Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-dzXJlOnugIoidfgQs9HMV4cIww.roa
File: 1-dzXJlOnugIoidfgQs9HMV4cIww.roa (raw, json)
Hash identifier: cynGvKfxJqqMPE4Fr4f3a3TsKCYLDzt6p20Mqw8w/g0=
Subject key identifier: F9:DC:D7:26:53:A7:BA:02:28:89:D7:E0:42:CF:47:31:5E:1C:23:0C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01965873DDD0B09B01F0FD6362092A8C615F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-dzXJlOnugIoidfgQs9HMV4cIww.roa
Signing time: Mon 21 Apr 2025 13:05:10 +0000
ROA not before: Mon 21 Apr 2025 13:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:5872:f73d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:73:dd:d0:b0:9b:01:f0:fd:63:62:09:2a:8c:61:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 21 13:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9dcd72653a7ba022889d7e042cf47315e1c230c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:71:40:21:9d:0c:5e:f5:8a:2d:22:06:b6:
28:d9:68:87:d0:4b:39:2f:29:a1:b8:dc:8e:f6:33:
f8:e8:1f:3b:ba:f0:2b:e6:15:e8:e2:6b:dc:56:23:
8e:55:f3:94:32:2b:41:a1:48:47:7b:77:50:b9:95:
91:f0:e0:bd:b6:24:4b:2b:b8:28:30:3a:03:61:aa:
ad:9e:88:2f:fd:6c:57:e1:be:e9:1d:aa:6f:af:ba:
b2:80:2d:a2:2d:3e:44:2f:cc:90:5f:1e:38:4c:96:
73:7a:ca:b3:63:7e:c2:24:0e:19:5d:63:0e:56:d2:
fc:4d:1c:76:f0:de:f4:44:07:ab:33:0d:9c:6f:19:
ca:49:eb:39:b9:95:4c:b5:08:a3:1b:e9:86:da:53:
64:a6:e8:1c:83:85:8b:b5:02:dc:d6:be:a2:8c:ce:
6e:a1:e5:91:cd:c5:35:24:b2:f6:27:ba:a4:2c:4e:
82:4e:27:63:9c:95:5d:5a:cf:3e:22:54:b7:f7:52:
d0:be:6c:88:78:ce:90:8e:f7:28:ba:72:4b:f0:31:
0d:6b:3a:59:81:8e:fd:c5:48:0b:9e:ff:96:8f:6d:
84:cb:63:1f:96:9b:42:81:74:24:d2:f7:f6:a8:08:
af:74:d0:6b:13:b9:dd:d7:45:44:1b:13:46:8d:69:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:D7:26:53:A7:BA:02:28:89:D7:E0:42:CF:47:31:5E:1C:23:0C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1-dzXJlOnugIoidfgQs9HMV4cIww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:5872:f73d/128
Signature Algorithm: sha256WithRSAEncryption
23:dc:41:1f:44:f0:0a:79:22:f0:9a:6c:e7:30:bd:68:56:b8:
d2:ca:85:45:a3:e6:4d:07:ae:bf:c1:a1:c8:34:e0:dc:de:ee:
c2:c2:dd:de:8c:27:a7:e8:cb:c0:35:68:15:75:6b:37:28:a9:
35:35:ee:71:32:3f:fe:bd:10:b5:b7:2f:36:7b:ad:48:56:9f:
8f:34:7c:9e:ab:7f:ba:58:55:19:06:31:89:86:f0:e1:ef:35:
03:fb:d2:c4:b1:bc:8c:5e:d6:18:cf:d7:43:59:b9:bd:cb:5f:
ab:61:4d:29:81:fa:af:28:96:13:f4:aa:ef:43:4b:56:71:3d:
e6:84:70:c5:3d:9a:da:d8:ab:9b:ee:28:6b:8a:a3:39:f9:ab:
ae:15:18:4c:a1:b3:ef:d1:be:c6:00:86:69:95:70:0c:41:74:
98:9b:45:9c:38:5b:bc:40:ab:e9:6b:a5:f1:ec:e9:6c:46:c2:
b5:79:2f:a7:67:92:cb:b5:79:75:28:c4:d7:03:29:0e:d0:e1:
d7:ee:b3:59:a4:b1:01:f2:3f:da:63:ed:9b:67:c5:d1:56:b1:
d1:01:7a:38:54:3b:1b:98:80:e7:55:29:06:86:cd:19:c9:46:
ec:d9:2a:f8:6c:ab:c0:3e:c9:e5:1d:ee:0c:b9:a5:3e:3b:06:
39:15:4e:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:21 2025 by rpki-client