Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/prr3NRlxDI_PlzBZmkEmAxkzfbA.roa
File: prr3NRlxDI_PlzBZmkEmAxkzfbA.roa (raw, json)
Hash identifier: oiqoP8mg1ZWYphwWk05fSRNPVwn023pwclqxIAy/UUM=
Subject key identifier: A6:BA:F7:35:19:71:0C:8F:CF:97:30:59:9A:41:26:03:19:33:7D:B0
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0196D00FADF1D0731CF1686D3638FC2232A5
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/prr3NRlxDI_PlzBZmkEmAxkzfbA.roa
Signing time: Wed 14 May 2025 18:30:10 +0000
ROA not before: Wed 14 May 2025 18:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:2985::/32 maxlen: 32
2a09:af87::/32 maxlen: 32
2a09:c704::/32 maxlen: 32
2a09:cf07::/32 maxlen: 32
2a09:d707::/32 maxlen: 32
2a09:dd07::/32 maxlen: 32
2a09:e301::/32 maxlen: 32
2a09:e706::/32 maxlen: 32
2a0b:9006::/32 maxlen: 32
2a0e:3f45::/32 maxlen: 32
2a0e:5887::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:0f:ad:f1:d0:73:1c:f1:68:6d:36:38:fc:22:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 14 18:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6baf73519710c8fcf9730599a41260319337db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:49:3f:ff:78:8e:5f:d8:04:dc:1c:aa:57:
fa:5e:7b:5f:dc:20:a0:21:6f:5c:8f:e3:08:7b:a3:
ee:f8:6f:45:26:57:ec:33:01:a6:c8:69:aa:b7:95:
d6:98:c5:8a:cf:ea:02:58:8b:c9:d0:d7:66:9c:0d:
10:9c:1e:de:1e:d4:4c:49:0f:bc:12:86:20:2d:18:
56:6d:ff:3b:e5:e1:44:17:5d:c6:89:db:af:f3:b8:
5b:e6:e3:65:d0:01:8e:76:4f:fb:9c:52:09:d4:cf:
f6:34:12:4b:79:88:7b:24:d5:0a:8b:7d:10:6e:97:
31:54:ab:f5:e8:a0:02:b0:74:f5:7e:36:86:52:e1:
ea:e7:6f:dd:02:58:eb:4f:0f:17:37:72:ca:b4:e1:
78:87:1b:c7:b7:a7:7a:f3:ea:5f:11:7f:04:26:b9:
8a:28:ff:ec:50:ea:9c:03:5d:06:28:3f:00:5c:17:
91:9b:8d:ad:ba:66:7c:cc:66:06:65:f0:3a:b6:4a:
85:f5:63:59:25:d8:77:0c:26:08:3c:66:8d:f9:38:
b3:53:ad:b0:13:4a:3b:04:ec:30:44:54:28:94:05:
0b:eb:cc:9d:2f:34:bb:ac:66:13:15:cd:23:8a:be:
cc:19:0e:9f:a2:e1:8c:90:27:c6:c5:8f:9e:87:56:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BA:F7:35:19:71:0C:8F:CF:97:30:59:9A:41:26:03:19:33:7D:B0
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/prr3NRlxDI_PlzBZmkEmAxkzfbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2985::/32
2a09:af87::/32
2a09:c704::/32
2a09:cf07::/32
2a09:d707::/32
2a09:dd07::/32
2a09:e301::/32
2a09:e706::/32
2a0b:9006::/32
2a0e:3f45::/32
2a0e:5887::/32
Signature Algorithm: sha256WithRSAEncryption
46:60:f1:24:58:fe:2c:d9:60:78:6f:79:3f:cc:71:a1:7c:21:
85:50:12:5d:65:a7:7b:a9:ce:20:f9:2d:6b:d2:54:82:4f:71:
b8:10:74:23:70:88:b4:73:b5:c5:11:63:19:ab:4f:c9:a1:ff:
6e:07:51:d4:c9:93:3d:7d:7d:1f:c6:44:6a:75:bf:cb:cc:ca:
c6:a6:80:70:43:f2:14:b7:09:72:24:cb:ec:86:60:11:e5:f1:
03:0a:b5:a3:07:a2:48:bc:32:95:46:f7:2e:53:f2:1b:12:cf:
aa:cc:a8:08:43:3a:a0:75:f4:2d:c9:dc:3a:33:ea:07:25:c5:
2c:7c:05:bb:a9:79:e4:12:6b:e9:5e:3f:42:91:6c:d2:f0:16:
03:7a:71:99:68:f3:6a:59:9b:a9:dd:d7:dc:10:e4:34:33:ce:
4a:6d:4d:ca:79:20:ff:9c:7b:51:d4:2c:d6:86:23:db:99:16:
dc:ba:db:b7:f4:2d:50:51:eb:2f:26:d0:20:b4:1f:ad:1a:c1:
8e:14:0d:26:de:0c:1a:ae:1c:04:d3:80:55:ac:a9:04:d3:01:
2b:d4:f1:87:32:4a:6c:be:3b:c0:be:76:9b:7c:59:b9:84:fd:
50:a4:63:0a:a9:0b:70:10:84:c2:92:6c:3f:fe:34:bc:70:ca:
38:71:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:31:07 2025 by rpki-client