Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/7m3f_aXH4ZnbrMfEgoQuGtWC_5Q.roa
File: 7m3f_aXH4ZnbrMfEgoQuGtWC_5Q.roa (raw, json)
Hash identifier: Kwl92muIHAbtSw8EikignqsJn5+/9EOFMEkzTDjKEuw=
Subject key identifier: EE:6D:DF:FD:A5:C7:E1:99:DB:AC:C7:C4:82:84:2E:1A:D5:82:FF:94
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C214F6
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/7m3f_aXH4ZnbrMfEgoQuGtWC_5Q.roa
Signing time: Sat 01 Jan 2022 13:07:38 +0000
ROA not before: Sat 01 Jan 2022 13:07:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 2a0e:1c80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12719350 (0xc214f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee6ddffda5c7e199dbacc7c482842e1ad582ff94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:3c:80:9c:c2:fe:e5:cf:cc:08:85:d4:ca:
e5:a6:aa:81:69:90:e5:ca:e2:0c:a1:f2:99:98:ad:
0f:da:22:00:2e:d1:4c:ff:a1:37:69:5b:26:e5:4c:
c1:84:24:c6:fe:95:69:22:06:e6:9c:bf:5c:d0:92:
87:63:0d:a6:f7:5e:08:a5:aa:22:97:39:c1:7b:60:
7e:1c:f8:45:ea:14:48:d9:85:4f:c5:b0:51:fc:65:
ef:2c:db:0a:65:47:e5:fb:cb:b6:37:cf:93:fa:ed:
56:3a:1a:c1:be:89:4a:a7:62:a3:5b:60:72:f0:6c:
25:35:6f:28:2b:40:aa:83:c8:b1:40:53:35:2f:04:
ec:f5:6e:eb:99:94:3e:76:52:91:54:f4:62:3a:66:
a6:d4:9b:ee:1d:29:8a:54:d5:83:30:56:55:ef:5c:
0e:4b:b2:9f:ec:78:b3:bb:ed:18:36:a2:36:c1:13:
83:7b:89:73:af:60:d7:81:c1:7d:c5:9f:8a:63:b5:
ce:8a:13:dc:88:36:5b:cd:ca:13:d9:54:8d:a6:fe:
de:49:2f:d5:bd:e2:17:53:1d:ed:bd:c2:49:6e:ec:
f2:f9:05:c6:8d:f9:95:51:2a:40:ef:4b:e0:78:da:
d2:bb:0e:f2:ec:4d:5a:1d:96:ce:9b:60:e8:bc:76:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6D:DF:FD:A5:C7:E1:99:DB:AC:C7:C4:82:84:2E:1A:D5:82:FF:94
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/7m3f_aXH4ZnbrMfEgoQuGtWC_5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:3::/48
Signature Algorithm: sha256WithRSAEncryption
07:b1:05:b2:a9:c5:a2:f8:bc:05:32:a2:5c:2f:b2:c5:03:8c:
0d:36:3f:68:bf:ee:5a:e0:35:3c:6a:75:24:06:a4:dc:cc:a9:
e5:0d:11:92:41:92:f5:69:49:8d:99:fd:e8:44:3b:4e:08:ba:
0c:ab:9f:ad:f7:4d:fa:cc:5a:53:c0:03:32:97:3b:17:49:34:
e6:cd:96:7b:7c:7e:18:c8:aa:bb:23:e0:68:6b:d9:b7:ac:82:
9d:71:61:d0:71:49:a3:b1:9c:ec:14:df:00:6a:8b:40:01:06:
52:23:74:6a:91:23:b1:e6:66:99:26:b7:57:67:de:0b:9d:5f:
36:1e:b9:3d:be:65:13:c4:50:77:5d:be:3e:6b:be:cd:69:b3:
f7:32:2d:b8:29:11:f8:7f:85:fe:22:c4:6d:fd:e3:52:18:85:
b0:68:03:b6:db:96:ef:0e:7e:29:10:3c:f0:a2:d1:6f:d4:90:
99:0a:0c:b4:16:ab:0f:9b:e4:ab:66:10:22:90:53:a0:8f:11:
0b:a5:29:80:7c:e0:4a:a7:0a:c5:7e:90:47:d6:e5:f0:57:c3:
21:9f:c5:5b:98:23:21:b5:16:7e:ea:16:d9:57:18:03:f7:9b:
09:71:4f:b1:7d:8d:b6:06:12:e0:e8:d7:6d:7b:6e:71:a5:a9:
f5:39:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:07 2025 by rpki-client