Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AW3rmIA1OD_esXhvLnXZ0BpTkCM.roa
File: AW3rmIA1OD_esXhvLnXZ0BpTkCM.roa (raw, json)
Hash identifier: 99XN037w5E9RspiSlXwqOBfjEAotWch9jvVcImNf9ow=
Subject key identifier: 01:6D:EB:98:80:35:38:3F:DE:B1:78:6F:2E:75:D9:D0:1A:53:90:23
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197519A062600F91E0AE3150421417CAF27
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AW3rmIA1OD_esXhvLnXZ0BpTkCM.roa
Signing time: Sun 08 Jun 2025 22:12:17 +0000
ROA not before: Sun 08 Jun 2025 22:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:9a:06:26:00:f9:1e:0a:e3:15:04:21:41:7c:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 8 22:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016deb988035383fdeb1786f2e75d9d01a539023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:49:13:df:4c:7e:6e:6f:08:e9:32:76:11:
a4:7f:3e:62:63:6a:7b:bc:f3:32:7d:bb:aa:5b:e8:
82:bb:2c:a1:6e:4b:03:4d:02:94:8c:0a:86:44:56:
94:09:60:4d:ed:da:d1:65:fc:bc:83:39:90:84:e8:
c1:86:fb:9e:fc:f0:53:e1:e4:8e:a1:26:a7:29:f4:
db:47:47:1d:46:38:fa:9d:61:a8:c9:f9:a2:43:7e:
ea:04:80:78:ec:bd:b5:57:db:92:16:d3:3d:06:e5:
cd:ba:9b:70:80:3b:00:35:fc:12:c5:2e:ea:fc:4a:
2e:f6:c8:e0:03:e6:0b:aa:c2:6b:97:49:aa:eb:5b:
4e:a4:22:46:47:2d:38:d2:2d:bc:c7:25:46:6a:6c:
8a:b6:c9:76:ea:19:e0:ca:9f:00:1b:65:75:e4:17:
f2:18:ef:6a:98:27:9f:36:5e:f4:25:5f:9e:30:5d:
75:09:d8:5a:dd:76:a4:95:95:a6:50:15:1d:0d:cd:
58:eb:ae:f3:fd:fb:db:32:92:1c:93:a9:8c:af:d3:
4b:b2:09:fc:f8:fb:75:9d:d3:f0:a9:8a:37:0d:e5:
0b:ae:68:0d:16:33:bd:f8:56:03:e6:d6:30:81:d2:
5c:a8:4b:17:3b:39:e1:d3:92:6b:09:79:f1:31:2f:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:EB:98:80:35:38:3F:DE:B1:78:6F:2E:75:D9:D0:1A:53:90:23
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AW3rmIA1OD_esXhvLnXZ0BpTkCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
65:6b:9e:c9:9d:68:82:98:27:c8:b2:8e:62:e9:98:5b:0b:eb:
5b:57:e6:c4:31:1d:35:67:8d:90:09:40:9d:f2:74:c3:98:b9:
09:e6:c5:b2:7d:1c:80:d5:6c:0b:44:92:1e:d4:c1:a3:6d:b7:
4c:e9:8d:02:d0:93:4a:e7:c9:84:5a:22:08:c1:0f:db:65:c0:
d0:2b:3a:57:37:a2:96:7b:79:8b:e3:76:3c:a2:de:be:d8:c8:
63:84:28:61:c6:c9:10:18:2a:f5:ad:0e:ca:75:4f:3b:88:cb:
71:dc:82:00:df:55:d8:76:a1:78:54:5f:01:92:e5:92:4a:79:
36:40:72:76:1f:42:02:6c:f3:58:3a:99:bc:32:94:1c:48:d8:
a1:52:69:9f:bd:c4:f1:c8:04:60:fc:c4:80:e0:d9:85:80:90:
69:b9:54:f3:2b:a8:1a:3b:d6:2d:a9:c5:40:63:81:f6:b1:22:
b3:81:6a:3d:2e:12:7b:69:6c:6f:59:26:b2:9b:f3:07:af:ce:
4a:ea:37:9d:36:8d:c3:cd:c9:cd:d9:65:fc:eb:7a:89:7b:d3:
7a:bd:b1:62:58:a1:4b:07:3d:55:65:64:b8:07:d1:d7:ad:de:
d9:c5:27:a9:50:78:f2:d2:6d:dd:be:ba:a0:c0:0f:6b:52:e2:
fb:18:c5:e1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZdRmgYmAPkeCuMVBCFBfK8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA4MjIxMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTZkZWI5ODgwMzUzODNmZGViMTc4NmYyZTc1ZDlkMDFhNTM5MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu31JE99Mfm5vCOkydhGkfz5iY2p7
vPMyfbuqW+iCuyyhbksDTQKUjAqGRFaUCWBN7drRZfy8gzmQhOjBhvue/PBT4eSO
oSanKfTbR0cdRjj6nWGoyfmiQ37qBIB47L21V9uSFtM9BuXNuptwgDsANfwSxS7q
/Eou9sjgA+YLqsJrl0mq61tOpCJGRy040i28xyVGamyKtsl26hngyp8AG2V15Bfy
GO9qmCefNl70JV+eMF11Cdha3XaklZWmUBUdDc1Y667z/fvbMpIck6mMr9NLsgn8
+Pt1ndPwqYo3DeULrmgNFjO9+FYD5tYwgdJcqEsXOznh05JrCXnxMS97QQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFAFt65iANTg/3rF4by512dAaU5AjMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvQVczcm1JQTFPRF9lc1hodkxuWFowQnBUa0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAZWueyZ1ogpgn
yLKOYumYWwvrW1fmxDEdNWeNkAlAnfJ0w5i5CebFsn0cgNVsC0SSHtTBo223TOmN
AtCTSufJhFoiCMEP22XA0Cs6Vzeilnt5i+N2PKLevtjIY4QoYcbJEBgq9a0OynVP
O4jLcdyCAN9V2HaheFRfAZLlkkp5NkBydh9CAmzzWDqZvDKUHEjYoVJpn73E8cgE
YPzEgODZhYCQablU8yuoGjvWLanFQGOB9rEis4FqPS4Se2lsb1kmspvzB6/OSuo3
nTaNw83Jzdll/Ot6iXvTer2xYlihSwc9VWVkuAfR163e2cUnqVB48tJt3b66oMAP
a1Li+xjF4Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:13:45 2025 by rpki-client