Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5LXKkS8AqgWiTLluQ5YsP6tdudo.roa
File: 5LXKkS8AqgWiTLluQ5YsP6tdudo.roa (raw, json)
Hash identifier: kHmN87sHLPp80xAO+9dE8e+q+1AwNW+WfkMV+PLZ9VI=
Subject key identifier: E4:B5:CA:91:2F:00:AA:05:A2:4C:B9:6E:43:96:2C:3F:AB:5D:B9:DA
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973FC35F1B948035885705A4A31E671E5A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5LXKkS8AqgWiTLluQ5YsP6tdudo.roa
Signing time: Thu 05 Jun 2025 11:04:17 +0000
ROA not before: Thu 05 Jun 2025 11:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:3fc3:5001/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:c3:5f:1b:94:80:35:88:57:05:a4:a3:1e:67:1e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 11:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b5ca912f00aa05a24cb96e43962c3fab5db9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:81:2d:44:55:96:02:f3:c8:ea:a7:4a:62:29:
2e:e7:8a:c2:60:1f:9a:ba:04:0c:99:c9:2b:3e:34:
90:96:53:2f:86:53:4c:e4:8e:a3:2f:17:5d:1f:51:
e5:8a:68:c9:a0:9b:49:6d:90:53:aa:94:a2:49:6d:
f5:d1:09:a9:58:f0:58:b4:f7:e3:b0:6c:2c:c3:7d:
8e:65:03:c4:49:94:f2:6a:a3:52:5a:46:9b:47:be:
d5:a7:1f:d4:0f:c9:5f:0b:0b:cb:42:3f:d6:d0:cf:
4f:73:71:c8:b0:8d:51:10:eb:12:00:df:be:ce:d3:
61:91:31:55:5f:62:74:8a:7a:47:0e:af:50:39:39:
35:dd:54:2b:30:f6:53:16:4f:0c:1e:1b:93:a7:c3:
cd:8c:58:91:d5:07:35:2a:1e:24:e5:15:7a:8f:3d:
48:77:1e:75:19:c8:25:9d:e8:9f:a5:1d:45:6a:78:
54:f3:0b:d7:ba:3d:5b:aa:ee:56:21:97:6a:de:90:
a0:b9:ac:99:13:3a:0b:3c:25:02:8c:29:20:30:88:
f6:25:ff:cc:9a:08:b2:1e:5c:b4:7a:78:c8:b3:94:
88:7a:8a:63:56:c9:f6:d2:0d:cd:02:b5:e9:e9:ed:
ba:bf:4e:cb:de:6e:54:a7:d4:50:0d:07:23:a4:1b:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B5:CA:91:2F:00:AA:05:A2:4C:B9:6E:43:96:2C:3F:AB:5D:B9:DA
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5LXKkS8AqgWiTLluQ5YsP6tdudo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:3fc3:5001/128
Signature Algorithm: sha256WithRSAEncryption
63:28:70:9f:95:c5:dc:c1:72:58:d5:db:b7:73:a9:f1:33:bd:
32:7d:b2:b2:a6:1d:a4:b6:c9:06:91:fd:bd:14:f1:f4:cb:a9:
e7:03:f3:43:87:2d:76:8b:a1:96:6f:27:7b:fb:2f:be:a7:4d:
8d:8e:da:22:c7:7c:31:f9:b3:e2:e8:ab:90:97:06:95:8c:f1:
fe:35:73:8f:c8:83:4b:eb:97:75:bd:e4:4c:eb:39:0f:77:5d:
c1:e3:d0:68:82:b1:95:45:44:d3:8e:a2:a1:4c:b4:2a:89:72:
a4:58:9f:ac:a2:d9:c7:fa:86:d0:e9:9e:2f:e5:53:24:52:7c:
75:01:4f:22:6b:52:61:a5:12:39:2b:5c:2e:36:1d:5a:7c:92:
14:bf:b3:5e:cd:44:65:be:6f:23:63:b1:4d:66:93:e5:64:28:
b7:00:81:f3:4a:36:c3:af:3a:3f:38:ce:8f:cc:23:33:c7:0d:
ac:80:43:1d:30:8d:99:89:d6:75:d3:fb:5c:fe:5a:6a:fd:48:
ea:92:fc:75:92:09:77:d6:65:ab:6c:54:d4:a5:de:de:f3:69:
4e:2b:e5:f4:f1:1c:ec:23:fe:3e:7c:b7:da:7d:21:83:f1:9d:
0e:4e:59:80:01:ae:17:f0:10:51:ef:59:f8:4e:8a:e7:45:d2:
ff:6e:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:14:08 2025 by rpki-client