Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa
File: NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa (raw, json)
Hash identifier: T0QRKwpRKCboBN8QOjnL0H+oqbdiRAZQLY2yjOk7Fio=
Subject key identifier: 37:25:2A:D2:B1:EC:4F:DD:46:ED:19:07:51:3F:8B:59:0E:CF:3D:28
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE9E3E3654C4238474BA9DA4EA306
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206499
IP address blocks: 2a0f:5700::/32 maxlen: 48
2a0f:5701::/32 maxlen: 48
2a0f:5701::/33 maxlen: 33
2a0f:5701::/34 maxlen: 34
2a0f:5701:fe10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:e3:e3:65:4c:42:38:47:4b:a9:da:4e:a3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37252ad2b1ec4fdd46ed1907513f8b590ecf3d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:e4:63:f4:70:5f:38:f8:5a:8e:d3:da:a2:
70:ca:29:f3:fe:16:56:b7:7f:9a:ea:8e:55:c4:2f:
0d:3a:e0:e0:9a:1a:c3:ff:09:8f:62:b6:71:a3:cf:
ce:a7:65:17:4f:74:74:af:b4:1a:6b:02:1b:3d:04:
bb:c1:1f:b0:f7:d0:3a:d0:e6:58:58:54:d6:97:1d:
06:cb:13:6e:92:ba:bd:7e:a5:de:30:9c:31:ea:a6:
25:84:d3:a9:68:93:0c:bf:85:2f:f4:5c:84:95:1b:
4f:34:3c:49:fb:5c:53:38:02:5f:f6:81:dd:ca:25:
92:b1:01:46:b5:55:f9:50:3c:6c:5f:3a:f9:b4:23:
0b:19:44:72:d9:2f:89:52:41:62:a4:27:3d:86:83:
e8:75:fc:df:3c:1c:f0:13:ea:9a:d5:1a:36:b3:12:
73:b5:b9:59:10:9f:ea:20:f2:1d:df:26:18:a6:bc:
9e:8f:eb:bd:01:52:16:ef:ba:c7:38:8d:3d:78:cd:
ce:8f:bb:7f:7f:be:0a:45:24:c4:eb:a0:7d:1b:28:
f6:8a:93:62:4d:3e:81:d9:99:93:f4:14:34:dd:dd:
0b:16:5e:56:e1:ec:c9:b8:16:36:46:7d:b0:d4:66:
cf:6b:3c:9f:1b:50:eb:1d:33:95:c4:e1:9d:97:30:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:2A:D2:B1:EC:4F:DD:46:ED:19:07:51:3F:8B:59:0E:CF:3D:28
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NyUq0rHsT91G7RkHUT-LWQ7PPSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5700::/31
Signature Algorithm: sha256WithRSAEncryption
b0:b9:cc:29:c0:bb:3b:25:38:a2:07:00:c4:9b:00:ed:a6:06:
0b:cb:40:c5:a9:06:33:60:03:b4:08:b9:f9:bb:27:2b:8c:ee:
7d:37:7c:91:f0:1d:72:b5:0a:fd:79:b6:dc:7d:81:bd:8f:74:
61:a3:a6:e3:dd:2c:02:00:44:f8:98:5b:5c:21:a2:5b:13:93:
41:5e:ca:83:7d:08:36:55:dc:6c:45:75:f5:7c:9f:e6:f3:4c:
e5:79:92:2a:a1:5d:00:a8:f8:84:ec:de:17:e9:fd:5b:79:02:
02:b2:02:23:c5:c2:03:06:69:e2:e1:67:73:4c:d3:63:d7:72:
31:67:be:81:c2:71:b6:ec:b2:02:ad:b2:cd:c5:f7:4b:3f:6d:
2e:9c:23:8a:07:4b:21:47:18:00:78:10:10:e1:99:a5:b9:61:
9c:4f:9d:e8:c0:45:90:43:d2:16:3d:ce:e2:54:f5:ea:5f:96:
bc:2a:98:67:aa:e5:ec:4e:f0:2a:cc:cd:d9:aa:0c:ec:e7:38:
78:12:aa:34:99:6e:7f:d7:38:8c:2a:91:cc:93:4d:1c:53:39:
60:c7:1c:d8:f1:ef:b4:6c:ca:8a:43:4f:a4:66:de:20:df:ff:
b8:e3:77:6c:4a:68:4b:77:62:7f:f5:cf:e4:63:0f:da:0d:b3:
11:4a:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:10 2025 by rpki-client