Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/KsFB3Vc_46zW_AnaEtVV-Ztj5_0.roa
File: KsFB3Vc_46zW_AnaEtVV-Ztj5_0.roa (raw, json)
Hash identifier: xOYRHt3eudSGXtrvM5CYfjlh9fIuF8u/9Be3OkqWUsE=
Subject key identifier: 2A:C1:41:DD:57:3F:E3:AC:D6:FC:09:DA:12:D5:55:F9:9B:63:E7:FD
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0196FEA603FB3BCA0E23204B5B07A3D6E45F
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/KsFB3Vc_46zW_AnaEtVV-Ztj5_0.roa
Signing time: Fri 23 May 2025 19:36:54 +0000
ROA not before: Fri 23 May 2025 19:36:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a06:1306::/32 maxlen: 32
2a0c:9480::/32 maxlen: 32
2a11:3c45::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:a6:03:fb:3b:ca:0e:23:20:4b:5b:07:a3:d6:e4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 23 19:36:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac141dd573fe3acd6fc09da12d555f99b63e7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:75:25:5c:b1:b6:f4:5c:81:5d:f8:87:9b:
36:d9:86:dd:8f:b5:c2:6c:ce:69:17:a4:f7:d2:92:
07:c8:cf:93:21:f6:ef:56:4a:52:bf:03:6a:a6:c7:
0b:42:d4:95:ef:1a:00:29:68:1f:57:6c:2a:cc:75:
ca:c4:50:6e:e5:6c:d2:26:59:46:03:0d:6c:ab:f9:
fe:df:60:76:54:79:82:8d:1b:bd:47:8f:5d:6c:3e:
59:ab:83:cb:3e:f6:dd:90:1c:81:ce:cf:0d:ea:fa:
ca:10:32:eb:3e:8d:fe:df:9e:3e:bb:da:40:6d:ba:
d6:d7:1b:70:11:ba:24:79:a2:92:ac:d7:c2:5a:37:
5b:76:79:32:19:44:a5:48:62:d5:b4:83:91:d0:2b:
9e:73:9f:02:ac:2f:4b:7a:46:72:52:8e:c6:2a:c2:
2c:8a:c3:c6:04:58:64:ba:f8:13:c4:ff:51:35:76:
eb:6a:14:9e:45:12:fc:a0:2a:9c:24:bb:22:7f:f6:
63:03:b4:2e:d7:58:df:ad:e4:5f:71:47:52:ad:4f:
e7:c1:02:cc:5f:78:a9:8a:a7:d2:44:80:29:a5:5d:
e0:37:67:11:65:1c:d5:3f:3c:74:03:f5:58:60:6f:
eb:49:52:05:09:99:91:f6:27:f1:0a:34:c8:f8:34:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:41:DD:57:3F:E3:AC:D6:FC:09:DA:12:D5:55:F9:9B:63:E7:FD
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/KsFB3Vc_46zW_AnaEtVV-Ztj5_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1306::/32
2a0c:9480::/32
2a11:3c45::/32
Signature Algorithm: sha256WithRSAEncryption
40:22:b1:c9:5b:1b:d8:da:ac:f0:5d:c4:04:41:95:31:50:bf:
4f:68:bd:17:52:29:b9:5e:3f:e4:32:fe:c5:7a:91:20:4b:96:
13:13:14:21:40:89:69:d9:09:cd:f3:13:80:61:b0:5d:65:d8:
30:42:4b:d8:b7:c8:d8:e8:75:4e:3a:4b:ab:a4:a7:85:c5:ef:
6c:1f:05:83:f2:43:79:22:13:a8:72:a3:33:71:0a:60:78:83:
25:19:39:5a:de:f9:dd:7c:45:ec:6f:a7:1f:dc:a2:c7:bf:bb:
51:7c:6d:ad:9c:1b:a5:5b:a2:d9:a7:01:50:a9:b9:09:dc:ca:
5c:68:da:31:cc:a5:8a:e5:3f:4a:4b:bf:73:0b:6f:8c:e5:77:
99:94:3d:5f:85:80:70:3b:5f:ea:67:32:68:ac:0f:4e:a5:b9:
e8:d9:cc:df:e9:c7:a6:9a:cf:7a:4b:da:0f:0a:20:c2:41:61:
7e:c1:89:57:ff:02:5f:7d:3b:20:e8:a6:4c:19:c1:24:79:d7:
9c:9e:bc:c2:d9:94:94:43:15:1c:54:ad:14:f9:fd:21:5b:5a:
bf:e6:7d:af:8b:5a:7b:f6:b3:3e:8b:49:0b:be:25:c6:6a:ae:
45:63:8c:74:a9:dc:8c:74:6f:58:db:22:aa:79:d9:0a:d1:a4:
83:54:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:18:56 2025 by rpki-client