Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/DcXT5PdUyax0oaqGWbX4UKFiLWk.roa
File: DcXT5PdUyax0oaqGWbX4UKFiLWk.roa (raw, json)
Hash identifier: ZIZzJyE7LrMmek7EG4ktXQJMPW6ozDQhDirvvk58udo=
Subject key identifier: 0D:C5:D3:E4:F7:54:C9:AC:74:A1:AA:86:59:B5:F8:50:A1:62:2D:69
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01971D3E59C07136C2BCAC1CD4E99CED6AB3
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/DcXT5PdUyax0oaqGWbX4UKFiLWk.roa
Signing time: Thu 29 May 2025 18:11:54 +0000
ROA not before: Thu 29 May 2025 18:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a06:1302::/32 maxlen: 32
2a0d:cdc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:3e:59:c0:71:36:c2:bc:ac:1c:d4:e9:9c:ed:6a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 29 18:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dc5d3e4f754c9ac74a1aa8659b5f850a1622d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:0a:d5:c9:e0:d3:1a:1a:54:90:b8:48:25:
ce:ba:74:68:fd:7a:93:59:11:d3:d7:76:ce:b8:2c:
a9:46:2f:07:e0:3e:3e:4d:80:86:d3:3b:d0:1a:c3:
c0:0c:88:5f:c0:2c:aa:92:ef:36:a8:7d:36:85:c3:
18:c2:ad:c1:39:ba:79:c4:6b:1f:0d:47:8c:00:d4:
3b:59:bc:79:9e:1b:69:da:a7:03:9e:2b:5e:79:a8:
d8:4d:b1:cc:75:3e:0a:e9:c1:f4:04:9f:58:49:f8:
94:cc:ea:c8:a5:38:1c:ee:e4:f8:f6:a7:99:1e:67:
39:21:d0:78:80:ba:eb:92:b3:0b:c8:4b:f3:07:b8:
2c:56:7f:89:d5:4e:83:43:15:ee:ae:98:06:57:0f:
ef:04:bc:d3:19:2e:36:9c:98:79:f6:23:01:c1:b9:
28:ff:a6:60:cd:c9:60:98:7b:91:1d:48:d2:ee:f0:
68:7a:11:f7:ad:08:d7:47:03:98:06:7b:d3:7f:c4:
f2:64:5f:15:6a:9a:ba:e4:4f:b2:7c:9f:f5:23:d7:
56:7b:eb:5c:8c:ba:ac:24:53:08:43:22:a2:d2:29:
61:4f:3f:9c:99:5b:9a:96:3d:51:5a:0a:3a:b1:71:
6e:77:e5:68:68:a5:36:65:c1:a8:7e:88:59:ee:ee:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C5:D3:E4:F7:54:C9:AC:74:A1:AA:86:59:B5:F8:50:A1:62:2D:69
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/DcXT5PdUyax0oaqGWbX4UKFiLWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1302::/32
2a0d:cdc0::/32
Signature Algorithm: sha256WithRSAEncryption
c2:00:85:e2:55:67:cf:22:07:f2:38:62:67:0d:89:22:1f:53:
83:a0:17:f5:07:14:45:b2:9f:fe:03:53:4c:05:0c:b9:d1:96:
5a:16:58:97:db:66:26:43:ca:7b:40:ed:ab:9f:ae:a4:b1:98:
ee:1a:f8:69:25:ad:88:fd:43:b4:cc:ab:50:7c:41:96:04:9d:
c7:27:91:c3:e2:66:4e:75:6f:c5:e8:07:02:a7:b5:3c:37:15:
42:2f:ab:06:15:ba:59:94:c2:84:d0:74:1a:02:00:b7:c9:7f:
14:e2:f2:78:f6:11:da:6e:c2:b5:a1:d7:a5:1f:e8:24:05:b5:
27:1b:9e:ed:ff:d1:2b:99:91:a5:31:25:77:a9:10:2f:52:08:
8c:a8:95:6a:74:d6:a2:ca:46:47:19:6f:a9:82:6c:7a:b8:93:
55:8d:e3:37:1e:63:42:59:8b:47:68:05:46:0e:f0:03:56:31:
05:ab:d2:18:38:d1:d7:39:65:7f:c6:11:de:bf:69:1b:c0:03:
8c:9a:d7:5a:36:15:4f:b5:ad:96:97:d5:98:2f:1c:49:31:44:
a3:2c:c0:31:52:e9:5c:5d:8d:18:fe:08:73:0b:f8:97:84:69:
2d:37:a3:14:23:99:24:d1:05:36:6a:28:08:2b:71:bb:91:51:
21:9b:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:08 2025 by rpki-client