Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/cJFhLT9FdNluvyEAeHo9Sx2C1A0.roa
File: cJFhLT9FdNluvyEAeHo9Sx2C1A0.roa (raw, json)
Hash identifier: HO9bGTbq8G17Zzlw/E5S8qId6Tm3t1ne7ufy2zkTvY4=
Subject key identifier: 70:91:61:2D:3F:45:74:D9:6E:BF:21:00:78:7A:3D:4B:1D:82:D4:0D
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01970E005EEEB37710CF46F70D08F09C22D8
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/cJFhLT9FdNluvyEAeHo9Sx2C1A0.roa
Signing time: Mon 26 May 2025 19:09:54 +0000
ROA not before: Mon 26 May 2025 19:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:4386::/32 maxlen: 32
2a09:a206::/32 maxlen: 32
2a0c:9483::/32 maxlen: 32
2a0d:f845::/32 maxlen: 32
2a0f:1802::/32 maxlen: 32
2a0f:9d01::/32 maxlen: 32
2a12:38c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:00:5e:ee:b3:77:10:cf:46:f7:0d:08:f0:9c:22:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 26 19:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7091612d3f4574d96ebf2100787a3d4b1d82d40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:d3:57:6a:e4:50:89:e2:16:bb:98:74:58:
5b:fe:42:86:8b:72:02:36:34:d9:bf:3c:ba:06:62:
d1:e0:c1:7e:04:3a:bb:1b:b4:c8:1f:e5:40:34:8a:
b7:70:8e:8b:c0:2c:6b:1a:06:f8:9d:65:ee:aa:44:
d6:1b:e7:62:aa:11:f5:18:17:e8:13:b4:b1:3f:f6:
fc:c2:e5:4d:43:f5:eb:bd:4c:2a:99:23:f6:41:d9:
52:6c:16:27:11:44:21:08:3d:37:d7:c8:a3:0d:05:
46:ad:f3:dd:c8:a4:d7:53:21:67:23:49:91:0a:0f:
e1:8d:d5:2e:2f:b6:b2:de:8b:08:30:ea:b9:60:1c:
00:10:21:a3:3e:85:85:9e:9e:34:e1:d9:ce:57:56:
35:f5:86:89:0b:bd:1d:0f:16:c7:0c:b2:e2:29:5e:
38:fc:77:ff:f1:d8:e8:3d:ea:0d:f4:b4:34:35:f6:
41:c5:62:bc:ae:83:a2:01:a8:08:03:fe:32:e5:3a:
d0:e2:e1:9b:09:2e:ec:17:ec:d8:3a:5c:12:cb:3c:
0f:c6:d9:92:6c:f7:85:4d:79:2d:ee:7b:99:ef:8c:
03:00:50:c0:e6:7f:84:dd:c7:9b:5b:7a:43:03:18:
c6:7e:f2:f5:7a:96:82:a8:1b:b2:73:5f:ed:8d:be:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:61:2D:3F:45:74:D9:6E:BF:21:00:78:7A:3D:4B:1D:82:D4:0D
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/cJFhLT9FdNluvyEAeHo9Sx2C1A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4386::/32
2a09:a206::/32
2a0c:9483::/32
2a0d:f845::/32
2a0f:1802::/32
2a0f:9d01::/32
2a12:38c4::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b3:45:8a:72:36:d8:44:18:cc:35:b7:ef:b9:33:20:e4:e2:
aa:6e:45:0d:11:69:5d:f6:99:5f:13:86:fb:2c:a5:0a:aa:21:
23:b8:d6:10:bb:48:15:50:06:11:d8:31:e8:1f:ba:26:c5:3d:
1d:44:ac:c2:97:19:c1:f4:74:ba:8e:22:34:9d:7c:bd:15:a2:
5e:31:77:99:1f:c1:eb:c9:0e:b9:d5:bb:35:a3:9a:28:0c:3b:
be:92:35:22:61:43:80:a7:b6:94:b0:dd:72:ba:62:83:02:eb:
92:32:9a:e6:d5:fd:51:5a:17:50:4c:31:ae:29:3d:ef:10:cb:
dd:f4:21:8c:9e:90:20:e7:2c:36:93:d1:c6:45:03:7e:cc:1d:
3c:3e:54:61:48:0a:aa:0a:09:22:23:d7:ae:c4:99:cb:97:a4:
69:a8:fb:0c:85:a7:f0:5e:6d:65:7e:be:4c:2a:08:aa:1e:22:
5e:29:8c:9c:f3:f8:b4:4c:17:12:f7:7e:a3:50:cf:36:87:72:
8c:e7:0e:6d:c8:3e:ce:88:2a:a0:43:ce:0b:15:e3:f6:d4:5e:
84:4f:ca:fd:e3:c2:db:0c:00:ec:a9:f0:f5:d6:23:87:5f:f0:
9f:e4:e3:25:55:34:7c:9d:16:02:10:03:10:71:c6:23:6f:7e:
e0:10:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:17 2025 by rpki-client