Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1ID-x0fRClI2oVGfzqQEO_x7kt8.roa
File: 1ID-x0fRClI2oVGfzqQEO_x7kt8.roa (raw, json)
Hash identifier: RVbciBYxP/5mIYJI0keGtjDhpHIG50q7DOqIoqKekmU=
Subject key identifier: D4:80:FE:C7:47:D1:0A:52:36:A1:51:9F:CE:A4:04:3B:FC:7B:92:DF
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975727D6D791DA488B5F30B2F1DAE00537
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1ID-x0fRClI2oVGfzqQEO_x7kt8.roa
Signing time: Tue 10 Jun 2025 00:05:18 +0000
ROA not before: Tue 10 Jun 2025 00:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:5726:f51d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:27:d6:d7:91:da:48:8b:5f:30:b2:f1:da:e0:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 00:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d480fec747d10a5236a1519fcea4043bfc7b92df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:7b:60:da:8e:a3:fb:fc:f0:90:60:91:b6:
42:29:69:f3:c3:86:4f:2d:2e:26:b4:5d:ca:b5:4b:
5a:7a:dd:9d:ea:be:8e:a2:1a:a1:81:d8:60:54:a6:
ac:25:e1:70:d8:41:dc:27:b5:6f:43:f1:8b:0b:78:
76:09:c7:1f:1a:b3:c0:0c:05:b0:f9:85:e5:7a:69:
9b:a3:bc:74:ef:6d:cc:e5:be:ce:08:70:6f:8a:ab:
eb:9b:65:27:0f:7b:47:9d:f3:a0:e3:ec:a8:2a:c8:
58:09:e8:5d:ec:89:b5:3e:3e:ba:5b:3f:fe:6f:e6:
1f:da:66:d3:fb:1e:3e:7e:21:cd:39:ba:6b:07:cc:
1a:bc:30:a4:2f:76:61:a1:9e:26:6e:c6:1c:34:6b:
40:2d:87:a7:b8:a7:51:93:a0:f2:68:d2:e1:fb:6f:
cb:8a:22:5d:7d:14:fd:fe:be:ce:62:fa:6f:0d:5a:
5d:97:89:ef:da:fe:ad:e6:f1:c3:f2:66:a7:8a:bb:
a7:45:ab:75:64:5b:8a:e7:8c:a0:27:e6:d0:0a:c3:
a2:89:a7:38:1f:a1:83:d3:ea:dd:72:6a:1f:2c:b4:
d1:d7:d6:1c:2d:24:5f:8e:36:20:82:b4:de:76:21:
db:24:2f:c9:56:fb:6b:83:ef:a8:e6:b9:36:91:06:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:FE:C7:47:D1:0A:52:36:A1:51:9F:CE:A4:04:3B:FC:7B:92:DF
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1ID-x0fRClI2oVGfzqQEO_x7kt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:5726:f51d/128
Signature Algorithm: sha256WithRSAEncryption
ac:e6:72:50:af:2f:2b:44:05:d0:dc:2e:09:3a:11:66:d5:d0:
60:c9:e6:ad:86:f6:09:93:02:6e:7d:93:0c:a2:02:67:47:8c:
f8:53:25:1c:3d:26:e0:91:12:7a:cf:c2:4b:47:ca:53:e4:13:
8e:24:8c:11:46:b5:15:af:7c:d4:c1:04:54:74:18:a5:ed:a1:
71:fd:0a:52:cf:0f:00:ea:f0:78:6e:3d:11:fb:66:31:3a:61:
21:48:7a:07:c3:f3:02:fa:c1:f2:0f:7c:7d:30:28:3d:32:b1:
f1:c6:ab:b3:e7:f7:a6:c1:cf:3f:5f:43:99:fd:bd:28:4d:be:
11:6d:e9:19:bf:dc:7a:e3:2c:35:f9:ce:55:d0:84:4c:e7:70:
25:7d:c8:16:a2:e7:d6:4d:9b:8d:ef:0e:cf:3a:11:04:16:50:
78:6b:ca:f6:ea:b8:55:8e:08:02:3e:ff:a8:18:d5:15:8c:61:
a3:ab:ce:cf:59:32:e8:fb:c1:cf:db:f4:09:58:ff:ae:ed:16:
c8:4b:49:94:7a:8d:47:f9:1b:69:ff:00:f0:66:b3:e1:24:0f:
84:c4:c5:6b:82:c1:ba:2b:b6:e9:dc:a5:e4:0b:5d:83:87:d7:
70:59:4a:89:b1:9f:74:4e:4c:8d:de:32:80:fa:3f:9d:b3:d5:
20:49:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:30:50 2025 by rpki-client