Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7qzb7QOgiB9iADoKpy8zTnc0r0Y.roa
File: 7qzb7QOgiB9iADoKpy8zTnc0r0Y.roa (raw, json)
Hash identifier: EcIxRnA03Q5RCDIl6PLKKyvfvCU0nxwcXR/fUzog9jY=
Subject key identifier: EE:AC:DB:ED:03:A0:88:1F:62:00:3A:0A:A7:2F:33:4E:77:34:AF:46
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196EA5D62659DE3ED0CFD0D57C9A0B44F5C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7qzb7QOgiB9iADoKpy8zTnc0r0Y.roa
Signing time: Mon 19 May 2025 21:05:10 +0000
ROA not before: Mon 19 May 2025 21:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ea5c:aa7b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ea:5d:62:65:9d:e3:ed:0c:fd:0d:57:c9:a0:b4:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 19 21:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeacdbed03a0881f62003a0aa72f334e7734af46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:b6:eb:1b:b2:d7:fb:1c:fc:7e:13:db:cd:
10:68:90:46:74:9c:9e:dc:0d:ed:1b:a8:e3:e9:e4:
a9:35:d5:c2:29:ab:37:7f:81:76:93:77:c8:ae:bd:
35:92:b6:8f:5c:23:22:73:ad:d2:dd:27:5f:97:81:
cd:fc:72:10:d6:51:25:f0:98:31:08:6c:69:38:6b:
b5:30:d1:7a:7c:93:10:36:b6:c6:f6:5c:4b:6e:85:
e9:49:76:62:4a:6c:07:b7:49:16:da:09:db:7d:ab:
99:31:e7:c7:57:b2:bd:da:e0:00:ab:75:1a:60:fa:
44:47:d9:d9:62:d5:f1:de:ac:67:41:d4:0b:3d:3f:
16:3c:9a:80:b5:95:9a:46:4f:10:fb:f7:01:18:66:
f0:66:4f:da:a6:d4:03:7a:fc:29:de:bb:3e:b5:c4:
c3:b3:3f:e3:d6:1e:b5:0d:11:6b:1c:cb:bd:c9:d1:
5b:d4:ef:00:3b:29:12:2d:20:4d:87:80:07:4b:7e:
98:9b:9d:6a:4e:1d:be:91:05:17:a3:87:ad:44:7b:
5e:a9:92:f5:47:85:8f:de:7e:bd:bd:7d:44:2f:43:
29:9d:8a:9b:a6:8f:5d:45:1f:3a:b2:49:f8:5f:d4:
ad:d0:32:cf:63:92:4a:3f:33:38:1a:2b:12:a9:b5:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:DB:ED:03:A0:88:1F:62:00:3A:0A:A7:2F:33:4E:77:34:AF:46
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7qzb7QOgiB9iADoKpy8zTnc0r0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ea5c:aa7b/128
Signature Algorithm: sha256WithRSAEncryption
32:31:e7:48:39:40:e2:b5:b1:a3:c3:0f:f5:3a:fd:f2:70:74:
31:df:9a:6a:31:1d:15:92:74:9d:8a:b9:2d:e1:30:4b:40:3d:
bb:1a:c7:dd:18:91:76:dc:6e:48:1d:48:53:b8:0f:c4:79:e9:
4b:2b:2c:a8:e1:a3:16:01:c9:61:6b:e3:08:cd:47:d0:c5:6d:
4a:af:ac:74:6d:66:6a:cd:95:5c:3d:81:7a:7a:cc:c4:1a:9a:
e8:34:6f:45:07:6b:3d:7c:d4:6e:fe:5e:75:39:09:3e:00:95:
55:2a:ed:0e:86:80:fb:58:ff:8f:5f:6d:f8:c3:b6:85:82:31:
48:14:2e:b5:28:6e:78:08:9d:f1:23:7f:3d:04:8c:12:e9:bb:
0b:a9:26:fd:5c:a1:10:e7:c8:5f:70:60:22:cc:48:49:c5:e2:
fb:9f:6e:05:3d:d7:21:68:af:fb:dd:0f:6c:b8:7c:f8:58:ba:
9b:75:cc:6a:6d:ac:c7:dc:72:42:9b:b6:23:a2:03:bb:dd:b7:
5c:a8:0f:86:ec:3f:90:8d:1c:50:52:bc:43:d5:14:a5:c0:8b:
99:8d:1b:c0:82:f4:40:15:49:ed:be:37:67:ce:6f:7e:aa:6a:
1e:0b:98:93:51:74:95:b8:01:c6:f7:47:40:c3:3c:dc:5d:ae:
a2:78:8c:10
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbqXWJlnePtDP0NV8mgtE9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTE5MjEwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWFjZGJlZDAzYTA4ODFmNjIwMDNhMGFhNzJmMzM0ZTc3MzRhZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40K26xuy1/sc/H4T280QaJBGdJye
3A3tG6jj6eSpNdXCKas3f4F2k3fIrr01kraPXCMic63S3Sdfl4HN/HIQ1lEl8Jgx
CGxpOGu1MNF6fJMQNrbG9lxLboXpSXZiSmwHt0kW2gnbfauZMefHV7K92uAAq3Ua
YPpER9nZYtXx3qxnQdQLPT8WPJqAtZWaRk8Q+/cBGGbwZk/aptQDevwp3rs+tcTD
sz/j1h61DRFrHMu9ydFb1O8AOykSLSBNh4AHS36Ym51qTh2+kQUXo4etRHteqZL1
R4WP3n69vX1EL0MpnYqbpo9dRR86skn4X9St0DLPY5JKPzM4GisSqbWDPQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFO6s2+0DoIgfYgA6CqcvM053NK9GMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvN3F6YjdRT2dpQjlpQURvS3B5OHpUbmMwcjBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW6lyqezANBgkqhkiG9w0BAQsFAAOCAQEAMjHnSDlA4rWxo8MP9Tr98nB0
Md+aajEdFZJ0nYq5LeEwS0A9uxrH3RiRdtxuSB1IU7gPxHnpSyssqOGjFgHJYWvj
CM1H0MVtSq+sdG1mas2VXD2BenrMxBqa6DRvRQdrPXzUbv5edTkJPgCVVSrtDoaA
+1j/j19t+MO2hYIxSBQutShueAid8SN/PQSMEum7C6km/VyhEOfIX3BgIsxIScXi
+59uBT3XIWiv+90PbLh8+Fi6m3XMam2sx9xyQpu2I6IDu923XKgPhuw/kI0cUFK8
Q9UUpcCLmY0bwIL0QBVJ7b43Z85vfqpqHguYk1F0lbgBxvdHQMM83F2uoniMEA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:04:11 2025 by rpki-client