Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/APq_mcq1Esg5KiBuIYUA3-rv7Q8.roa
File: APq_mcq1Esg5KiBuIYUA3-rv7Q8.roa (raw, json)
Hash identifier: awgqdGPjX4Jz064zvkLo4LUMS78Gise43rvy32NyGYM=
Subject key identifier: 00:FA:BF:99:CA:B5:12:C8:39:2A:20:6E:21:85:00:DF:EA:EF:ED:0F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019709B9671EAB70B181CA0CF948042B4C83
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/APq_mcq1Esg5KiBuIYUA3-rv7Q8.roa
Signing time: Sun 25 May 2025 23:13:54 +0000
ROA not before: Sun 25 May 2025 23:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:b9:67:1e:ab:70:b1:81:ca:0c:f9:48:04:2b:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 23:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00fabf99cab512c8392a206e218500dfeaefed0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:62:d1:17:30:8b:86:14:24:1c:e3:ac:26:
9c:3a:62:83:f8:56:bd:97:5a:b8:16:d4:ed:56:c8:
d5:6a:c3:67:65:78:ee:45:35:90:31:81:90:0e:87:
08:80:46:ab:94:c6:b7:d4:b9:91:de:b4:2c:25:4e:
bd:71:e0:ec:b4:e1:0d:cf:5c:7e:6f:29:69:5c:65:
fe:3a:b5:cb:8d:ec:a1:ca:0d:14:f1:f5:32:33:4b:
16:e1:9a:dc:b4:f5:e4:45:8e:8d:5c:7a:2f:99:ee:
2e:d5:eb:38:e3:d4:bc:38:78:79:14:23:13:b4:ed:
d1:60:f6:33:be:45:f3:20:12:4d:d6:fc:a7:cc:63:
ef:8e:2a:52:d6:f6:50:09:05:e1:e4:0e:57:35:ff:
28:eb:d3:39:95:2a:25:31:02:28:80:74:d2:81:6e:
9d:4b:aa:f5:5d:b1:9e:29:ed:f3:f9:58:1a:98:aa:
cd:81:c6:3b:f5:a9:24:4d:39:2d:fc:e1:79:42:61:
8c:50:d1:51:81:8c:16:3d:b2:bf:ba:a6:33:0b:9b:
95:2d:1d:f9:1b:6e:a7:3d:5f:a1:28:d3:2e:3f:af:
23:83:81:f4:18:2e:de:a1:b6:e3:14:08:fd:28:19:
b3:a2:e5:99:2c:e6:ac:04:96:ed:95:75:ae:dd:30:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FA:BF:99:CA:B5:12:C8:39:2A:20:6E:21:85:00:DF:EA:EF:ED:0F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/APq_mcq1Esg5KiBuIYUA3-rv7Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
30:05:d2:2d:93:59:9d:f5:df:1e:07:2f:01:fc:af:b2:1f:ee:
d5:23:c1:d7:76:65:8f:56:37:0b:8a:60:91:67:89:f6:de:84:
86:86:09:aa:8f:09:01:04:1e:d3:00:4c:c1:da:5c:38:4b:fe:
84:c6:dd:a6:1a:b9:12:c8:9b:4b:df:bc:52:61:80:3c:41:e4:
e0:f4:c8:9f:ae:3b:16:1b:70:ae:a6:2e:33:3d:c3:92:fd:76:
c1:b0:23:c1:e2:56:a9:22:85:1c:43:b6:df:39:9a:53:0a:12:
12:be:4e:b4:76:cb:8d:1a:0d:0e:6f:d9:6f:fc:27:ec:21:5d:
16:0b:92:f6:f8:32:6a:c4:66:29:f5:7a:a7:7d:e9:f0:03:15:
60:78:69:1c:aa:97:fb:f1:fa:8c:33:ef:f5:b1:91:85:38:a9:
9e:84:33:95:2f:34:b0:ba:fc:89:ca:87:6b:36:59:82:59:8d:
0d:43:8a:b0:25:ec:80:b2:82:a4:0d:4a:95:f5:70:80:22:09:
81:0c:d6:a0:f9:c7:71:40:b8:1a:ab:9d:68:ff:50:d9:79:61:
1c:0c:2e:ad:38:78:a0:1f:ac:b4:57:01:85:bb:cc:e4:01:15:
e3:94:b4:45:83:d8:a0:03:1a:54:16:90:4d:a5:0a:3c:42:cd:
aa:31:50:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:17:39 2025 by rpki-client