Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa
File: Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa (raw, json)
Hash identifier: b/H/zEu0WFP2D/nRrX3BPfEmih42pvZKFxL8bEEPnXE=
Subject key identifier: 46:FD:01:E9:FF:CE:8E:28:FC:86:BA:73:7F:70:D1:DF:49:67:05:82
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019577422B79E1FA5B5138331D8B1ED7F25A
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa
Signing time: Sat 08 Mar 2025 19:36:19 +0000
ROA not before: Sat 08 Mar 2025 19:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39335
IP address blocks: 2a0b:6b82::/32 maxlen: 32
2a0b:6b86:1200::/40 maxlen: 48
2a0b:6b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:77:42:2b:79:e1:fa:5b:51:38:33:1d:8b:1e:d7:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Mar 8 19:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46fd01e9ffce8e28fc86ba737f70d1df49670582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:54:56:01:b5:36:fc:2d:3b:0d:b4:24:02:
6a:01:d1:d7:4e:45:be:05:09:38:08:22:7d:db:ff:
64:c6:1d:23:8b:ca:90:0d:ad:13:75:68:72:f4:13:
b3:4e:7b:0c:38:51:e8:bd:3c:57:f7:cc:ee:28:05:
9f:30:aa:aa:aa:bc:39:ed:db:12:ea:ef:89:42:51:
89:ab:31:60:5c:5c:2f:f4:a0:ff:a9:05:ff:0d:2d:
6f:b5:cd:bd:52:80:5e:e3:7e:27:42:4f:2c:9b:35:
cf:6c:b6:45:4b:f1:d1:c6:29:50:a8:a8:fe:58:89:
dc:2d:9f:c8:f3:d9:da:6c:8b:30:f4:17:ce:a2:ba:
cd:a8:c1:99:f2:44:76:7e:92:3b:ba:3b:ba:4c:87:
54:27:5d:9f:33:ae:aa:57:0e:97:6b:a6:c9:f8:e1:
9b:d1:03:ea:d3:55:e8:f4:73:17:ea:c8:0c:c1:76:
fa:88:c2:f3:8a:f1:0e:bc:b7:54:65:0b:d5:86:04:
15:35:72:23:82:80:87:73:23:ed:e7:f1:77:0d:a5:
fc:5e:f9:a9:ef:6f:36:cd:eb:8a:3c:b6:25:55:49:
b6:48:74:c1:1a:66:4c:4e:41:58:43:96:d2:d1:ab:
48:a0:b9:15:6d:e5:47:0e:8d:81:75:f6:1e:64:e4:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:01:E9:FF:CE:8E:28:FC:86:BA:73:7F:70:D1:DF:49:67:05:82
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b82::/32
2a0b:6b86:1200::/40
2a0b:6b87::/32
Signature Algorithm: sha256WithRSAEncryption
10:6d:b6:c1:e0:b9:e9:35:60:48:1b:1e:9f:7f:98:7e:36:71:
6f:02:1b:0a:6c:d7:c2:95:33:53:5d:b6:5b:c5:70:99:b3:a2:
91:56:4d:b6:e7:4d:d0:f3:64:99:92:8c:e7:79:b2:23:3d:e5:
56:35:02:c6:c4:82:9f:3d:ec:20:bd:ce:2b:7d:68:8c:28:6e:
5e:d8:4b:a6:15:52:81:4f:ff:50:44:d0:4f:54:2d:ce:2e:67:
5b:90:b1:f6:aa:db:24:c7:f0:10:7f:d5:30:84:12:71:41:11:
59:6b:c6:f3:a5:55:94:e7:c7:a4:0e:c5:99:d1:4b:17:79:78:
89:21:ee:68:4c:30:63:bf:b8:9a:00:c7:67:80:2c:fb:56:12:
ae:56:28:c2:be:a4:5c:d8:64:d4:ed:b9:b3:01:58:50:7f:16:
7c:07:cd:16:c3:c2:4d:09:66:50:1a:ad:76:e7:ad:61:99:da:
a8:75:7e:00:ab:ef:b7:eb:20:b3:31:f6:3e:7e:cd:99:0e:40:
ee:23:e6:16:9c:fe:82:41:89:0e:02:25:59:c6:92:d9:3a:aa:
a9:db:b2:67:c8:10:88:0f:5c:77:4b:96:d2:e3:a2:c0:96:6a:
ac:28:61:71:5a:01:b8:60:c1:13:d0:ca:5f:d9:0f:7c:03:91:
57:77:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:28:33 2025 by rpki-client