Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/jxgrq9bXoe06ITiotzoFQn1_IrA.roa
File: jxgrq9bXoe06ITiotzoFQn1_IrA.roa (raw, json)
Hash identifier: vU8Xf5HmqLVWjWHl10jSyYavckScfTwyXAnJUMeKJoM=
Subject key identifier: 8F:18:2B:AB:D6:D7:A1:ED:3A:21:38:A8:B7:3A:05:42:7D:7F:22:B0
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 01980DF79EB00370D53B643AE31A7E34CA40
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/jxgrq9bXoe06ITiotzoFQn1_IrA.roa
Signing time: Tue 15 Jul 2025 12:03:08 +0000
ROA not before: Tue 15 Jul 2025 12:03:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a07:d940::/29 maxlen: 29
2a07:f600:4081::/48 maxlen: 48
2a07:f600:4085::/48 maxlen: 48
2a07:f604::/32 maxlen: 32
2a07:f606::/32 maxlen: 32
2a07:f607::/32 maxlen: 32
2a11:3840::/29 maxlen: 29
2a11:52c0::/29 maxlen: 29
2a11:7780::/29 maxlen: 29
2a11:78c0::/29 maxlen: 29
2a11:8d80::/29 maxlen: 29
2a11:8ec0::/29 maxlen: 29
2a11:fe00::/29 maxlen: 29
2a12:3400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:f7:9e:b0:03:70:d5:3b:64:3a:e3:1a:7e:34:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jul 15 12:03:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f182babd6d7a1ed3a2138a8b73a05427d7f22b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:c6:0a:25:88:6f:2d:ae:0d:cf:f0:3f:2f:
9b:5b:c5:9b:5a:04:93:83:f6:8e:0f:2b:a1:40:b7:
83:f2:a2:86:9b:d6:50:f0:4a:90:de:d5:6f:e4:54:
a5:31:46:33:90:c0:8c:41:d4:dd:10:11:4f:89:9e:
55:50:4d:4e:3c:ba:bd:ff:fc:c7:04:d3:01:a7:56:
4a:78:8e:9f:1d:94:44:43:38:24:63:db:6c:9f:e8:
11:f7:24:3c:e6:39:2c:e0:bd:12:df:87:23:e3:c7:
68:c6:f4:e1:73:02:85:a9:7c:d6:68:d8:ad:a2:ba:
21:a7:6f:2e:05:c1:d1:97:39:5a:b8:c8:7a:c0:37:
12:74:fe:f0:7f:3c:39:36:e3:00:26:82:b7:11:36:
eb:13:e1:9a:e5:e1:d6:c6:db:0c:56:94:38:f3:46:
85:dd:64:95:c2:cc:9d:da:38:af:fd:40:67:77:96:
64:63:ab:c4:f9:59:18:bc:5e:bd:93:c2:f9:b3:5f:
27:9b:8c:fa:46:bb:01:19:f2:bf:28:3a:2e:f5:a2:
63:4c:53:06:81:54:3a:56:a6:e5:63:c2:50:18:e2:
f6:7f:4f:1f:c4:09:bd:a8:d2:43:a3:d4:e1:80:44:
47:4f:ab:79:7f:01:75:ad:a7:77:d1:79:5b:44:7e:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:2B:AB:D6:D7:A1:ED:3A:21:38:A8:B7:3A:05:42:7D:7F:22:B0
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/jxgrq9bXoe06ITiotzoFQn1_IrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d940::/29
2a07:f600:4081::/48
2a07:f600:4085::/48
2a07:f604::/32
2a07:f606::/31
2a11:3840::/29
2a11:52c0::/29
2a11:7780::/29
2a11:78c0::/29
2a11:8d80::/29
2a11:8ec0::/29
2a11:fe00::/29
2a12:3400::/29
Signature Algorithm: sha256WithRSAEncryption
26:07:e1:6b:1e:fa:d8:a7:22:1e:9c:7f:ea:09:e5:5e:ba:f6:
3b:2b:14:9b:86:cb:69:46:48:70:6a:04:46:36:6f:cd:b6:8f:
84:2f:b2:a5:0c:56:23:9a:b2:02:e6:20:11:9a:f7:c5:5e:6d:
35:6d:a3:6c:a7:e0:0b:6b:bc:f2:cc:8f:a4:4b:08:d0:18:dc:
58:f4:d2:40:dd:95:0c:5d:75:9b:ef:6e:0d:66:76:3a:e9:2d:
bf:4e:1f:ba:5c:0c:32:11:e9:31:e9:35:d8:4c:48:8d:99:0a:
e7:49:fc:fa:a0:c6:3a:66:df:04:37:1e:91:8e:9f:7a:79:03:
c5:8b:e3:31:24:e2:f3:68:16:d6:5b:5b:64:5a:08:67:35:e6:
52:69:8e:ce:40:c6:4e:52:c3:00:65:5f:34:16:15:1e:cf:0c:
68:c1:ad:9a:09:66:9d:58:5b:b5:68:97:89:4f:68:da:81:9b:
ba:ee:a7:49:bc:8f:38:d9:cf:fc:a3:1e:48:29:de:c7:82:75:
77:41:c9:53:19:4e:2f:76:26:c7:af:91:09:f6:8e:96:c8:91:
94:2a:3f:57:d5:02:c4:5e:2a:ca:11:a4:ee:e1:7e:fb:31:e0:
88:d6:a6:24:e2:47:37:6c:20:d9:94:42:47:77:af:87:2d:a9:
4a:d2:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:34:55 2025 by rpki-client