Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/84OsccBTq1S43uU_BC0oo0094WY.roa
File: 84OsccBTq1S43uU_BC0oo0094WY.roa (raw, json)
Hash identifier: LSVZJ9WtdTg2V98mL1OpMsXbbERiQiheNWCXezDSEMk=
Subject key identifier: F3:83:AC:71:C0:53:AB:54:B8:DE:E5:3F:04:2D:28:A3:4D:3D:E1:66
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019750506E6472CED306DBE398D21F7EE69F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/84OsccBTq1S43uU_BC0oo0094WY.roa
Signing time: Sun 08 Jun 2025 16:12:17 +0000
ROA not before: Sun 08 Jun 2025 16:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:50:6e:64:72:ce:d3:06:db:e3:98:d2:1f:7e:e6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 8 16:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f383ac71c053ab54b8dee53f042d28a34d3de166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:d2:62:42:17:57:90:54:4c:90:6c:b7:6a:
6a:d6:5e:2d:eb:af:71:59:21:af:c4:11:f3:7e:2e:
e6:d8:0b:da:68:f1:ee:0f:1b:a6:0d:d9:83:e3:a2:
96:a0:25:bd:04:18:55:4e:f9:b2:53:5e:bf:9b:ab:
99:9a:e8:96:38:73:db:bf:8a:6d:71:41:92:c3:12:
59:17:25:83:0b:a1:88:d8:fa:fd:b3:32:a7:07:16:
49:e3:c7:31:ac:a5:da:4a:9c:ad:98:ff:87:95:a4:
76:97:bf:1f:86:fb:d2:a9:d4:15:0a:c2:67:9d:80:
f3:99:a7:86:25:19:a3:60:b4:01:b9:1d:e0:1a:69:
ba:8b:e5:1f:6c:6e:68:d0:5e:58:26:ce:a7:54:f5:
59:07:f8:56:fb:dd:fd:8b:21:bb:69:84:b5:88:11:
4c:35:b3:e9:3b:37:f2:d1:82:50:f7:19:64:d1:c7:
45:3e:af:1a:11:c6:f1:54:8b:84:f3:cd:1b:ff:d6:
43:3d:be:45:5b:0d:67:f1:bc:59:a5:c6:c1:1b:6f:
d7:15:a4:37:40:cc:9c:7d:e3:24:9c:d3:4d:85:46:
9d:7e:19:c1:79:56:f7:3c:e5:46:d8:99:7a:22:c1:
b8:61:4d:d6:ab:3a:c1:cb:1e:cd:4e:3a:56:4f:78:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:83:AC:71:C0:53:AB:54:B8:DE:E5:3F:04:2D:28:A3:4D:3D:E1:66
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/84OsccBTq1S43uU_BC0oo0094WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
2b:9c:c9:45:3e:15:f8:64:30:8b:d7:c3:a2:ed:51:98:34:cc:
7d:3c:6c:d5:a9:42:2e:85:54:aa:93:82:37:e8:b3:47:d2:2c:
6f:50:c0:78:4e:38:3c:db:47:1f:62:c8:84:37:62:75:6f:15:
ee:5b:fe:df:fb:2e:77:47:15:28:46:01:1e:fb:ce:38:1b:37:
09:e1:5b:7f:f6:62:0b:99:c5:66:38:5c:18:3c:87:bd:86:27:
71:c6:49:0e:1a:1b:f9:7b:ce:e9:4c:f7:b4:bd:95:9d:44:48:
63:5e:b2:72:cf:5c:a1:0f:38:e3:ca:db:75:97:92:5c:51:cf:
db:07:1a:1b:50:60:5c:ae:f9:56:17:28:ec:33:0e:ec:02:f2:
8c:1e:9b:e9:91:7a:3a:ca:4d:6e:e6:b0:1e:a7:2a:14:3f:c1:
4e:cc:cf:e2:eb:f3:29:30:15:70:9c:1d:ed:f7:86:d3:68:17:
fb:c9:d6:4b:2a:32:ca:f6:47:07:6e:c0:6e:6e:6d:2a:3f:61:
ce:2a:24:1f:a4:78:bb:84:de:4a:2c:67:4d:1c:ff:a5:f5:50:
95:65:4c:10:33:26:a4:56:fc:29:ae:43:c2:95:d9:63:76:c9:
ab:5b:f5:84:2d:8b:ce:e5:18:26:ab:98:6b:e9:74:61:29:6a:
95:ae:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:05:35 2025 by rpki-client