Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jtMK6icEtCLk4UeIxlIzZflE72Y.roa
File: jtMK6icEtCLk4UeIxlIzZflE72Y.roa (raw, json)
Hash identifier: dCtAiHysDtX3OygfVMi/KBhlX/dYSahBZA7Iy7DtEgI=
Subject key identifier: 8E:D3:0A:EA:27:04:B4:22:E4:E1:47:88:C6:52:33:65:F9:44:EF:66
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195D43E573B847EE5B6872C879F7BE325F3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jtMK6icEtCLk4UeIxlIzZflE72Y.roa
Signing time: Wed 26 Mar 2025 20:56:50 +0000
ROA not before: Wed 26 Mar 2025 20:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a06:1180:12bb::/48 maxlen: 48
2a0a:2d04:9825::/48 maxlen: 48
2a0c:7881:98dd::/48 maxlen: 48
2a0e:15c0:1213::/48 maxlen: 48
2a0f:7d00:32ba::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:3e:57:3b:84:7e:e5:b6:87:2c:87:9f:7b:e3:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 26 20:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed30aea2704b422e4e14788c6523365f944ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:c6:10:e8:a3:8c:39:4a:fe:2b:70:57:6d:
43:12:6b:00:83:3c:58:a2:e0:1b:1b:97:17:67:54:
47:1a:0c:a9:76:1f:03:74:98:4b:46:84:ac:e2:82:
9a:54:a1:02:c7:a6:f9:11:a9:59:17:8d:b2:2c:88:
ea:fa:0f:17:8b:5c:47:74:6e:21:ac:1a:6d:e0:c4:
d6:9a:b4:57:38:31:d9:ba:c3:2f:7f:30:a7:3a:7b:
eb:a2:38:7d:95:65:df:e4:40:0b:21:86:99:d7:d5:
80:15:07:2f:ba:c4:c6:f5:1f:1f:46:9d:6a:0e:38:
d5:2e:75:b3:54:7f:d8:a1:09:c6:c5:62:51:40:ed:
b9:bd:20:a9:19:a8:bd:c8:f4:96:62:e2:d1:a5:11:
25:55:a6:98:2e:ef:5d:c1:15:d7:4a:03:6a:15:f8:
53:a2:ca:01:b0:f1:67:0b:4d:07:a5:fa:66:b3:b9:
92:f2:36:47:f3:47:f2:da:df:e4:ed:82:d7:8b:4f:
16:dc:51:7b:2b:c5:42:64:89:05:46:ed:85:ac:f2:
04:af:7c:27:cb:bd:f6:46:41:65:1b:16:df:a9:b8:
d1:cf:e6:f4:a6:2a:a3:aa:7e:02:5d:f8:60:64:63:
35:47:8c:3d:a8:8f:c4:64:19:a3:67:97:d1:70:10:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:0A:EA:27:04:B4:22:E4:E1:47:88:C6:52:33:65:F9:44:EF:66
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jtMK6icEtCLk4UeIxlIzZflE72Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:12bb::/48
2a0a:2d04:9825::/48
2a0c:7881:98dd::/48
2a0e:15c0:1213::/48
2a0f:7d00:32ba::/48
Signature Algorithm: sha256WithRSAEncryption
69:63:c1:ab:a5:ea:a9:20:a1:d5:2b:c4:dd:56:cb:c1:6c:76:
0e:ca:4d:7c:b2:0a:18:4f:82:9d:33:48:68:77:92:1e:b5:39:
41:45:93:ed:39:df:d6:bd:0e:2a:db:d5:57:0c:89:68:e9:79:
29:28:7d:aa:74:f2:b2:2a:17:b2:18:b9:f1:16:b6:92:59:99:
da:cf:1b:db:a2:73:4b:0c:f9:99:bb:0a:89:82:18:6b:b3:84:
97:54:56:26:7c:ae:61:5a:d4:3e:44:be:9d:f6:1d:c6:77:22:
67:3d:fb:af:16:08:a6:ab:3a:87:38:ac:a9:43:67:a4:79:2f:
ca:61:9e:4c:1c:61:0e:e8:cf:fc:31:25:d3:44:8f:21:32:fa:
9e:d9:ef:bf:44:3a:12:6b:49:54:bc:42:1d:f5:9a:3c:e1:38:
76:a3:93:a1:15:77:78:20:87:72:34:2e:4d:d4:24:b9:d7:4f:
8e:9c:73:a1:8a:0b:10:76:03:1e:94:b2:99:99:99:82:73:2f:
f3:74:d1:c4:90:92:18:ca:fc:b2:a6:02:24:81:a2:08:c7:ae:
d9:b1:ea:29:f0:d4:c0:8b:22:47:b4:d6:5c:44:99:0f:a4:51:
b6:e2:b4:28:e9:ec:9e:ad:95:d5:a8:b7:74:c8:87:0f:9f:bd:
76:44:49:c3
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZXUPlc7hH7ltocsh5974yXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzI2MjA1NjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQzMGFlYTI3MDRiNDIyZTRlMTQ3ODhjNjUyMzM2NWY5NDRlZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiULGEOijjDlK/itwV21DEmsAgzxY
ouAbG5cXZ1RHGgypdh8DdJhLRoSs4oKaVKECx6b5EalZF42yLIjq+g8Xi1xHdG4h
rBpt4MTWmrRXODHZusMvfzCnOnvrojh9lWXf5EALIYaZ19WAFQcvusTG9R8fRp1q
DjjVLnWzVH/YoQnGxWJRQO25vSCpGai9yPSWYuLRpRElVaaYLu9dwRXXSgNqFfhT
osoBsPFnC00Hpfpms7mS8jZH80fy2t/k7YLXi08W3FF7K8VCZIkFRu2FrPIEr3wn
y732RkFlGxbfqbjRz+b0piqjqn4CXfhgZGM1R4w9qI/EZBmjZ5fRcBBs1QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFI7TCuonBLQi5OFHiMZSM2X5RO9mMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvanRNSzZpY0V0Q0xrNFVlSXhsSXpaZmxFNzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKgYRgBK7
AwcAKgotBJglAwcAKgx4gZjdAwcAKg4VwBITAwcAKg99ADK6MA0GCSqGSIb3DQEB
CwUAA4IBAQBpY8GrpeqpIKHVK8TdVsvBbHYOyk18sgoYT4KdM0hod5IetTlBRZPt
Od/WvQ4q29VXDIlo6XkpKH2qdPKyKheyGLnxFraSWZnazxvbonNLDPmZuwqJghhr
s4SXVFYmfK5hWtQ+RL6d9h3GdyJnPfuvFgimqzqHOKypQ2ekeS/KYZ5MHGEO6M/8
MSXTRI8hMvqe2e+/RDoSa0lUvEId9Zo84Th2o5OhFXd4IIdyNC5N1CS510+OnHOh
igsQdgMelLKZmZmCcy/zdNHEkJIYyvyypgIkgaIIx67Zseop8NTAiyJHtNZcRJkP
pFG24rQo6eyerZXVqLd0yIcPn712REnD
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:48:58 2025 by rpki-client