Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/x8sHet2UgEcOnnZD5dJn2Ko8_vo.roa
File: x8sHet2UgEcOnnZD5dJn2Ko8_vo.roa (raw, json)
Hash identifier: t+hBO6QpEyBlMIGmlqiZ4NAQjuL+yNcw1zrzfQNMqMg=
Subject key identifier: C7:CB:07:7A:DD:94:80:47:0E:9E:76:43:E5:D2:67:D8:AA:3C:FE:FA
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0196FEA6032B9E1BCF2C699F501D1BCAFD76
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/x8sHet2UgEcOnnZD5dJn2Ko8_vo.roa
Signing time: Fri 23 May 2025 19:36:54 +0000
ROA not before: Fri 23 May 2025 19:36:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a0c:9482::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:a6:03:2b:9e:1b:cf:2c:69:9f:50:1d:1b:ca:fd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 23 19:36:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7cb077add9480470e9e7643e5d267d8aa3cfefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:9a:e0:01:3d:78:bb:4b:cf:f7:6b:de:de:
3c:2c:5e:08:62:e1:9a:73:fe:18:7f:59:bf:e4:d1:
4e:5b:0f:f1:f8:a9:72:a4:d7:4e:a8:82:a7:fc:30:
9f:2d:fe:47:94:ea:9d:10:98:14:58:16:b9:7c:d0:
3f:95:c6:5f:d9:4d:58:57:f0:0a:cd:a2:86:87:f2:
5b:15:f6:e2:bb:ab:4c:62:f4:41:f5:61:b5:f7:48:
23:07:47:f6:b0:bd:13:69:fc:74:c3:45:ba:f3:d0:
98:81:44:f0:52:a4:8c:ba:d8:e3:1b:6e:c3:10:eb:
e0:10:29:73:78:a9:fc:a6:2d:13:fb:98:36:47:f2:
1e:2e:67:84:95:59:96:8e:b9:c6:81:dc:12:ad:95:
fa:b0:c1:4d:6b:04:c1:bd:81:58:1d:65:9e:0c:8b:
f0:4f:b2:bf:56:35:c2:6a:c1:e8:12:e4:36:a2:a6:
7c:3c:48:db:09:a5:10:1d:a2:b6:e8:57:69:3c:d2:
6e:57:73:33:ff:05:ba:4d:34:fb:d2:50:da:12:a4:
25:45:c0:fd:58:ef:60:20:13:59:32:4f:ff:20:c7:
ab:3b:8e:fb:43:68:28:bc:6e:d6:0d:b2:8d:80:77:
40:24:ce:23:02:8e:c3:f4:45:0c:70:cd:14:5a:84:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CB:07:7A:DD:94:80:47:0E:9E:76:43:E5:D2:67:D8:AA:3C:FE:FA
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/x8sHet2UgEcOnnZD5dJn2Ko8_vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9482::/32
Signature Algorithm: sha256WithRSAEncryption
19:b9:54:c6:6d:20:20:84:3d:20:b5:59:49:d7:ad:d3:cb:5a:
61:7f:b1:b5:d4:54:ff:1c:ec:1f:73:00:f4:82:ed:09:67:fe:
e9:76:24:e1:ab:08:db:3b:92:52:3a:2d:c1:0c:79:91:54:78:
c6:14:bd:bf:f8:3d:30:d7:da:eb:63:5e:5b:fc:b9:f3:6a:a8:
95:79:ec:b0:ce:ce:6c:4e:d2:e4:36:3e:3a:3d:89:17:0b:8c:
64:7f:46:c7:93:aa:0e:11:ea:e4:d4:a0:c2:fa:fe:ee:ce:43:
5b:46:1b:75:73:b0:e9:d7:5f:4c:c7:ff:4d:a5:2f:1f:7b:9d:
f8:a2:e7:e8:ce:70:5e:32:80:0b:6d:8f:d6:6b:95:86:ec:38:
3c:8a:8b:a2:1d:6f:8d:de:9a:85:95:64:1f:95:5c:7e:13:e7:
f4:3a:1b:3b:3c:84:fb:cc:c2:c8:b6:2a:19:61:2f:6b:a0:53:
f0:b2:2d:1d:fc:6e:15:3f:7a:aa:9c:2d:88:93:76:9e:1f:42:
2b:9e:79:a6:90:d2:c2:1c:4d:eb:e3:a1:19:9d:0c:ed:3e:8e:
9c:f5:df:5d:77:37:2c:0e:05:01:f3:39:cb:5d:dd:5a:8f:ab:
86:7b:60:3e:a6:6a:cc:5a:64:0f:21:6d:10:fc:9b:82:f4:64:
de:d4:aa:ae
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZb+pgMrnhvPLGmfUB0byv12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwNTIzMTkzNjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2NiMDc3YWRkOTQ4MDQ3MGU5ZTc2NDNlNWQyNjdkOGFhM2NmZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypma4AE9eLtLz/dr3t48LF4IYuGa
c/4Yf1m/5NFOWw/x+KlypNdOqIKn/DCfLf5HlOqdEJgUWBa5fNA/lcZf2U1YV/AK
zaKGh/JbFfbiu6tMYvRB9WG190gjB0f2sL0Tafx0w0W689CYgUTwUqSMutjjG27D
EOvgEClzeKn8pi0T+5g2R/IeLmeElVmWjrnGgdwSrZX6sMFNawTBvYFYHWWeDIvw
T7K/VjXCasHoEuQ2oqZ8PEjbCaUQHaK26FdpPNJuV3Mz/wW6TTT70lDaEqQlRcD9
WO9gIBNZMk//IMerO477Q2govG7WDbKNgHdAJM4jAo7D9EUMcM0UWoShjQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMfLB3rdlIBHDp52Q+XSZ9iqPP76MB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEveDhzSGV0MlVnRWNPbm5aRDVkSm4yS284X3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgyUgjAN
BgkqhkiG9w0BAQsFAAOCAQEAGblUxm0gIIQ9ILVZSdet08taYX+xtdRU/xzsH3MA
9ILtCWf+6XYk4asI2zuSUjotwQx5kVR4xhS9v/g9MNfa62NeW/y582qolXnssM7O
bE7S5DY+Oj2JFwuMZH9Gx5OqDhHq5NSgwvr+7s5DW0YbdXOw6ddfTMf/TaUvH3ud
+KLn6M5wXjKAC22P1muVhuw4PIqLoh1vjd6ahZVkH5VcfhPn9DobOzyE+8zCyLYq
GWEva6BT8LItHfxuFT96qpwtiJN2nh9CK555ppDSwhxN6+OhGZ0M7T6OnPXfXXc3
LA4FAfM5y13dWo+rhntgPqZqzFpkDyFtEPybgvRk3tSqrg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:47 2025 by rpki-client