e:6f:8d:20:cc:20:8e:ae:2d:4a:06:43:d6:80:
fc:5d:49:b8:9c:56:f1:7d:52:24:05:0b:7b:88:f9:2f:a4:23:
01:5b:e8:87:89:49:4a:20:35:ee:b2:c1:f6:48:c2:b4:b6:97:
ac:bb:a5:78:07:2f:f5:31:c0:75:88:f7:ed:6b:a6:f9:9d:4e:
cf:7d:e6:70:7f:a0:8b:85:2e:c7:0c:51:f8:9a:96:32:44:49:
a6:82:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:36:12 2025 by rpki-client