Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7ICz6HCjnOCEtLmsThvkl7trvWg.roa
File: 7ICz6HCjnOCEtLmsThvkl7trvWg.roa (raw, json)
Hash identifier: zAUz/FPpt/hEQppYU91yRJosgwaAh5I+ZzlRzdkO/Sc=
Subject key identifier: EC:80:B3:E8:70:A3:9C:E0:84:B4:B9:AC:4E:1B:E4:97:BB:6B:BD:68
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019749A23980986D15548A018ACFB1533EBC
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7ICz6HCjnOCEtLmsThvkl7trvWg.roa
Signing time: Sat 07 Jun 2025 09:04:17 +0000
ROA not before: Sat 07 Jun 2025 09:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:49a2:11c0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:a2:39:80:98:6d:15:54:8a:01:8a:cf:b1:53:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 7 09:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec80b3e870a39ce084b4b9ac4e1be497bb6bbd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:b9:fd:1f:d3:08:2e:6a:97:23:b4:6a:7a:
df:4f:1b:3d:89:eb:a3:dd:46:6d:03:0b:7a:99:17:
dd:db:28:59:17:c6:73:74:eb:0f:91:be:ab:99:79:
a9:aa:2f:04:b1:c7:8a:cc:f8:f3:20:85:e4:cb:0e:
5e:0e:8a:31:dc:cf:5c:9e:dc:c3:3e:02:40:4f:c5:
98:65:5c:f3:6e:fc:15:df:75:51:75:f9:6e:f0:bf:
e5:b9:af:61:3c:f8:de:c7:9d:ac:85:d9:9e:ae:cc:
1d:1e:bf:50:54:f2:fd:b9:94:fc:15:b5:c4:fc:9f:
fd:7a:9e:50:ad:11:88:42:93:73:a4:61:df:69:7c:
0b:cd:37:8e:c4:5f:4a:0f:57:12:f1:33:39:09:fb:
fb:57:f7:94:73:1b:54:da:09:4f:75:c9:0d:14:db:
5f:26:33:e0:41:6c:88:99:fa:83:c8:42:f9:33:4b:
be:94:15:6e:41:36:10:2a:a9:d6:60:01:cf:ad:82:
f2:09:c5:f1:e9:26:24:5f:ec:f9:a4:7d:e6:6c:17:
a2:3f:9f:f4:a7:b3:f9:da:2a:93:57:b9:34:86:16:
d9:e5:f1:f5:20:46:48:61:81:94:5a:05:76:71:0d:
4c:d7:b2:77:a8:4b:65:19:62:20:0c:b3:d4:34:a4:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:B3:E8:70:A3:9C:E0:84:B4:B9:AC:4E:1B:E4:97:BB:6B:BD:68
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7ICz6HCjnOCEtLmsThvkl7trvWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:49a2:11c0/128
Signature Algorithm: sha256WithRSAEncryption
9e:31:1c:0a:e2:49:7b:fd:d0:bd:84:5c:54:24:03:b3:99:cc:
9f:ad:8b:b2:38:e1:8c:12:62:72:72:92:d3:bc:11:18:e2:0a:
df:70:ba:8a:70:33:8e:4d:5b:d8:6b:bd:69:63:d3:ee:cb:0c:
aa:c4:07:c5:51:62:78:a3:28:c8:74:39:b3:44:4a:66:85:0c:
2b:6f:b8:e3:41:b3:03:54:e3:a5:5c:20:ef:ee:ce:ef:a7:8f:
78:93:38:72:e4:41:a8:9c:6b:d9:d5:e8:c6:41:c8:74:1f:7f:
f6:1b:00:29:69:0b:00:b8:27:08:d2:d5:bd:24:32:62:54:b8:
51:5d:3c:d5:8b:ab:59:d5:47:8d:91:0e:8d:91:0e:42:2e:1a:
fb:6b:17:0e:a9:86:d0:d1:3e:62:03:58:36:ff:83:66:e8:b8:
c8:b7:ee:b3:43:49:d9:7b:d8:0b:91:f4:76:82:a3:ae:33:04:
15:91:9d:02:20:0c:c4:a6:61:9e:07:d1:dd:b5:d9:38:e6:6f:
6b:e5:15:19:09:f3:e2:0d:35:b4:c7:6c:92:6c:54:87:37:eb:
41:e9:90:43:c2:e2:ec:57:f9:4b:95:ec:6a:5b:82:0e:fd:4a:
5b:55:1a:c8:d9:31:b6:ac:69:22:36:52:73:8a:41:12:e4:b7:
1b:04:a9:f6
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZdJojmAmG0VVIoBis+xUz68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA3MDkwNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzgwYjNlODcwYTM5Y2UwODRiNGI5YWM0ZTFiZTQ5N2JiNmJiZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFK5/R/TCC5qlyO0anrfTxs9ieuj
3UZtAwt6mRfd2yhZF8ZzdOsPkb6rmXmpqi8EsceKzPjzIIXkyw5eDoox3M9cntzD
PgJAT8WYZVzzbvwV33VRdflu8L/lua9hPPjex52shdmerswdHr9QVPL9uZT8FbXE
/J/9ep5QrRGIQpNzpGHfaXwLzTeOxF9KD1cS8TM5Cfv7V/eUcxtU2glPdckNFNtf
JjPgQWyImfqDyEL5M0u+lBVuQTYQKqnWYAHPrYLyCcXx6SYkX+z5pH3mbBeiP5/0
p7P52iqTV7k0hhbZ5fH1IEZIYYGUWgV2cQ1M17J3qEtlGWIgDLPUNKTTlwIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFOyAs+hwo5zghLS5rE4b5Je7a71oMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvN0lDejZIQ2puT0NFdExtc1RodmtsN3RydldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kQMRACABBnwAZP//AAABl0miEcAwDQYJKoZIhvcN
AQELBQADggEBAJ4xHAriSXv90L2EXFQkA7OZzJ+ti7I44YwSYnJyktO8ERjiCt9w
uopwM45NW9hrvWlj0+7LDKrEB8VRYnijKMh0ObNESmaFDCtvuONBswNU46VcIO/u
zu+nj3iTOHLkQaica9nV6MZByHQff/YbAClpCwC4JwjS1b0kMmJUuFFdPNWLq1nV
R42RDo2RDkIuGvtrFw6phtDRPmIDWDb/g2bouMi37rNDSdl72AuR9HaCo64zBBWR
nQIgDMSmYZ4H0d212Tjmb2vlFRkJ8+INNbTHbJJsVIc360HpkEPC4uxX+UuV7Gpb
gg79SltVGsjZMbasaSI2UnOKQRLktxsEqfY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:11 2025 by rpki-client