Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7zUxFf4wQfC5I9BJ4q4zXoCeZO0.roa
File: 7zUxFf4wQfC5I9BJ4q4zXoCeZO0.roa (raw, json)
Hash identifier: IuV5eT41orsS8Apqo8Bpzo3x2Uk2/6QQIGlf3MdsaJE=
Subject key identifier: EF:35:31:15:FE:30:41:F0:B9:23:D0:49:E2:AE:33:5E:80:9E:64:ED
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974D873C6A100839A578B1A2A54001B369
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7zUxFf4wQfC5I9BJ4q4zXoCeZO0.roa
Signing time: Sun 08 Jun 2025 03:13:17 +0000
ROA not before: Sun 08 Jun 2025 03:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:87:3c:6a:10:08:39:a5:78:b1:a2:a5:40:01:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 8 03:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef353115fe3041f0b923d049e2ae335e809e64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:f1:e3:5e:f8:55:79:fc:8f:e8:45:52:f0:
6a:9b:34:3d:97:bd:a7:23:80:b9:11:56:07:42:9b:
df:6b:21:9e:10:9c:db:b7:72:88:15:ad:24:f2:b6:
f2:6d:f3:11:26:c4:bd:77:aa:87:aa:60:23:1a:2e:
0c:91:04:61:6d:20:5b:2c:83:b6:e3:a3:8f:45:d2:
9c:10:0f:5d:7e:cf:ab:b3:d1:b8:5a:8c:a1:b3:37:
15:8e:fa:ab:b4:3a:3d:57:9e:b3:4f:97:27:ca:6a:
9f:99:e4:7d:2e:3f:b0:f1:8a:34:dc:a5:50:76:54:
ed:8b:6d:d5:36:c7:2f:77:e3:57:bc:4b:ac:cf:76:
7b:12:07:db:3d:45:c0:57:5d:d1:75:5d:50:67:fb:
41:5e:de:1b:6d:5c:86:31:40:a0:e5:f8:98:e5:3a:
ea:56:0a:c7:44:c4:d5:f0:68:64:75:00:7f:3c:c5:
a3:dd:e7:21:a9:3a:34:a1:7e:43:d1:76:69:bf:35:
1f:97:69:ff:43:de:3a:c1:3e:03:d7:39:ef:21:08:
61:ba:03:92:b8:75:0d:32:52:de:d9:da:ca:76:6c:
7e:d0:7a:2f:8f:41:ef:67:eb:b3:24:bd:78:a7:4f:
d6:66:91:73:d3:07:d2:37:ff:fe:fa:a2:ee:79:6b:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:35:31:15:FE:30:41:F0:B9:23:D0:49:E2:AE:33:5E:80:9E:64:ED
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7zUxFf4wQfC5I9BJ4q4zXoCeZO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
7b:d5:12:eb:9b:d3:e9:3e:61:09:00:81:2a:48:3d:c0:17:a7:
0e:50:d6:d0:49:73:6e:9e:29:30:88:40:48:8d:98:7c:48:d1:
a4:a9:05:1f:77:04:76:a9:1d:ea:86:7d:20:11:d7:11:cb:66:
9e:03:5a:d9:0b:4b:2d:cf:a1:93:87:e5:18:16:ec:8f:94:a8:
8d:a7:6e:0c:6d:01:f6:03:1f:e6:9d:2e:d8:2a:f1:9a:92:c7:
c1:4e:12:c9:b1:f9:94:9e:2c:a3:7b:64:7f:3d:d0:02:b8:b6:
7b:3f:d8:44:47:e4:68:d9:43:7d:dc:32:10:18:e9:59:a6:64:
6a:bb:ed:1c:7b:5d:f0:77:27:13:87:fb:d1:86:7d:e9:b5:7d:
fb:24:b2:32:76:ca:d8:c6:66:1f:ac:06:18:14:40:0e:44:d6:
c7:af:52:a4:30:25:18:ea:ed:df:37:3d:64:1b:90:e3:96:0d:
7a:32:78:82:44:48:da:11:bb:87:d4:62:c8:12:e1:9b:21:d7:
9b:da:cd:dc:a5:8a:d9:95:26:6b:3f:3a:de:41:00:f0:b1:44:
49:26:f9:c4:0c:9d:8a:b1:7c:3d:7e:ce:a1:3c:b9:93:c6:28:
d7:98:b6:63:60:ce:7a:09:5e:14:ec:77:7d:29:f8:87:c9:bb:
46:b3:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:03:17 2025 by rpki-client