Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2ZEcr5JlmxXjQU5p-lsicUhb52c.roa
File: 2ZEcr5JlmxXjQU5p-lsicUhb52c.roa (raw, json)
Hash identifier: G3ucoa9NejOr4oG1977LSA2dyz5Q6yTNlj7UQmGokOU=
Subject key identifier: D9:91:1C:AF:92:65:9B:15:E3:41:4E:69:FA:5B:22:71:48:5B:E7:67
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968BBC885FA7FD6E2DBA95AB53B71436C1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2ZEcr5JlmxXjQU5p-lsicUhb52c.roa
Signing time: Thu 01 May 2025 12:05:10 +0000
ROA not before: Thu 01 May 2025 12:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8bbc:3a8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:bc:88:5f:a7:fd:6e:2d:ba:95:ab:53:b7:14:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 1 12:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9911caf92659b15e3414e69fa5b2271485be767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:ee:10:b3:5a:9e:82:34:6d:3f:c7:7f:c3:
e6:0d:67:47:6a:84:d5:3c:85:8f:34:8d:24:58:93:
b5:6c:f7:43:20:14:66:44:1b:65:b8:2e:75:bf:37:
af:63:2b:35:17:2e:b6:c8:47:9a:e0:42:ad:ba:d1:
95:a6:22:43:57:e9:0b:55:f1:96:90:4c:fa:5d:0c:
05:40:d7:44:2e:0b:c7:32:9c:88:44:9f:8e:89:ef:
0d:bb:1c:72:c6:f4:5f:aa:79:95:fe:3c:a9:70:ff:
c1:10:a9:cd:36:21:ec:09:11:26:0a:10:d5:0f:b4:
73:d2:66:18:53:c7:a7:6a:a1:41:2c:d4:ea:6b:f2:
77:7f:3b:27:d7:20:33:dd:52:64:71:54:d8:c8:21:
4b:f5:67:7c:6b:c1:ac:8b:19:c0:92:73:08:96:b6:
1f:07:8b:ff:f3:8f:87:42:aa:03:db:f0:ac:c2:19:
27:77:47:cc:75:08:0b:26:76:56:72:48:da:97:fc:
a6:7f:68:46:1b:3a:9c:ea:3d:de:dc:83:67:70:17:
be:00:bd:35:62:f6:84:45:e7:ba:bc:0f:85:cd:2b:
f5:40:fd:01:10:e0:56:f2:ba:d7:4c:3d:d6:0f:ca:
c9:76:e1:58:41:eb:bc:b0:c0:f2:9c:23:5f:fd:01:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:1C:AF:92:65:9B:15:E3:41:4E:69:FA:5B:22:71:48:5B:E7:67
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2ZEcr5JlmxXjQU5p-lsicUhb52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8bbc:3a8/128
Signature Algorithm: sha256WithRSAEncryption
18:ff:61:01:84:39:8f:f1:dc:04:b8:d7:07:7c:d6:f4:17:b0:
6d:8b:8d:75:f7:ec:e5:a3:e1:41:b6:2b:41:95:53:25:f1:dc:
ba:9f:83:96:57:8f:ca:83:b4:10:aa:8f:05:a3:70:03:ff:eb:
de:98:dc:42:b9:41:3a:55:c5:55:fa:8a:d8:69:16:1d:75:24:
86:c4:14:9a:53:ea:68:2e:7d:d3:8a:ab:41:26:28:5e:bd:82:
89:39:28:6c:c8:b1:b7:4f:0e:2a:1e:9d:61:52:d0:bf:bd:4f:
b1:26:8c:a5:38:b7:5a:df:82:94:13:c0:50:de:d8:74:f3:03:
fc:bc:57:f7:54:f8:19:8c:a7:12:28:9d:26:a6:38:6b:14:20:
04:9e:83:48:f7:6b:53:de:17:ca:ac:d1:2e:21:da:e2:c4:72:
44:22:66:d2:82:e8:6a:af:fa:ab:49:37:11:52:7b:bb:51:d4:
46:f8:4a:ee:67:d5:29:36:3b:4d:8b:c8:52:e4:01:2a:27:2e:
1a:71:62:ae:1b:51:4f:01:c5:59:19:b3:9f:b4:f8:1a:64:65:
63:5b:d0:f2:df:f8:3e:d7:c1:37:ca:68:52:53:b1:77:0f:4c:
86:a0:90:a0:cb:7b:be:d6:b6:08:4a:68:8b:04:f8:a4:db:53:
e8:1e:b7:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:41:41 2025 by rpki-client