Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/QyrGx0xmRVoWI-PtW9eZMIaVonY.roa
File: QyrGx0xmRVoWI-PtW9eZMIaVonY.roa (raw, json)
Hash identifier: r2a1QZACNhWKfloXyiDIl1flW+rL8ylaIHjc8g+iLzE=
Subject key identifier: 43:2A:C6:C7:4C:66:45:5A:16:23:E3:ED:5B:D7:99:30:86:95:A2:76
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019717F2743B23BB85AE175DECA0C1FC043A
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/QyrGx0xmRVoWI-PtW9eZMIaVonY.roa
Signing time: Wed 28 May 2025 17:30:54 +0000
ROA not before: Wed 28 May 2025 17:30:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a06:1306::/32 maxlen: 32
2a0c:9480::/32 maxlen: 32
2a0e:7f07::/32 maxlen: 32
2a0f:9d00::/32 maxlen: 32
2a11:3c45::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:f2:74:3b:23:bb:85:ae:17:5d:ec:a0:c1:fc:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 28 17:30:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=432ac6c74c66455a1623e3ed5bd799308695a276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:31:ee:b9:04:db:68:3b:4e:e1:d1:b2:d9:
d9:f7:a8:c8:83:77:c7:21:6f:7a:39:37:44:6a:5a:
56:ee:32:0c:95:51:47:98:4f:e3:c8:a9:54:ab:b6:
68:ba:d7:b9:cd:87:e3:53:18:3a:7a:61:4d:df:20:
be:78:4b:75:60:ad:9a:96:3a:24:db:ce:80:ed:d0:
12:b8:57:eb:f9:be:88:0b:2a:e5:28:18:c8:3d:ec:
20:de:d2:52:30:a1:59:d4:18:5b:73:78:98:06:b6:
30:d9:a2:88:cb:6e:38:87:c6:39:98:50:a8:fe:84:
89:33:db:97:69:de:c0:e0:9e:de:8e:a2:98:0a:67:
6a:55:ba:d4:92:91:28:68:b0:7d:90:63:1c:b1:95:
9a:13:0e:c1:d8:a1:fe:a1:a6:63:fc:27:37:e5:5b:
1f:a3:1e:f5:37:c7:5f:82:5c:5b:23:a6:3f:f4:17:
a6:fc:54:d3:20:7f:9c:90:65:04:40:0c:4d:ba:9d:
0c:e4:9d:65:ae:2d:73:00:93:b5:d9:a8:dd:bb:f3:
dd:7d:b0:e4:0d:f7:6f:c6:af:8e:5f:a9:d4:ee:ae:
2f:94:75:ea:ee:2e:f4:9e:6f:64:22:d9:e7:49:c9:
a5:43:a5:7f:1c:eb:80:6d:73:30:37:78:ce:71:98:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:C6:C7:4C:66:45:5A:16:23:E3:ED:5B:D7:99:30:86:95:A2:76
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/QyrGx0xmRVoWI-PtW9eZMIaVonY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1306::/32
2a0c:9480::/32
2a0e:7f07::/32
2a0f:9d00::/32
2a11:3c45::/32
Signature Algorithm: sha256WithRSAEncryption
cc:ba:cf:ac:64:99:a3:3a:6c:6c:fc:9e:4b:d7:15:6b:12:02:
70:7c:28:86:7b:d0:71:0a:76:c8:b7:4b:e6:67:b1:99:12:40:
c2:e0:52:3d:90:c8:b1:1f:7c:1e:c2:d6:43:4f:ee:81:a7:84:
41:70:e8:11:7e:ff:c0:d6:2e:eb:11:8e:26:37:9d:13:91:1c:
67:03:21:6a:d5:d1:dc:70:67:ca:4b:9d:3c:8c:f8:2c:3d:7b:
9e:e7:a1:b9:8f:1c:a5:3f:f6:2b:2b:aa:53:e3:df:50:96:d1:
43:6d:df:c1:e7:dd:7c:e3:07:8f:e5:f1:99:c5:af:28:c1:cc:
cf:29:48:d5:16:ea:31:bd:96:71:5e:3a:d3:7a:f8:5f:49:f5:
f8:d3:22:7c:ae:a3:43:5a:b6:78:08:0d:fa:f4:41:4e:24:7d:
03:69:46:48:92:20:b0:8b:12:b8:9e:b8:a9:9e:4b:b1:c0:37:
dd:e9:04:75:5b:c7:4a:7e:d1:03:35:2f:cb:79:5f:83:0a:f5:
80:47:45:3d:4c:70:09:2a:83:e7:b6:e9:06:2e:c1:07:75:bf:
25:d0:10:5f:43:f6:a5:64:d5:49:51:3e:83:62:3a:99:05:62:
3a:6a:a2:ba:70:98:d9:79:a3:82:3c:f9:4e:aa:4e:a6:03:bd:
31:e3:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:02 2025 by rpki-client