Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7Jp2DLCU74aLtaqYA60_-NIeEDk.roa
File: 7Jp2DLCU74aLtaqYA60_-NIeEDk.roa (raw, json)
Hash identifier: moXOaUldcHhCkvCKGsy45Z/Y8qKPbE3edbMm8pabWA8=
Subject key identifier: EC:9A:76:0C:B0:94:EF:86:8B:B5:AA:98:03:AD:3F:F8:D2:1E:10:39
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01964ECB064DEE5D28B739F51EC0693FF0EB
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7Jp2DLCU74aLtaqYA60_-NIeEDk.roa
Signing time: Sat 19 Apr 2025 16:04:10 +0000
ROA not before: Sat 19 Apr 2025 16:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:4ecb:138/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:cb:06:4d:ee:5d:28:b7:39:f5:1e:c0:69:3f:f0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 19 16:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9a760cb094ef868bb5aa9803ad3ff8d21e1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:3b:fe:f8:ae:46:85:49:3a:0b:f2:38:e2:
53:1c:44:37:03:32:4a:e6:e8:5c:3b:13:3d:9e:49:
ba:b1:d7:5f:bd:8f:89:60:4e:f9:23:59:6e:8f:67:
7a:d2:17:9d:72:06:f6:b4:92:88:67:14:a0:ed:5c:
28:47:72:30:e5:36:5c:7a:79:66:c9:7b:65:db:d5:
72:43:cc:23:17:00:ee:5d:21:dc:bb:b4:2d:b6:d1:
b0:2f:fe:08:4a:24:fc:95:fa:0c:b8:c2:21:35:7b:
65:07:f0:e9:02:0c:15:86:b9:b4:8c:74:f4:bd:9e:
4a:b4:ce:ab:91:a2:ce:84:ef:bc:ac:b6:ef:d2:cc:
c8:1f:bf:ce:3f:c7:2b:bd:48:70:27:ec:00:f1:4e:
a7:74:9e:15:4a:39:e1:de:f4:3b:2b:6e:da:c5:05:
ce:38:2f:9d:12:16:6b:3e:eb:34:77:e4:3c:79:25:
c8:73:01:50:61:8e:fa:d3:5e:48:2d:9f:a0:e8:c0:
db:55:35:62:8c:e5:0d:9f:c0:bb:63:5f:ed:cb:03:
b0:86:d7:22:0c:11:3f:38:84:c5:b9:ba:d4:41:9a:
5c:5e:97:c9:82:7c:55:66:cf:d8:73:13:66:a5:7b:
ff:24:e4:0f:a9:5e:4d:fa:81:c3:82:ff:f1:4c:d4:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:76:0C:B0:94:EF:86:8B:B5:AA:98:03:AD:3F:F8:D2:1E:10:39
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7Jp2DLCU74aLtaqYA60_-NIeEDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:4ecb:138/128
Signature Algorithm: sha256WithRSAEncryption
68:12:7e:57:25:f2:9c:13:10:dc:91:50:37:32:06:5d:65:06:
46:f9:f1:d9:dd:92:8c:72:57:00:b8:fe:2c:cd:b3:26:bb:89:
41:02:47:fd:45:75:33:69:12:4a:47:99:a2:48:64:a0:e2:28:
6f:9c:36:b6:ec:05:bd:5c:8e:50:ea:8f:49:3b:e6:5f:9b:44:
9b:e7:07:24:4a:9d:5a:ca:01:3f:a5:53:2b:94:b8:88:46:13:
63:da:8a:fa:3e:b3:5c:97:70:1f:cd:8c:a4:4b:99:50:2f:f1:
ba:74:53:be:62:3a:aa:1a:51:7c:56:1d:65:d1:d3:1a:20:fe:
ab:34:88:fc:4a:fc:f7:0b:c2:ff:96:00:3e:0f:7e:37:55:14:
c9:49:40:72:de:87:73:9a:e9:89:a3:37:dc:c2:e8:ba:c2:1d:
db:0d:0b:3b:e0:2a:c6:31:c0:9f:9c:dd:78:30:a1:de:64:90:
25:8c:51:bb:13:cd:82:36:20:90:10:d9:96:1d:4b:a0:ed:3d:
98:11:c2:73:85:97:df:9d:de:dc:3f:dd:53:36:dd:ee:95:fb:
ea:08:28:ed:db:9c:45:64:03:c4:d5:e5:1a:50:43:c4:57:2b:
c7:c5:f6:2d:37:1c:6c:99:32:8c:45:aa:85:68:79:f2:66:e9:
75:92:63:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:03 2025 by rpki-client