Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AWFI9d4_JvavAN5ZgYGR2vQjusM.roa
File: AWFI9d4_JvavAN5ZgYGR2vQjusM.roa (raw, json)
Hash identifier: KOJXHnwBF4y06V4aFvF6bZaK+XUR++kyTIxqrEv2i94=
Subject key identifier: 01:61:48:F5:DE:3F:26:F6:AF:00:DE:59:81:81:91:DA:F4:23:BA:C3
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196CC88F7852345409868FD6AE9C3B247A9
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AWFI9d4_JvavAN5ZgYGR2vQjusM.roa
Signing time: Wed 14 May 2025 02:04:10 +0000
ROA not before: Wed 14 May 2025 02:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:cc88:e6fa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:88:f7:85:23:45:40:98:68:fd:6a:e9:c3:b2:47:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 14 02:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016148f5de3f26f6af00de59818191daf423bac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:9a:6c:1d:86:da:49:98:86:3f:60:4f:22:
a7:02:55:6d:6e:5c:fb:80:6d:8f:09:18:f6:ca:e5:
88:fa:e7:6d:1d:4b:cc:a4:b6:8d:9f:28:74:db:29:
a9:65:f3:4d:8c:d5:ef:76:1b:45:08:3b:00:eb:77:
9d:90:96:b2:8b:e1:73:09:ff:bd:e0:58:f5:fc:17:
a8:17:39:2d:11:94:ae:d3:c6:90:cd:9a:48:50:af:
ef:84:4d:2b:9f:ab:92:a2:1b:3c:7d:57:31:52:7e:
94:cc:cb:e9:53:fb:f2:3e:c7:a8:bf:9e:53:6a:bd:
ca:72:c8:dd:d2:ee:bd:db:d7:3d:e2:db:fe:6b:32:
0b:23:91:6c:dd:23:ef:ee:42:55:8a:3b:87:ea:46:
2f:34:75:02:cc:fe:27:0f:82:c6:1c:0e:7f:43:1b:
50:34:4b:93:f3:df:7f:41:81:3e:9c:68:64:8a:73:
fd:48:e5:f4:9c:0e:25:76:3d:ce:c6:5a:77:2a:ab:
79:71:77:8d:9f:97:6e:9f:da:7d:a7:f9:c3:23:5a:
3f:23:d4:af:dc:e7:f3:cc:a5:98:bc:c4:58:6f:1c:
7a:c9:f4:8f:36:17:1f:be:9b:a1:07:7e:72:d7:69:
ff:b9:57:2a:0f:b8:24:21:d4:aa:3d:ee:15:8f:ca:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:48:F5:DE:3F:26:F6:AF:00:DE:59:81:81:91:DA:F4:23:BA:C3
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AWFI9d4_JvavAN5ZgYGR2vQjusM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:cc88:e6fa/128
Signature Algorithm: sha256WithRSAEncryption
77:3a:c7:30:6d:6c:b8:cb:d2:fa:ba:7e:31:a3:a0:24:ce:0a:
9d:a9:f4:d7:f3:08:b2:cc:d4:ac:83:08:b7:52:a1:cb:46:cd:
77:ac:9b:fd:41:83:b8:09:19:8c:5c:cd:60:ff:62:68:d6:4e:
fc:06:ba:81:d8:a7:af:66:2b:94:97:26:2f:96:9c:e0:79:80:
9c:e1:76:e6:3d:8f:83:99:8f:5d:18:ee:25:cd:ec:9d:e3:d3:
ba:07:22:26:a4:8c:16:c3:0e:66:8b:24:19:15:5a:76:e8:73:
5a:d0:d6:e8:55:42:b9:6a:29:00:ff:e4:e0:18:11:a2:de:f6:
f2:b1:dc:e7:2f:b8:c7:2d:48:5c:d1:57:16:12:7c:7e:b3:d4:
6b:f0:e2:09:12:1d:6f:18:0b:e2:d3:18:87:cd:2c:2c:82:32:
38:89:bb:0f:5d:25:cf:a8:fc:53:fc:01:86:23:83:04:ff:43:
5a:7b:34:d4:67:47:f9:5b:8e:12:35:6b:c3:af:54:bf:c3:db:
10:78:e7:c1:f0:97:46:48:74:d6:c9:82:59:b7:d1:de:11:41:
ff:2d:dc:11:45:67:3f:19:e5:d0:eb:82:6f:77:e8:0d:e3:75:
cc:bd:fd:d6:9e:55:8a:b8:1d:ef:73:ae:f7:d3:95:38:0c:78:
77:81:fa:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:39:45 2025 by rpki-client