Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/l97pp37C0Ejl6pKJ2rD1iJnpaH4.roa
File: l97pp37C0Ejl6pKJ2rD1iJnpaH4.roa (raw, json)
Hash identifier: 5jZUgatx8KoiTTrI7sYgxlOdJEpRyUm4XySieqBTvOw=
Subject key identifier: 97:DE:E9:A7:7E:C2:D0:48:E5:EA:92:89:DA:B0:F5:88:99:E9:68:7E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01948E8AC592D1F6B3DB0C885BFC06474FF4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/l97pp37C0Ejl6pKJ2rD1iJnpaH4.roa
Signing time: Wed 22 Jan 2025 15:04:06 +0000
ROA not before: Wed 22 Jan 2025 15:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:6b40::/29 maxlen: 29
2a0d:6ec0::/29 maxlen: 29
2a0d:7140::/29 maxlen: 29
2a0d:8cc0::/29 maxlen: 29
2a0d:9740::/29 maxlen: 29
2a0d:97c0::/29 maxlen: 29
2a0d:a3c0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:b540::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0d:c1c0::/29 maxlen: 29
2a0d:cc40::/29 maxlen: 29
2a0d:ce40::/29 maxlen: 29
2a0d:d3c0::/29 maxlen: 29
2a0d:e1c0::/29 maxlen: 29
2a0d:e240::/29 maxlen: 29
2a0d:e340::/29 maxlen: 29
2a0d:f140::/29 maxlen: 29
2a0d:f5c0::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a0e:19c0::/29 maxlen: 29
2a0e:adc0::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:2200::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:ec0::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4480::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:6040::/29 maxlen: 29
2a11:62c0::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:8bc0::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9900::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:a240::/29 maxlen: 29
2a11:a2c0::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c2c0::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:57c0::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d380::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:8a:c5:92:d1:f6:b3:db:0c:88:5b:fc:06:47:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 22 15:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97dee9a77ec2d048e5ea9289dab0f58899e9687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:36:b8:cf:df:b5:0f:b9:dc:49:0b:8c:e4:
d4:cd:b6:bc:52:9d:2a:21:ad:8a:43:89:14:27:9b:
21:e2:69:0d:b3:ab:39:da:31:be:ed:2a:f6:32:12:
a5:b8:bc:a4:b4:79:06:81:fa:3e:3f:45:d2:b3:06:
ff:0a:06:8d:58:d1:e5:cc:3f:3e:2e:c2:a6:7e:e6:
70:96:58:dd:2c:fc:6b:14:0e:52:c6:d0:10:b6:77:
53:3d:a2:08:1a:d3:2a:ae:bf:eb:06:d2:43:a1:ab:
ec:5c:da:2e:f7:4e:2c:3d:c8:b3:43:1b:19:2d:32:
ba:98:25:f2:a5:53:ae:9e:bf:63:56:ac:b6:f8:e3:
fd:58:e9:d3:47:cc:c8:5b:ab:2b:01:54:38:04:25:
45:9f:3e:85:85:dd:9e:de:6d:aa:c5:40:db:8b:df:
d3:86:0f:86:3c:4e:3f:02:d3:ea:15:8b:31:b6:db:
64:05:79:5e:10:31:47:aa:42:eb:23:fc:5b:d6:36:
5a:39:85:e7:7f:3a:c9:c9:53:15:52:a6:37:fe:9d:
a6:eb:96:74:af:ba:c4:4d:b0:f2:aa:15:1b:89:c0:
87:80:c8:59:ee:b3:d7:4b:ca:1d:6b:11:47:2a:d1:
14:0d:47:c3:3a:51:ae:28:40:f5:dc:a9:bd:f4:b5:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:E9:A7:7E:C2:D0:48:E5:EA:92:89:DA:B0:F5:88:99:E9:68:7E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/l97pp37C0Ejl6pKJ2rD1iJnpaH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:6b40::/29
2a0d:6ec0::/29
2a0d:7140::/29
2a0d:8cc0::/29
2a0d:9740::/29
2a0d:97c0::/29
2a0d:a3c0::/29
2a0d:ad40::/29
2a0d:b2c0::/29
2a0d:b540::/29
2a0d:b840::/29
2a0d:c1c0::/29
2a0d:cc40::/29
2a0d:ce40::/29
2a0d:d3c0::/29
2a0d:e1c0::/29
2a0d:e240::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c0::/29
2a0d:fbc0::/29
2a0e:8c0::/29
2a0e:19c0::/29
2a0e:adc0::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:2200::/29
2a0f:9a40::/29
2a0f:cb80::/29
2a0f:e180::/29
2a11:ec0::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:25c0::/29
2a11:2d00::/29
2a11:4480::/29
2a11:4f00::/29
2a11:6040::/29
2a11:62c0::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8980::/29
2a11:8bc0::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9900::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:a240::/29
2a11:a2c0::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c2c0::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:57c0::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:ce00::/29
2a12:cf80::/29
2a12:d200::/29
2a12:d380::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
07:c0:15:47:ec:61:8d:68:79:d4:31:a8:a2:98:2a:bf:33:5d:
eb:4f:d7:6f:f4:cc:9f:1e:d5:6b:3a:af:85:27:dc:62:83:cc:
3c:ae:30:84:fd:9e:08:98:b7:7e:ff:12:04:b5:24:87:47:cd:
26:6d:15:51:7c:bb:2d:61:0d:3d:0c:74:dd:c7:a0:a2:21:90:
3e:27:70:2a:fd:9d:81:a8:76:94:d8:f6:13:f6:52:95:14:a4:
07:5d:b5:c7:1a:dd:eb:79:4c:9b:fc:5c:56:49:3d:15:f8:75:
1f:c8:d7:a4:b8:44:59:20:a8:a3:d5:38:b5:5e:0b:c1:20:c1:
a4:02:9b:f4:be:71:b5:97:09:b7:d2:63:0e:ba:42:0f:20:c8:
0b:e7:86:60:d7:4a:cd:7f:57:95:a6:c8:25:e2:de:40:53:ed:
04:4a:31:b3:7c:f4:67:3b:15:38:74:80:a1:ce:3f:62:27:f2:
8f:62:b7:36:e5:52:c9:9e:45:5c:44:13:81:09:af:22:bc:f0:
d3:5e:44:99:aa:14:eb:49:71:fe:18:1a:8f:c1:08:53:4d:87:
19:f1:ab:59:a8:aa:37:23:b2:a1:7a:e9:f2:2d:b8:34:f7:e4:
d5:c4:85:20:73:15:8b:86:ad:cc:02:c7:39:a7:bd:f6:69:3c:
2a:ce:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:45 2025 by rpki-client