Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AQCskk6Zd_0TyOYug0J3CGo6q4Q.roa
File: AQCskk6Zd_0TyOYug0J3CGo6q4Q.roa (raw, json)
Hash identifier: c3mWK4CqN/h6dV9f33u7VFyraxgE61dN40mJeKUZbxc=
Subject key identifier: 01:00:AC:92:4E:99:77:FD:13:C8:E6:2E:83:42:77:08:6A:3A:AB:84
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975CC70B1217434C34204E3ED764D0F459
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AQCskk6Zd_0TyOYug0J3CGo6q4Q.roa
Signing time: Wed 11 Jun 2025 02:17:17 +0000
ROA not before: Wed 11 Jun 2025 02:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:c7:0b:12:17:43:4c:34:20:4e:3e:d7:64:d0:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 11 02:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0100ac924e9977fd13c8e62e834277086a3aab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:41:ae:e5:ed:b7:a3:98:c0:a2:b4:b2:72:
69:2f:14:c6:60:8c:40:81:7c:77:27:21:e7:dc:6c:
28:30:74:1d:2f:28:f5:83:fd:4b:2a:9d:07:9d:ff:
21:8e:51:f8:07:50:f3:b4:61:60:cc:02:f0:ef:ea:
ca:d8:2a:21:c7:26:d1:78:3d:c2:64:97:51:b4:51:
81:70:40:de:95:83:8a:c1:19:f9:1d:1e:7c:7b:23:
d2:ab:f8:ed:3e:ae:ce:b9:8e:b6:8d:bf:9f:f1:b9:
a8:16:91:22:70:b0:80:b7:63:94:f5:5a:cb:27:5f:
6f:9c:08:a5:8f:99:dc:44:78:c9:34:34:6a:a4:c1:
c8:dc:d9:84:9f:10:94:19:eb:9f:da:a8:62:d3:6c:
ef:b6:e6:f6:f5:0e:6a:63:08:b2:b8:bb:fe:3c:b5:
1e:73:4f:a9:db:d8:38:9c:29:cf:7a:3f:1c:55:03:
5c:6e:4f:94:07:e9:6a:a5:69:0b:cd:ce:c8:aa:53:
dc:bd:f0:7d:4a:b3:61:1e:84:2c:3c:7d:85:bf:55:
e1:0c:c9:24:56:22:bc:52:d6:06:c3:4c:ec:aa:97:
39:7a:ee:da:e2:43:77:30:22:45:a1:e8:51:dd:66:
c6:3e:1a:87:ee:62:f9:b8:c1:99:3e:61:c4:05:c0:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:AC:92:4E:99:77:FD:13:C8:E6:2E:83:42:77:08:6A:3A:AB:84
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AQCskk6Zd_0TyOYug0J3CGo6q4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
b8:06:c1:74:a5:4e:0e:00:60:da:fc:4a:c9:cf:20:b5:fd:90:
43:5b:fc:b4:ff:e8:7f:d9:e0:40:46:54:ee:a1:bc:44:ed:56:
29:02:04:43:18:76:b0:91:58:17:3d:f9:8d:5a:45:28:ab:55:
86:89:d3:31:67:cb:43:f4:32:6b:24:be:87:29:77:b1:69:30:
cc:58:62:99:60:1f:ee:74:02:bd:1c:21:c7:ce:10:5d:e5:20:
d7:cd:9b:2d:ea:eb:a9:f9:27:ab:4f:7d:be:db:be:40:1c:a5:
20:0e:8b:4f:4b:0d:c4:a8:07:2d:90:f9:1c:3e:94:b0:bd:bc:
9b:bb:fb:64:0a:85:7d:7b:0c:10:22:76:78:b0:7c:12:b9:69:
b9:79:4f:72:96:e0:17:d2:83:71:bd:f0:99:3b:0f:db:d3:cd:
5a:62:69:46:f1:44:55:ee:c2:8e:5a:dd:ca:0a:3b:79:28:af:
d9:04:56:aa:79:c8:4c:d2:4a:6c:c7:f0:4a:c4:98:b6:38:59:
68:5d:64:a3:ab:41:49:c0:76:a1:ff:34:96:64:f2:49:0a:9a:
e7:ce:e6:d0:0a:91:5a:6e:dc:ec:80:98:8d:47:6f:34:75:95:
ba:1d:73:43:ab:07:19:9b:be:77:42:d3:ee:e6:61:20:5d:28:
e6:55:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:08:43 2025 by rpki-client