Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/sNX7m19Q4f93jZSLto3SXxcMlN0.roa
File: sNX7m19Q4f93jZSLto3SXxcMlN0.roa (raw, json)
Hash identifier: 6kJ1u/k/CP7HU6lSzylQyIDCN0aXiAlRkfuNvpisAHg=
Subject key identifier: B0:D5:FB:9B:5F:50:E1:FF:77:8D:94:8B:B6:8D:D2:5F:17:0C:94:DD
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0195290D27A035AA21969D7075FCEBDD5372
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/sNX7m19Q4f93jZSLto3SXxcMlN0.roa
Signing time: Fri 21 Feb 2025 15:08:02 +0000
ROA not before: Fri 21 Feb 2025 15:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395092
IP address blocks: 2a09:9444::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:0d:27:a0:35:aa:21:96:9d:70:75:fc:eb:dd:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Feb 21 15:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0d5fb9b5f50e1ff778d948bb68dd25f170c94dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:71:4d:c2:b0:52:6d:85:30:3d:fc:6d:b0:
f9:ca:77:50:ee:4b:64:d3:59:e9:50:2d:7e:71:11:
09:26:ae:c6:1d:6e:f5:fd:30:de:4d:68:6d:7b:58:
19:2d:0e:0c:b2:c8:2a:86:b2:36:b9:f4:40:7e:c2:
15:75:e7:68:67:a0:e1:1f:6c:9b:57:2d:21:e1:6d:
79:eb:7e:5a:88:a2:48:37:47:28:c2:d7:a1:bb:68:
f8:27:01:18:ef:88:79:cc:9f:cf:e6:93:af:19:b8:
52:dc:9b:a4:26:31:9d:78:0c:07:8d:a2:82:05:78:
d2:d3:f4:59:e4:fc:2a:95:50:57:e1:1d:53:89:63:
63:4f:a4:e4:75:a4:51:c7:47:fc:b7:32:81:b5:68:
83:5f:02:94:c6:1b:98:26:c3:41:0f:ce:9e:4e:a0:
d0:e5:c9:c9:2d:51:0d:dd:e6:f5:38:01:86:35:52:
54:88:ba:e2:27:96:2f:07:80:b7:d1:4c:68:be:8b:
21:16:fb:65:69:a5:e6:1b:e2:cc:a7:b9:72:f0:d1:
4c:39:2e:eb:1b:58:f5:ad:63:a8:7e:25:8c:ab:ba:
5a:42:2a:cd:a1:df:00:e2:5e:65:d4:3f:56:7e:81:
79:f2:8d:46:1c:51:e7:e0:cc:40:e4:d9:9c:33:15:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:FB:9B:5F:50:E1:FF:77:8D:94:8B:B6:8D:D2:5F:17:0C:94:DD
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/sNX7m19Q4f93jZSLto3SXxcMlN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9444::/32
Signature Algorithm: sha256WithRSAEncryption
c2:45:c9:4b:a1:bb:a1:7d:23:8e:63:11:97:89:df:fa:a0:17:
a4:be:b3:e5:f3:a3:67:6b:12:37:97:2e:16:a7:be:ae:2f:e6:
37:a6:02:04:ee:04:c1:28:77:fe:cb:2e:3f:cc:5a:be:38:7f:
fb:9e:3e:09:f0:f0:87:bb:0c:66:01:5e:51:ac:e4:e8:b0:90:
df:eb:42:be:61:02:a9:08:1a:d0:5c:15:69:3e:d7:b7:60:d7:
46:7b:58:fd:fa:5c:76:00:cf:a5:d8:03:50:c1:3f:e3:d7:fb:
77:fd:77:3d:61:c4:f4:fd:91:8f:13:b6:8f:c7:ab:58:67:9d:
1d:9e:2a:c6:83:a8:1b:ab:05:24:7e:63:4b:85:dc:c6:62:8e:
cf:46:f9:79:af:dd:a6:cf:6b:bd:b7:9a:fb:f1:17:af:bb:be:
ce:8c:08:5a:30:80:bd:67:35:35:89:8f:d2:05:52:f6:f4:82:
05:6e:42:5e:81:51:01:40:da:cb:f5:0e:88:01:f8:af:ff:b4:
bc:7e:f9:38:ed:24:5c:88:82:8b:93:1e:bb:07:b4:48:eb:e5:
12:40:90:a4:c7:41:1e:97:f8:da:ee:19:90:ef:2a:fd:cc:e8:
a9:ed:6f:aa:56:c7:9b:b4:97:81:74:bf:92:76:6d:77:93:3d:
0a:83:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:51 2025 by rpki-client