Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2mEJlq2KBtnSfRCLnNU3XsaAcRQ.roa
File: 2mEJlq2KBtnSfRCLnNU3XsaAcRQ.roa (raw, json)
Hash identifier: JqcfxXBDLFJw1X7B7iQDy0Jw95ZZpW20uf6yDSLm1fo=
Subject key identifier: DA:61:09:96:AD:8A:06:D9:D2:7D:10:8B:9C:D5:37:5E:C6:80:71:14
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019672D78A8FDAB9566FCB437EAE54ADF249
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2mEJlq2KBtnSfRCLnNU3XsaAcRQ.roa
Signing time: Sat 26 Apr 2025 16:04:10 +0000
ROA not before: Sat 26 Apr 2025 16:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:72d7:6b87/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d7:8a:8f:da:b9:56:6f:cb:43:7e:ae:54:ad:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 26 16:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da610996ad8a06d9d27d108b9cd5375ec6807114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:87:b8:d9:3f:79:91:93:52:d4:b9:9a:c7:
72:1c:89:1b:86:76:9b:4e:1f:c8:22:1b:63:3c:85:
c1:c6:05:93:d9:fb:f2:01:2c:21:5f:b0:c3:d7:e0:
13:69:e1:cb:c9:6f:b9:45:21:b1:03:4e:af:cb:c8:
d6:e5:97:d2:04:22:98:44:7d:0a:98:35:9b:9d:33:
bd:e2:4b:62:a1:cd:97:51:8a:b8:b2:0d:38:54:f1:
95:b8:6e:66:99:fb:c7:44:00:87:ce:e7:c2:4f:79:
3b:0f:3b:fb:6e:69:d8:cb:89:6a:4f:6a:38:82:34:
dd:f6:96:14:79:54:b5:32:26:2f:b6:ff:ac:7c:2c:
98:98:6d:6b:e6:1e:3a:7a:51:76:ec:f3:3a:3d:cc:
dc:24:f3:f0:65:a8:41:59:59:fb:8e:26:fe:91:fa:
78:08:6b:f5:97:18:8a:bd:92:91:51:cf:bc:66:3d:
0c:3d:ca:3e:a9:2d:13:c2:f4:15:0a:9b:11:17:75:
e7:05:a1:1c:03:f9:1a:cf:78:cc:62:21:ea:7c:c4:
36:c1:1a:1d:7e:92:f4:d6:cb:e8:b1:5d:6b:23:62:
e4:09:70:4c:1b:03:b9:d7:2a:9e:9f:9d:e9:2e:5f:
0d:68:df:a6:55:c2:f9:af:69:01:8e:ef:fa:41:7a:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:09:96:AD:8A:06:D9:D2:7D:10:8B:9C:D5:37:5E:C6:80:71:14
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2mEJlq2KBtnSfRCLnNU3XsaAcRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:72d7:6b87/128
Signature Algorithm: sha256WithRSAEncryption
79:27:c2:85:b3:81:b6:de:37:fc:f7:7a:c9:af:63:89:fd:6a:
07:04:48:99:3a:49:59:7e:64:4d:d5:c8:c2:d3:f1:ce:03:f3:
a3:9c:6b:89:8c:7d:b2:3a:1b:65:6b:c3:ba:fc:9f:bf:7b:4e:
c8:37:e4:7e:aa:6e:d8:b6:ca:57:f7:f2:86:7d:fb:a9:04:53:
1b:5d:ca:fd:69:d6:b5:76:c7:b8:6d:78:37:94:4d:61:c9:cb:
89:8b:29:99:58:a5:28:97:5c:d0:42:1c:29:4d:70:a8:59:f6:
17:91:82:05:d9:ae:85:76:a2:7c:85:30:66:e2:88:2e:52:a1:
0b:14:69:77:71:2d:c5:44:07:69:d1:56:40:14:a2:aa:72:47:
74:75:64:61:33:c5:c8:19:c7:e9:c9:1f:f7:00:23:02:f5:59:
b1:7a:a0:25:e3:15:fe:7e:40:5a:13:9d:1c:de:65:59:c9:67:
dd:c2:95:c9:44:c8:65:4b:ae:2d:d0:c3:73:7b:59:86:7f:31:
0f:06:d5:59:23:31:e3:04:0b:7e:4a:7d:79:51:e1:3e:50:93:
a9:c8:c3:51:90:12:c7:61:95:31:d5:a1:b3:f6:84:af:61:27:
23:b7:de:f4:83:4e:3e:ef:b1:c3:46:5b:bd:b2:e2:cb:a9:18:
e0:5f:3a:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:52 2025 by rpki-client