Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EXdpy1iylxM-22g3s1xHHEGFxbc.roa
File: EXdpy1iylxM-22g3s1xHHEGFxbc.roa (raw, json)
Hash identifier: BFqlxY2IY8ZOsBJsMVc1Fjj00Mt5h+yowrc2JdGYc+s=
Subject key identifier: 11:77:69:CB:58:B2:97:13:3E:DB:68:37:B3:5C:47:1C:41:85:C5:B7
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0196D011822A7EEF35F6AD9A082CD17B1681
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EXdpy1iylxM-22g3s1xHHEGFxbc.roa
Signing time: Wed 14 May 2025 18:32:10 +0000
ROA not before: Wed 14 May 2025 18:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:cf05::/32 maxlen: 32
2a09:dd03::/32 maxlen: 32
2a09:e705::/32 maxlen: 32
2a09:ef00::/32 maxlen: 32
2a0b:9000::/32 maxlen: 32
2a0e:5883::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:11:82:2a:7e:ef:35:f6:ad:9a:08:2c:d1:7b:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 14 18:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=117769cb58b297133edb6837b35c471c4185c5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:c2:64:f8:68:fc:5c:3d:88:f5:5b:fa:f4:
5e:15:fc:7f:da:ca:d9:7b:c6:51:f5:d8:37:c8:f5:
67:23:9e:6e:ed:cc:c3:9e:15:d4:9b:ec:0d:39:da:
e8:fe:82:ca:78:e9:fa:cf:4c:c3:b1:d0:ff:26:2b:
32:68:39:15:8c:cc:fc:d8:ad:cf:e1:ed:33:cb:99:
41:e8:5e:b5:16:fe:15:95:f5:57:43:47:7c:d5:6a:
94:df:2b:e7:58:08:61:2e:b1:59:6f:93:04:dd:2f:
f4:a7:d2:4f:a7:56:0d:81:b9:0d:4e:8c:b4:73:45:
14:5f:d6:7f:52:f6:46:33:d4:3b:eb:75:12:79:ff:
0e:dc:32:47:d9:09:a9:ff:b8:20:21:7f:77:12:ad:
f4:18:ab:74:b3:c3:28:39:8f:2b:7d:00:3e:bc:6e:
7a:da:30:84:1d:a4:80:6c:09:2d:f6:99:2c:21:fe:
71:f7:8d:96:0b:58:d5:00:9f:8b:99:dc:96:46:3e:
63:69:85:52:d8:75:02:81:80:0c:80:54:5a:be:24:
c0:56:19:29:97:32:4e:9e:99:12:e6:28:6a:07:04:
1c:9a:fe:7e:74:2b:92:61:5e:1f:bc:88:10:cb:ed:
ce:2a:10:b2:69:5a:d7:aa:01:53:27:d9:df:64:86:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:69:CB:58:B2:97:13:3E:DB:68:37:B3:5C:47:1C:41:85:C5:B7
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EXdpy1iylxM-22g3s1xHHEGFxbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:cf05::/32
2a09:dd03::/32
2a09:e705::/32
2a09:ef00::/32
2a0b:9000::/32
2a0e:5883::/32
Signature Algorithm: sha256WithRSAEncryption
64:f6:04:26:5d:a0:13:8b:bc:58:7c:9e:95:8c:2f:f6:61:5d:
37:69:9e:3e:99:17:25:d9:3c:ab:8e:2c:79:93:5f:a7:90:13:
b4:5a:ec:21:3f:5c:10:a6:1d:11:f8:02:8a:93:99:e0:0d:24:
fc:47:ac:0a:aa:72:f7:98:4a:7e:51:10:81:c9:02:44:f9:1f:
d2:b8:8b:d1:a3:85:62:ce:ad:d4:65:93:48:7f:ed:2a:c8:69:
4a:f1:90:b2:e2:85:a8:3f:94:a6:00:02:a1:f6:bf:fa:67:a7:
7f:aa:6c:4a:2a:9a:d6:7e:87:98:34:f2:66:8a:0f:bc:34:04:
30:dc:99:4a:ec:d2:d4:9b:10:70:0d:f3:ce:7e:fa:19:e2:f9:
90:17:25:f4:05:71:28:f8:20:cf:dd:f2:b3:3e:df:6a:db:56:
30:28:c7:85:6e:a4:a1:ca:51:74:72:bb:dd:3c:15:67:78:31:
d8:ba:ff:27:1c:68:de:37:ee:01:28:86:1c:b6:f4:e9:a5:a2:
1f:88:99:e1:9c:9a:0f:90:21:60:2e:bb:18:51:8e:77:d8:97:
d4:59:e5:78:bc:2e:b9:00:fa:07:2a:fd:93:b7:76:22:64:43:
36:ad:06:87:a1:ca:a3:ca:c6:08:43:91:b1:ad:00:a7:ea:3a:
38:16:31:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:29:52 2025 by rpki-client