Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-RZ82ct0uNO-sFST-UZNZSscfOA.roa
File: 1-RZ82ct0uNO-sFST-UZNZSscfOA.roa (raw, json)
Hash identifier: X+iNbsukYtW5M+QiafZe1QuSHSekYhjSf/rWEEbTnNc=
Subject key identifier: F9:16:7C:D9:CB:74:B8:D3:BE:B0:54:93:F9:46:4D:65:2B:1C:7C:E0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196AAA2AEB55073271C7857143C73B57D07
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-RZ82ct0uNO-sFST-UZNZSscfOA.roa
Signing time: Wed 07 May 2025 12:05:10 +0000
ROA not before: Wed 07 May 2025 12:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:aaa1:c3b5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:a2:ae:b5:50:73:27:1c:78:57:14:3c:73:b5:7d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 7 12:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9167cd9cb74b8d3beb05493f9464d652b1c7ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:7c:22:11:5f:4c:09:83:0f:ca:4d:f4:4b:
0a:46:d4:b3:34:b5:4d:a2:95:cb:f7:b7:06:72:6e:
24:3e:da:8e:f0:93:96:fa:9f:75:c6:2d:85:46:38:
8a:bf:82:68:24:dc:19:df:9e:d7:12:fd:17:48:54:
d2:66:82:e3:12:26:aa:5f:d3:5e:29:87:7c:5a:52:
e5:a3:aa:33:15:38:bc:a9:71:ea:75:c8:b8:1f:75:
d7:45:05:57:3c:2d:7d:ee:fc:f5:80:36:ec:dd:9b:
45:34:30:b4:bf:6b:45:16:bb:bc:b4:b5:93:bb:5d:
79:3d:1e:ae:d2:12:e6:6f:9c:00:b9:e4:d8:8d:2e:
67:25:32:ca:3d:d1:bb:a1:bc:3e:35:2f:22:25:08:
e7:0e:d6:94:b8:f0:4c:af:7e:aa:6d:e8:29:8f:b6:
3d:80:e7:80:86:49:72:21:f4:58:19:8a:8c:7f:e6:
b5:e4:70:8a:10:32:35:da:cf:b0:c9:ba:1d:cb:01:
e7:7f:49:21:53:67:a3:3b:c1:86:2f:42:41:6e:59:
3c:26:f5:cf:47:23:50:c6:13:4e:65:06:2b:ae:36:
e9:c0:23:86:dd:a5:a8:00:85:92:14:c4:09:90:4f:
58:6e:e9:4d:0f:3a:a2:aa:c4:aa:26:4f:a9:44:27:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:7C:D9:CB:74:B8:D3:BE:B0:54:93:F9:46:4D:65:2B:1C:7C:E0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-RZ82ct0uNO-sFST-UZNZSscfOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:aaa1:c3b5/128
Signature Algorithm: sha256WithRSAEncryption
76:84:12:84:a8:c1:35:64:d9:4d:83:00:7e:b5:09:41:08:03:
a6:11:7b:e1:23:b1:c6:66:f0:74:71:a4:4b:88:de:b6:74:eb:
91:de:46:1b:0c:71:39:2a:6c:b2:55:c1:d4:20:59:b7:a6:c9:
54:81:43:b0:8e:47:02:bc:53:e4:83:b3:9c:59:c7:13:13:e3:
09:14:a1:92:8a:92:02:99:e8:c3:6d:0f:8f:76:d7:49:b8:1e:
66:d3:dc:1e:b3:3e:86:31:29:26:89:8f:c8:0a:33:7c:5d:31:
9b:9a:5b:1e:db:87:84:3f:bb:c1:4d:1c:b5:e5:89:5f:9a:4c:
5e:ba:4f:73:bc:b0:1d:51:5c:d0:d7:e8:89:25:d8:02:c4:e0:
f8:df:9a:55:48:79:cc:b0:a8:4e:6e:20:cc:40:29:a6:56:d2:
30:47:79:40:27:d8:a4:72:ab:c8:4c:8b:a4:99:f0:46:2b:64:
07:16:16:60:a5:8f:0c:c8:d8:dc:52:53:d1:1b:23:33:33:d5:
35:ad:c8:41:d1:7f:c9:ea:be:d8:38:2c:33:94:90:fa:27:a6:
08:43:b2:e6:de:5a:f0:b0:f0:54:1c:84:0d:fc:25:02:6e:c7:
dc:35:fa:a8:dd:8e:10:f3:1c:37:0a:cc:0c:38:a6:ba:c1:cb:
6e:20:06:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:37:16 2025 by rpki-client