Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2PhxBRn25FKXMz9dNVsX26lJlGQ.roa
File: 2PhxBRn25FKXMz9dNVsX26lJlGQ.roa (raw, json)
Hash identifier: Qn2lVm6MtkcZ7m2RXzKlRVEdmjjPax8pcQ0Hu8QD22o=
Subject key identifier: D8:F8:71:05:19:F6:E4:52:97:33:3F:5D:35:5B:17:DB:A9:49:94:64
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196E4914F071E628B8100F7098E23307086
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2PhxBRn25FKXMz9dNVsX26lJlGQ.roa
Signing time: Sun 18 May 2025 18:04:10 +0000
ROA not before: Sun 18 May 2025 18:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:e491:4cd6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:91:4f:07:1e:62:8b:81:00:f7:09:8e:23:30:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 18 18:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8f8710519f6e45297333f5d355b17dba9499464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:53:ea:e8:2b:33:05:8c:7f:00:59:7f:91:
ed:d0:4c:31:1c:4a:89:a7:88:67:1c:cd:63:00:88:
76:b4:4f:b9:8b:a7:e2:65:35:18:0c:18:93:99:56:
6d:78:8e:b5:2d:43:9c:44:e7:7f:ee:a0:b0:eb:5c:
39:59:e1:c3:e9:cf:cd:f5:7b:94:3e:7f:71:46:45:
df:d2:cd:fb:76:c2:ad:43:66:3a:8c:ee:b5:d6:32:
b8:4b:a2:82:35:c1:fa:83:20:f8:b3:81:b0:79:03:
2e:10:16:c8:9c:46:d3:c6:bf:c3:b6:94:93:2b:41:
1f:86:63:c4:ad:49:40:c3:30:73:a8:56:29:4e:40:
0c:0f:75:08:67:44:35:67:61:0f:bf:ed:d2:15:0f:
43:0d:36:ee:c2:82:c8:0e:a4:55:0e:14:9e:49:b5:
9d:92:64:b4:d6:0f:ff:9e:9c:1a:11:a7:ef:59:d0:
46:68:84:af:e3:31:38:99:0a:bc:26:e8:c6:2c:06:
39:85:98:52:33:d4:7f:f4:d3:3e:bf:ad:99:9f:b6:
cf:7b:b3:82:5c:29:f6:63:9d:fc:ef:3a:ef:f4:cb:
8a:a9:98:a2:b3:cf:ad:8a:8e:1f:79:55:6f:09:26:
47:87:97:fc:8d:0f:40:04:bd:cd:38:cb:f6:4a:37:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:71:05:19:F6:E4:52:97:33:3F:5D:35:5B:17:DB:A9:49:94:64
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2PhxBRn25FKXMz9dNVsX26lJlGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:e491:4cd6/128
Signature Algorithm: sha256WithRSAEncryption
3c:c5:7b:51:6f:e4:94:2c:ac:d2:89:48:8a:93:45:4e:10:09:
a1:e8:99:cd:30:ec:25:5a:d3:0b:5a:2b:8b:93:00:e4:3f:bc:
93:4c:5d:44:72:33:ae:e4:33:a3:8c:2c:f1:ff:de:8d:15:2b:
10:c3:e7:88:26:68:23:00:ed:7d:11:23:39:d1:cd:a3:6e:b5:
a1:4c:04:b3:a7:a2:6e:8e:92:ac:96:e9:ae:fe:b5:a8:33:8c:
4c:3c:ae:43:81:74:67:71:9a:23:4d:58:5b:fc:ba:d7:a3:7c:
c2:20:9b:c5:84:e4:10:f8:34:a8:d2:94:d0:64:f2:32:0f:41:
92:39:d4:86:a7:74:98:ac:d0:90:7e:a2:f9:89:65:2b:76:f7:
7b:f8:8d:58:ea:9d:3f:4e:8e:cc:db:25:ff:4f:3c:67:3e:4a:
05:3c:3f:ed:5d:36:3a:2e:f9:6f:6f:2f:98:f9:5c:34:b5:bf:
0b:ec:d6:d3:ec:03:71:94:3d:64:27:e6:b9:6b:fd:cf:0f:ad:
6f:04:39:03:3b:d8:6f:6c:a0:02:3d:ba:4b:6e:9c:00:30:e2:
1c:4b:fe:7d:f8:5c:67:9a:e0:4b:5d:5e:1b:09:1f:ac:ee:b4:
2a:ee:68:b5:78:59:0d:e3:45:36:fd:13:1b:a0:ef:02:93:0c:
f2:ac:f5:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:54:55 2025 by rpki-client