Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/NDoXuGiqtydrIJR987JF3xpAjyE.roa
File: NDoXuGiqtydrIJR987JF3xpAjyE.roa (raw, json)
Hash identifier: wqczWO/ROIMbGHftIVm5ZnXFq2qCeUkSMI8+bWodsXk=
Subject key identifier: 34:3A:17:B8:68:AA:B7:27:6B:20:94:7D:F3:B2:45:DF:1A:40:8F:21
Certificate issuer: /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial: 0174010E
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/NDoXuGiqtydrIJR987JF3xpAjyE.roa
Signing time: Fri 21 Jan 2022 13:23:41 +0000
ROA not before: Fri 21 Jan 2022 13:23:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a10:3e84::/30 maxlen: 30
2a07:f240::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24379662 (0x174010e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Validity
Not Before: Jan 21 13:23:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=343a17b868aab7276b20947df3b245df1a408f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:68:ec:32:ab:69:11:11:dd:b1:76:4a:4b:
36:1d:aa:95:3d:b5:cb:49:3e:19:ca:00:58:78:c5:
45:03:0e:89:d8:a2:ab:7b:89:b0:dc:4d:b0:89:db:
ff:76:84:bf:74:e8:99:9b:8e:d1:c9:46:85:e3:a9:
36:a5:7e:11:4b:cb:a9:0e:9e:dc:49:10:d5:db:d9:
d6:05:5c:c7:23:8b:a2:dc:1b:24:b2:16:75:e0:ce:
6d:e5:0f:32:52:ae:7c:d7:7e:f6:57:d8:15:2d:09:
e3:e5:49:f9:09:5b:e9:c8:e4:ed:9a:ba:59:ce:39:
52:db:34:fa:74:69:e6:66:ad:24:4c:e6:86:5f:7c:
a0:b5:4c:5e:7d:c6:90:e2:94:0a:00:ad:d8:f1:e5:
a3:38:b9:ee:b8:f3:a0:5b:49:b2:f8:9c:fe:b4:58:
6a:44:eb:29:20:fb:1a:59:b7:e7:83:f2:82:c5:cc:
03:89:e6:5c:b7:13:9a:a2:fb:d5:24:b5:35:fa:62:
63:94:ad:35:69:50:c7:66:61:18:36:a6:95:64:84:
48:53:6f:9b:ed:be:10:67:3f:86:6d:37:a3:19:0f:
98:5b:4f:fe:20:0d:bf:4c:54:12:86:79:b0:64:66:
50:da:ed:a7:55:eb:6f:d6:34:27:21:4f:18:c8:25:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:17:B8:68:AA:B7:27:6B:20:94:7D:F3:B2:45:DF:1A:40:8F:21
X509v3 Authority Key Identifier:
keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/NDoXuGiqtydrIJR987JF3xpAjyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0f:9bc0::/29
2a10:3e84::/30
Signature Algorithm: sha256WithRSAEncryption
04:dc:a0:67:e8:25:94:95:de:35:4e:a4:a5:ea:52:c8:e0:5e:
46:36:51:99:1b:20:18:e3:5e:a9:12:cc:55:57:f5:28:5c:ae:
ba:78:8b:0b:f5:c8:9f:6e:44:a3:e7:68:ee:14:08:f3:dc:60:
6a:b2:e8:b7:c3:c8:ba:a8:4c:03:1f:d1:fa:14:cb:ab:a5:b4:
ce:71:2f:65:dc:d1:e9:0b:c1:af:24:8b:ae:f6:a1:1d:c3:76:
f0:d0:e6:7a:85:4d:3f:d8:76:90:4b:b9:0a:ea:e4:9d:32:31:
b8:55:63:e8:de:4c:c6:94:44:78:cd:40:6b:de:f0:61:b7:a7:
5d:ba:de:9f:1d:1a:9d:41:8f:76:41:b0:88:9d:b8:10:81:09:
93:18:73:cc:7b:eb:f0:96:41:e1:93:87:94:f1:9d:d1:98:cb:
df:c3:7e:1f:c8:19:e5:28:bc:5c:fb:53:8c:7f:36:27:a8:a5:
e0:5f:1a:7b:12:13:69:58:23:87:88:b3:c3:c1:ab:28:07:c6:
d7:9d:77:17:c7:95:1e:1c:b0:f6:0f:ab:b9:11:7f:82:46:c3:
1f:c7:75:88:67:0a:b1:15:d7:de:57:b2:83:8f:47:b0:16:2f:
0a:b7:fb:74:53:0d:ee:3f:29:75:c3:18:9d:bc:63:0c:dc:f9:
65:f9:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:17:13 2025 by rpki-client