Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/A24as9hd_XfxwJ2YENVRCz4kGL0.roa
File: A24as9hd_XfxwJ2YENVRCz4kGL0.roa (raw, json)
Hash identifier: IT4fNvV32amuCh0BF45jtI3m7Rzk5XKxX9rkKpq509A=
Subject key identifier: 03:6E:1A:B3:D8:5D:FD:77:F1:C0:9D:98:10:D5:51:0B:3E:24:18:BD
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974C3CBABC7A2A0CDFC9767FFE95688E82
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/A24as9hd_XfxwJ2YENVRCz4kGL0.roa
Signing time: Sat 07 Jun 2025 21:12:17 +0000
ROA not before: Sat 07 Jun 2025 21:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:3c:ba:bc:7a:2a:0c:df:c9:76:7f:fe:95:68:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 7 21:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036e1ab3d85dfd77f1c09d9810d5510b3e2418bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:59:49:bf:4a:1e:e6:da:39:00:ce:e1:56:
d0:c0:24:72:0c:ea:20:a9:61:f8:bc:cd:67:bf:ec:
b5:14:92:58:4f:04:04:12:32:06:ac:4a:19:7b:3d:
aa:51:05:30:86:fa:b3:9e:2b:86:70:f8:c5:0f:5b:
c7:48:9a:f5:1b:31:a5:da:23:4d:c0:40:d9:88:06:
d8:0b:d6:89:2b:a4:77:94:53:30:6b:a4:b0:9c:0d:
83:5f:5f:6e:49:36:cb:06:f9:6f:62:04:a0:60:05:
7b:09:10:2a:3e:4d:78:f1:75:58:35:8f:de:be:b4:
b4:38:be:f2:75:d0:ed:68:fa:11:2a:2e:3e:49:55:
17:43:51:fd:91:86:b7:d5:27:ce:3c:28:7d:d7:69:
b8:2b:b6:ce:f1:e8:42:ed:04:cb:43:2e:3f:a7:8d:
60:11:78:4e:f8:a9:02:d3:74:5e:b9:89:ac:59:21:
ae:09:7e:8a:4d:0e:cc:03:89:86:71:72:32:68:8a:
b5:8c:ce:44:f5:47:6f:13:6c:fc:7f:12:27:d6:99:
66:41:d0:4f:46:7b:f5:41:ee:a5:5c:24:a2:42:66:
b8:1c:01:fb:d7:7a:91:1d:47:74:4c:87:b6:95:59:
81:fe:e6:42:e8:7d:65:95:fe:df:63:6d:df:be:f9:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6E:1A:B3:D8:5D:FD:77:F1:C0:9D:98:10:D5:51:0B:3E:24:18:BD
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/A24as9hd_XfxwJ2YENVRCz4kGL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
2c:f2:7b:05:07:d0:44:65:d1:1c:b9:d0:67:8b:5d:f3:9b:d6:
5a:3b:e5:d0:27:ea:89:ee:43:9c:56:52:7c:5a:d3:d5:27:2d:
e0:ea:2a:79:28:3e:3e:bb:90:14:e7:74:e3:67:1b:50:f8:ac:
c9:1f:06:63:d8:4e:32:ec:3d:a2:32:7c:61:3d:d5:58:0a:4e:
59:58:33:16:14:ff:db:06:22:11:29:8e:dc:65:7b:fb:91:61:
7e:75:27:51:c8:ef:b6:fc:1b:95:91:b9:c4:6f:7d:3f:74:da:
73:ec:73:23:c3:14:3d:f7:c1:a8:36:19:d3:86:1a:27:d6:6c:
1f:08:2d:9e:3d:c0:71:a5:8d:b5:f9:44:91:a8:67:49:a9:60:
bb:12:ff:89:5f:b0:3c:e0:73:25:48:40:f2:41:b3:ac:58:b8:
c9:93:8f:fb:3a:e0:34:c9:3d:8b:9e:42:7e:02:b5:9e:e4:59:
41:05:63:86:e2:e1:90:2a:43:9d:e8:d9:0c:42:3d:1c:ed:06:
f5:67:b6:97:30:28:c0:73:11:39:62:ef:90:ca:13:fb:67:83:
59:29:6a:5c:6f:c8:31:31:76:9a:38:05:a7:2a:00:ea:79:41:
50:5f:d1:d1:cc:4e:6f:40:fb:d9:c2:96:47:e3:3b:2f:85:ad:
93:4d:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:04:40 2025 by rpki-client