Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/DsA-jtkO3pzOg4ueOSor8NsIqbw.roa
File: DsA-jtkO3pzOg4ueOSor8NsIqbw.roa (raw, json)
Hash identifier: gqvvQDhY24kpqMRsyFYYiu1HmZeSaePcuUTmj7NtuDA=
Subject key identifier: 0E:C0:3E:8E:D9:0E:DE:9C:CE:83:8B:9E:39:2A:2B:F0:DB:08:A9:BC
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01847D5D184509D01FCA52F1EEEAE6581BE4
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/DsA-jtkO3pzOg4ueOSor8NsIqbw.roa
Signing time: Tue 15 Nov 2022 22:16:03 +0000
ROA not before: Tue 15 Nov 2022 22:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47869
IP address blocks: 2a0e:1c80:d::/48 maxlen: 48
2a0e:1c80:b::/48 maxlen: 48
2a0e:1c80:4::/48 maxlen: 48
2a0e:1c80:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7d:5d:18:45:09:d0:1f:ca:52:f1:ee:ea:e6:58:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Nov 15 22:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ec03e8ed90ede9cce838b9e392a2bf0db08a9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:c5:5a:dd:73:3d:81:af:e3:27:36:b8:7c:
c8:97:2a:07:20:6c:07:1d:bc:c3:78:6e:e6:62:0f:
0b:56:21:3a:7a:83:55:f6:39:0f:60:5f:40:b5:0a:
8c:7a:0a:ff:3f:b8:5e:21:07:61:59:ce:a5:43:06:
75:9f:97:47:ea:f6:e0:7b:d9:f6:4a:6b:e9:0c:ca:
69:74:a4:f5:f0:69:4b:00:73:91:5c:ab:27:b1:68:
9c:1a:a5:10:f1:78:c7:b6:23:be:4d:ab:77:00:99:
8a:2b:93:fc:90:55:09:48:2d:20:43:9a:2f:86:43:
58:b3:02:2b:d7:00:ad:49:e3:03:4a:d8:6a:ff:04:
ea:93:bc:d4:44:d1:63:f7:ce:eb:c5:0d:11:2f:d1:
3c:75:b4:bb:07:d1:93:6b:90:56:ad:28:df:0f:d8:
1f:fe:dc:14:5c:68:7a:f2:3b:2b:5d:4c:91:61:9d:
fb:c9:5b:11:5b:a0:80:f8:99:f6:13:a1:42:3b:60:
6d:d4:98:6f:1c:ab:da:71:3c:5b:f6:f4:c5:2b:29:
bf:8d:b9:5b:e5:17:a1:f0:ab:5d:13:89:21:00:34:
89:3f:06:09:a4:bc:41:80:9c:23:aa:1e:61:4b:d7:
11:5b:9b:75:7e:c5:b5:62:ed:e6:b8:c9:d4:3d:fe:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:3E:8E:D9:0E:DE:9C:CE:83:8B:9E:39:2A:2B:F0:DB:08:A9:BC
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/DsA-jtkO3pzOg4ueOSor8NsIqbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:4::/48
2a0e:1c80:b::-2a0e:1c80:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:23:06:c9:a8:41:cd:78:38:c2:f6:5d:96:78:2c:99:c7:86:
d6:a9:51:18:6a:b6:09:22:06:de:34:20:f9:c5:7d:7e:db:08:
72:ab:90:d0:85:f3:fa:7b:94:ac:78:00:58:5c:64:35:a4:0b:
3c:92:54:88:90:19:b0:b8:58:fa:c5:2e:e8:88:eb:d8:17:d6:
95:2a:f1:15:04:d2:11:84:38:71:85:4e:de:e4:5e:79:de:f2:
e1:8f:ad:34:25:60:cd:58:b7:57:6d:b0:1f:13:a6:d5:d6:f3:
03:66:d1:63:3c:28:19:bc:ce:69:0d:49:eb:10:de:d8:a8:85:
b3:41:6d:e1:4c:0d:71:bf:aa:09:8c:56:3d:c6:03:3b:7a:19:
cf:f9:3d:bc:6f:e0:9f:fc:70:74:91:e1:22:57:fe:74:6e:53:
98:7a:6a:c5:5d:93:0b:62:a8:02:2b:60:e1:fa:ee:ef:72:4f:
a2:b2:e4:0a:23:1e:06:36:ee:96:ca:ca:7f:33:7a:4c:bc:ee:
c6:29:d8:22:68:e2:1c:f2:58:c8:60:0c:95:e1:d8:45:50:03:
b9:19:f8:eb:d2:72:b4:8d:23:5e:56:da:c9:3b:d2:38:5f:f2:
d4:b5:f9:2c:52:78:f3:ca:57:f1:cf:6f:61:91:3c:31:ba:a3:
5d:e6:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:13 2025 by rpki-client