Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/nj2lR_nztklXnHWC7nWcOdTia3A.roa
File: nj2lR_nztklXnHWC7nWcOdTia3A.roa (raw, json)
Hash identifier: aQz8wor+xA3s1xR3uYlxKklTzHaut96r0UomaAq8wKY=
Subject key identifier: 9E:3D:A5:47:F9:F3:B6:49:57:9C:75:82:EE:75:9C:39:D4:E2:6B:70
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01970E014A045834B2622CCA31CBDCF79C18
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/nj2lR_nztklXnHWC7nWcOdTia3A.roa
Signing time: Mon 26 May 2025 19:10:54 +0000
ROA not before: Mon 26 May 2025 19:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a09:a205::/32 maxlen: 32
2a0a:c0c6::/32 maxlen: 32
2a0d:f841::/32 maxlen: 32
2a0e:c4c7::/32 maxlen: 32
2a0f:1804::/32 maxlen: 32
2a0f:9d03::/32 maxlen: 32
2a12:38c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:01:4a:04:58:34:b2:62:2c:ca:31:cb:dc:f7:9c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 26 19:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e3da547f9f3b649579c7582ee759c39d4e26b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:7f:8f:cc:53:6b:b6:f7:c1:89:97:09:dd:
ff:51:00:bd:ed:04:a0:bd:ef:32:50:bb:b3:dc:5c:
a7:37:f6:f9:bf:fa:77:11:eb:fb:58:a7:d5:10:fb:
43:9d:a9:79:a6:ff:30:58:6a:d5:60:83:4c:13:94:
ee:b8:70:47:b0:21:e3:ce:bc:6d:b8:4c:a3:30:7a:
d9:5a:21:7f:9c:b4:65:d5:6e:d5:c8:96:e5:95:3a:
c3:50:e1:e2:1b:aa:70:e8:8d:c4:42:30:38:bb:2d:
a0:bf:11:b5:be:56:46:11:dd:a2:01:99:73:0d:90:
50:b8:87:9d:f0:2c:8f:36:6b:d9:6b:8c:a2:95:23:
ba:89:80:26:1b:43:58:4d:dd:04:08:a5:71:7a:df:
f6:e9:4e:fe:16:4c:b9:27:6b:1d:ca:c2:37:99:3c:
b5:37:c5:bd:36:3a:ae:a9:0f:5f:33:ca:85:54:25:
2f:f9:f2:e0:4a:1e:1f:70:dc:1c:00:62:d5:a7:12:
0f:19:a0:97:7c:ae:8c:33:04:ec:a5:3c:03:79:b1:
a3:fb:a9:d4:67:97:da:75:b2:e5:5d:db:08:cf:f4:
19:cd:16:1f:d6:77:b6:56:09:db:9a:3d:bb:98:14:
0f:3c:d4:38:63:ac:2b:ad:62:c5:e5:07:ab:f4:6c:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3D:A5:47:F9:F3:B6:49:57:9C:75:82:EE:75:9C:39:D4:E2:6B:70
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/nj2lR_nztklXnHWC7nWcOdTia3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a205::/32
2a0a:c0c6::/32
2a0d:f841::/32
2a0e:c4c7::/32
2a0f:1804::/32
2a0f:9d03::/32
2a12:38c3::/32
Signature Algorithm: sha256WithRSAEncryption
28:20:c9:d2:a6:28:db:d1:84:b8:91:64:77:27:da:dc:6b:6f:
b0:99:a2:9f:05:a1:c3:a1:ca:7e:c3:78:07:cc:30:d4:46:e8:
81:7b:be:cb:0a:f8:f3:23:a6:30:3a:63:17:8a:6f:d3:20:e7:
b8:63:36:0e:da:4d:15:18:80:49:1a:12:f0:98:a9:3c:58:2f:
a0:3c:fb:82:03:69:f9:a9:98:22:df:b8:f2:ad:03:65:5a:19:
ac:c6:d0:c7:95:73:7d:79:44:2b:7b:05:39:20:82:96:76:14:
21:24:44:07:af:ca:d5:16:93:0f:d0:a6:36:a8:7b:86:64:3b:
76:18:a7:12:4c:2a:5b:ca:6b:52:64:8f:8c:9e:51:18:a2:31:
a5:28:eb:ce:84:7b:b7:bf:e5:c6:27:fc:68:0c:00:b7:37:9c:
78:bc:b3:3e:54:4b:8b:08:4f:5d:bc:80:57:4a:49:fe:a1:7a:
ae:30:48:b4:7f:93:14:b2:73:0d:10:c2:97:50:86:05:e3:6f:
b6:94:f9:4f:a6:f3:09:bf:5c:c7:8f:92:0d:bb:26:9a:49:41:
ad:a9:fa:f1:a1:c7:f3:f9:f8:56:40:92:88:1f:07:0c:aa:81:
1b:84:17:fe:f0:d0:0b:c8:1b:57:86:9e:13:3a:2d:8f:92:9a:
63:f6:77:34
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZcOAUoEWDSyYizKMcvc95wYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwNTI2MTkxMDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTNkYTU0N2Y5ZjNiNjQ5NTc5Yzc1ODJlZTc1OWMzOWQ0ZTI2YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgJ/j8xTa7b3wYmXCd3/UQC97QSg
ve8yULuz3FynN/b5v/p3Eev7WKfVEPtDnal5pv8wWGrVYINME5TuuHBHsCHjzrxt
uEyjMHrZWiF/nLRl1W7VyJbllTrDUOHiG6pw6I3EQjA4uy2gvxG1vlZGEd2iAZlz
DZBQuIed8CyPNmvZa4yilSO6iYAmG0NYTd0ECKVxet/26U7+Fky5J2sdysI3mTy1
N8W9NjquqQ9fM8qFVCUv+fLgSh4fcNwcAGLVpxIPGaCXfK6MMwTspTwDebGj+6nU
Z5fadbLlXdsIz/QZzRYf1ne2Vgnbmj27mBQPPNQ4Y6wrrWLF5Qer9Gw96wIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFJ49pUf587ZJV5x1gu51nDnU4mtwMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvbmoybFJfbnp0a2xYbkhXQzduV2NPZFRpYTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUAKgmiBQMF
ACoKwMYDBQAqDfhBAwUAKg7ExwMFACoPGAQDBQAqD50DAwUAKhI4wzANBgkqhkiG
9w0BAQsFAAOCAQEAKCDJ0qYo29GEuJFkdyfa3GtvsJminwWhw6HKfsN4B8ww1Ebo
gXu+ywr48yOmMDpjF4pv0yDnuGM2DtpNFRiASRoS8JipPFgvoDz7ggNp+amYIt+4
8q0DZVoZrMbQx5VzfXlEK3sFOSCClnYUISREB6/K1RaTD9CmNqh7hmQ7dhinEkwq
W8prUmSPjJ5RGKIxpSjrzoR7t7/lxif8aAwAtzeceLyzPlRLiwhPXbyAV0pJ/qF6
rjBItH+TFLJzDRDCl1CGBeNvtpT5T6bzCb9cx4+SDbsmmklBran68aHH8/n4VkCS
iB8HDKqBG4QX/vDQC8gbV4aeEzotj5KaY/Z3NA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 06:30:11 2025 by rpki-client