Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/Dg4Wz05UDqeLv1PyRfUpLA9QJVA.roa
File: Dg4Wz05UDqeLv1PyRfUpLA9QJVA.roa (raw, json)
Hash identifier: HaXOK1ntc6EI3jVnoEeTGuYYbuJ+P4J1epo9z3iSY4U=
Subject key identifier: 0E:0E:16:CF:4E:54:0E:A7:8B:BF:53:F2:45:F5:29:2C:0F:50:25:50
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0197F503143C80FEA530A08442D81BCC216E
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/Dg4Wz05UDqeLv1PyRfUpLA9QJVA.roa
Signing time: Thu 10 Jul 2025 15:45:08 +0000
ROA not before: Thu 10 Jul 2025 15:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0a:bbc7::/32 maxlen: 32
2a0d:f646::/32 maxlen: 32
2a0e:9182::/32 maxlen: 32
2a11:31c7::/32 maxlen: 32
2a12:3141::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:03:14:3c:80:fe:a5:30:a0:84:42:d8:1b:cc:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jul 10 15:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e0e16cf4e540ea78bbf53f245f5292c0f502550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:d9:39:af:6b:da:98:b4:58:ac:76:4b:f6:
cc:24:2b:bb:82:96:f5:40:73:ed:df:e0:34:71:45:
57:e3:50:fb:1b:d4:91:33:32:20:4c:87:9e:7b:1c:
ab:77:17:7e:da:0f:c7:7a:92:7c:48:24:ae:4a:bf:
4d:7d:62:e4:46:dc:78:77:77:ce:d5:1e:68:6a:50:
95:1e:3a:b8:ba:7d:e5:73:77:95:f9:ef:74:a4:e9:
09:c4:e6:8b:4f:2b:54:16:6f:92:ed:2f:c7:62:3e:
0c:7e:f9:54:0f:8e:b0:c8:48:64:b6:54:ba:9e:38:
67:b5:76:4e:1a:56:04:d1:c5:57:05:0b:de:5e:66:
c8:ca:c9:af:25:14:17:4a:34:78:55:20:30:04:fb:
7a:ed:e2:94:07:89:a7:d9:54:2f:e8:9d:65:2b:33:
53:34:ea:de:e6:a7:34:3e:8c:50:38:5c:8d:11:b9:
7f:7b:e4:c0:42:b9:6c:b5:ea:ac:6e:25:2d:b6:fb:
ea:f4:47:ba:8b:32:aa:6d:03:54:2d:56:c8:42:01:
c6:8a:f1:c9:b1:a2:e1:98:71:3b:7b:f3:eb:e8:b5:
85:c3:59:d5:f9:02:d9:3a:e8:1b:42:f7:d2:ce:01:
d0:38:db:fa:c8:20:06:9c:14:e7:21:1c:70:9c:9a:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0E:16:CF:4E:54:0E:A7:8B:BF:53:F2:45:F5:29:2C:0F:50:25:50
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/Dg4Wz05UDqeLv1PyRfUpLA9QJVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:bbc7::/32
2a0d:f646::/32
2a0e:9182::/32
2a11:31c7::/32
2a12:3141::/32
Signature Algorithm: sha256WithRSAEncryption
6c:4a:1e:ea:2b:14:62:90:21:da:2c:f0:78:ba:4d:72:15:28:
b0:00:24:72:32:9f:7a:90:1e:c4:8b:0b:aa:56:e8:4b:c6:61:
d6:1a:4c:d6:a9:36:a8:6e:75:57:6b:19:72:98:9e:2b:8e:fe:
2d:c7:db:95:8a:0a:4c:5c:ae:35:91:ae:9f:79:33:25:08:00:
21:6d:73:23:1c:4f:8a:04:ae:0b:b6:b1:63:c2:c2:e0:70:4d:
92:92:37:66:7a:1a:eb:a9:54:41:73:fa:f4:09:57:00:b1:f2:
3b:1f:1c:95:63:3a:5c:b9:05:53:6c:ad:0d:35:64:b3:33:69:
34:e2:c9:b8:4a:42:14:1b:af:7f:7d:f3:68:e9:ba:36:3b:ba:
23:6f:24:d4:13:e6:cc:a7:61:28:46:41:0a:3b:59:f0:8f:3b:
b4:6b:0a:95:0b:3c:a2:b3:89:86:1d:dd:11:47:b3:1c:ad:c5:
40:47:a6:14:4d:90:d7:8b:4c:b9:b3:ae:c3:6c:38:c1:3d:66:
de:ab:13:ca:44:37:35:50:7f:b2:0a:d8:8d:b0:6e:bd:82:bc:
cc:f9:8a:f0:04:98:b2:55:41:23:7a:49:8a:b8:78:f1:ee:1d:
b0:c3:d0:ac:f9:38:ae:7d:25:13:25:4f:60:ee:ec:7e:d1:81:
2a:01:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:52:26 2025 by rpki-client