Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/19KiQBj2nTho3C2mRk4uIYDashs.roa
File: 19KiQBj2nTho3C2mRk4uIYDashs.roa (raw, json)
Hash identifier: 4v5P/gRgf6EcwI5OWvNKLcING+QK6vahSqRa5V+ChGU=
Subject key identifier: D7:D2:A2:40:18:F6:9D:38:68:DC:2D:A6:46:4E:2E:21:80:DA:B2:1B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0196D00FAD420389DD5AC430E970E1C42732
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/19KiQBj2nTho3C2mRk4uIYDashs.roa
Signing time: Wed 14 May 2025 18:30:10 +0000
ROA not before: Wed 14 May 2025 18:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a09:2980::/32 maxlen: 32
2a09:af85::/32 maxlen: 32
2a09:c703::/32 maxlen: 32
2a09:cf02::/32 maxlen: 32
2a09:d705::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0e:3f44::/32 maxlen: 32
2a0e:5882::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:0f:ad:42:03:89:dd:5a:c4:30:e9:70:e1:c4:27:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 14 18:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7d2a24018f69d3868dc2da6464e2e2180dab21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:65:31:4d:61:89:32:1c:ff:d5:ea:97:90:
e9:6c:e8:8f:7a:2e:29:28:2e:41:3b:18:d7:a8:fd:
b4:01:36:58:d2:d7:30:f2:b7:57:41:1b:f1:7e:75:
e1:67:76:50:6d:13:be:07:7d:c4:04:a6:b7:d6:72:
c0:29:f9:e5:07:61:47:87:d9:7b:ac:fc:8a:f8:c1:
f4:1f:15:81:de:b4:e6:51:1a:3c:c8:c5:fe:0c:37:
0e:7b:61:78:0c:52:3a:d2:0e:8c:10:ae:17:79:df:
7d:e9:1d:0c:a2:87:7d:cd:2a:31:53:b7:5e:73:0d:
d4:ff:7a:b3:6d:11:d5:22:b5:ed:b8:03:05:28:14:
49:fb:80:a0:5d:46:91:6c:0b:88:1e:b0:e8:12:52:
8c:74:9e:3c:9e:40:1a:c6:49:ab:f4:2a:20:32:86:
b5:ec:37:72:93:c3:a7:51:39:43:f7:c3:d0:4e:3e:
fd:fb:8f:95:cc:91:8b:68:c0:a8:91:d7:b7:85:18:
30:69:a0:fc:c4:6f:5d:5c:b2:63:8b:c3:6f:b3:f2:
72:9e:76:10:d1:7b:b5:0a:98:ba:e0:25:4d:9e:d2:
fe:93:d2:a7:95:05:2a:0f:97:73:8e:66:bf:ee:6e:
16:c6:b6:b1:78:d8:78:23:25:f7:00:0d:36:71:ca:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:A2:40:18:F6:9D:38:68:DC:2D:A6:46:4E:2E:21:80:DA:B2:1B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/19KiQBj2nTho3C2mRk4uIYDashs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a09:2980::/32
2a09:af85::/32
2a09:c703::/32
2a09:cf02::/32
2a09:d705::/32
2a0d:afc5::/32
2a0d:afc7::/32
2a0d:c102::/32
2a0e:3f44::/32
2a0e:5882::/32
Signature Algorithm: sha256WithRSAEncryption
a8:75:37:bd:db:79:2e:7e:1b:f7:e7:7a:ce:69:b3:a8:9b:e5:
ca:7d:14:66:01:34:db:ca:98:29:d7:f2:6d:f6:af:f6:cc:24:
be:2f:93:cd:7e:ab:7b:40:5c:c3:6c:14:bc:fb:22:1a:c3:5c:
3d:09:fb:b5:6a:97:fe:08:26:d9:67:ea:da:42:83:2b:64:e4:
6a:7b:b8:ba:fb:24:2e:4b:a2:cc:1e:da:06:97:ba:3d:bd:39:
b6:e8:55:b2:90:9f:c5:6d:3c:cb:09:90:da:33:2b:f3:01:9a:
72:b3:60:d8:71:47:cd:e9:e9:9e:b8:40:06:ca:b1:cf:cf:1f:
37:d4:3b:3e:4d:1d:cd:17:6f:a5:51:91:80:d4:2a:4f:7f:0d:
f9:6b:85:01:4e:ea:d8:97:4e:76:0c:3d:bf:76:bb:09:dd:29:
b6:72:af:6b:e2:06:3a:17:71:3b:89:a0:d7:a1:d0:f6:7a:1c:
98:36:c6:4e:b5:a8:65:24:67:81:0d:fb:b4:a4:60:de:f6:02:
b6:8a:0c:d4:b7:70:b8:1b:f6:d9:a4:cc:fd:e5:2e:60:20:6d:
09:9a:4f:7f:6c:24:6e:a5:e0:95:c1:8b:9c:29:29:93:11:21:
e0:47:fe:10:b1:20:48:72:a3:78:b0:7d:57:f3:63:d0:cf:ed:
a6:a4:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:28:42 2025 by rpki-client