Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/4i6nLpfX6JvU8NqRGqusOI4IfG8.roa
File: 4i6nLpfX6JvU8NqRGqusOI4IfG8.roa (raw, json)
Hash identifier: uMg+nlYi+oxajABSJ6L6Wv5ePTF8g/2fXERYsmeytEg=
Subject key identifier: E2:2E:A7:2E:97:D7:E8:9B:D4:F0:DA:91:1A:AB:AC:38:8E:08:7C:6F
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0196E9F417BAAECB3142A478FB29F367345A
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/4i6nLpfX6JvU8NqRGqusOI4IfG8.roa
Signing time: Mon 19 May 2025 19:10:10 +0000
ROA not before: Mon 19 May 2025 19:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0d:3047::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:f4:17:ba:ae:cb:31:42:a4:78:fb:29:f3:67:34:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: May 19 19:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e22ea72e97d7e89bd4f0da911aabac388e087c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:03:0d:c7:8c:79:32:50:e2:37:ee:f3:e2:
63:22:24:7d:39:ff:97:3a:a0:83:68:f1:8c:1f:bd:
0e:61:c2:e7:21:41:44:f3:f3:ce:35:a4:19:e0:13:
30:43:5d:98:75:9c:7b:a8:de:d5:6b:05:7b:a8:0e:
ba:b0:11:c8:33:f9:e8:3c:ed:77:b8:3b:63:e2:20:
c6:ed:be:2b:3c:23:3a:3e:31:8f:a0:36:dc:70:36:
7d:dd:1b:49:26:3f:b0:9d:2b:13:98:dd:da:ce:9d:
e9:e1:3a:6f:9b:79:c9:37:9c:d9:9d:fa:b6:34:46:
2b:08:c8:15:97:0b:d4:af:0f:eb:73:1d:76:5e:08:
9d:94:56:13:1d:dc:fe:04:51:07:9c:3f:d3:b0:d5:
61:82:1d:b5:cf:10:d6:44:a6:79:6a:e9:e3:e0:22:
c9:06:77:b7:53:6e:f4:da:57:5e:c6:fd:1a:3d:0e:
b2:41:4d:84:9a:21:c6:b5:0c:5b:62:32:e9:cd:43:
a5:22:7c:39:cb:03:e9:8a:5d:44:df:b0:18:2f:3a:
0a:bc:d0:8f:93:8a:92:5e:b2:a0:ea:19:e1:d8:aa:
c0:16:0f:36:66:a9:70:27:86:8a:66:a3:49:98:e2:
81:c2:98:74:9f:88:dc:e0:89:35:67:c4:e3:d1:3d:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:A7:2E:97:D7:E8:9B:D4:F0:DA:91:1A:AB:AC:38:8E:08:7C:6F
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/4i6nLpfX6JvU8NqRGqusOI4IfG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3047::/32
Signature Algorithm: sha256WithRSAEncryption
56:c1:9b:86:1a:30:a9:35:75:99:a4:62:a9:d8:10:c5:58:75:
a2:ba:75:b4:96:ab:cb:e5:f9:70:01:d3:61:f8:6d:cf:0b:1b:
6d:93:7b:99:f5:69:ea:be:b8:c7:a0:28:ec:9a:7b:a6:67:d1:
d3:42:f7:b3:06:18:8e:93:cb:48:1a:0e:7b:2c:84:7c:96:a3:
b2:fd:5b:bc:15:b3:8e:82:17:cf:87:15:55:67:4c:17:13:b5:
43:ef:e6:38:73:e1:41:df:57:8b:64:50:54:94:13:74:a9:11:
81:e2:18:13:cf:20:b8:35:39:80:c6:ad:15:f0:0f:0e:09:f1:
b8:39:14:58:10:37:20:b6:3c:8a:46:86:b3:66:25:0b:15:5f:
c7:16:0d:fc:4c:cc:e1:2c:8a:0d:4e:aa:63:ef:2e:d3:e1:7f:
64:a5:2e:ef:39:9d:90:3a:04:00:5f:3c:80:29:7c:1c:0c:57:
e1:ed:fe:de:ff:d0:8f:b7:5f:b3:00:9a:6f:31:74:d4:9d:f9:
88:48:14:73:84:d5:ce:01:b2:ce:96:70:65:8e:8f:f8:4a:02:
76:65:b3:d9:7d:39:0a:38:f0:d8:6e:6a:5a:c8:f7:52:df:57:
6d:a7:47:30:13:c8:d1:a9:63:85:2c:50:e6:fe:6e:f4:52:ab:
6f:2d:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:41:23 2025 by rpki-client