Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AYLoD34-Np7GToLrYSkpYHfzUew.roa
File: AYLoD34-Np7GToLrYSkpYHfzUew.roa (raw, json)
Hash identifier: Mb1CITSn4T7QTZv6tnyaXnRoyDiYThJvEgui/GfQ5nY=
Subject key identifier: 01:82:E8:0F:7E:3E:36:9E:C6:4E:82:EB:61:29:29:60:77:F3:51:EC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FA7D41B1C448FE215B6BDC92B57F6E83
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AYLoD34-Np7GToLrYSkpYHfzUew.roa
Signing time: Fri 23 May 2025 00:13:54 +0000
ROA not before: Fri 23 May 2025 00:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fa:7d:41:b1:c4:48:fe:21:5b:6b:dc:92:b5:7f:6e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 00:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0182e80f7e3e369ec64e82eb6129296077f351ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:b9:1c:98:e1:cd:41:38:4a:21:d2:2e:21:
78:5d:4e:8e:20:7c:c0:e3:f3:77:2b:80:8c:eb:88:
8c:b5:3e:7d:7f:6b:21:6f:7b:e5:52:69:7c:bb:ad:
bd:2f:c0:8f:15:7d:09:b7:62:7e:98:44:fd:45:db:
ea:7d:46:32:e7:ac:02:01:95:1a:83:d7:e7:aa:76:
7e:7a:77:6b:f6:0a:83:09:97:ef:00:1f:60:5f:b8:
35:69:e7:67:c2:74:ec:5c:4f:70:0d:fe:51:f1:63:
cd:f6:62:94:5f:5c:94:33:c9:91:ff:3b:62:e5:f0:
a2:12:8f:0d:4c:e5:69:9c:a6:05:55:8f:98:a2:0c:
3c:4e:6a:d4:e1:68:18:3f:1f:a3:0b:62:f5:63:78:
bc:77:dd:de:09:6e:a6:c0:0d:0f:99:6e:87:2f:c8:
e2:c4:29:f7:cc:07:b4:b2:2d:25:fd:00:1b:41:bf:
40:ee:ec:8c:32:e0:bd:6e:64:b7:38:4f:a4:13:60:
d0:36:91:db:e2:b9:d8:73:e7:f6:a8:c7:c3:aa:fe:
f2:43:23:e5:40:24:52:11:8a:b1:3a:bf:e6:43:1a:
88:32:07:36:d2:8f:79:7f:ab:28:ea:a3:d5:6b:55:
36:ee:54:15:53:6e:e4:e6:66:a6:73:5a:c8:9c:ef:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:E8:0F:7E:3E:36:9E:C6:4E:82:EB:61:29:29:60:77:F3:51:EC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AYLoD34-Np7GToLrYSkpYHfzUew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
1d:da:6d:06:19:2b:13:2d:cb:ef:af:49:97:be:b0:ad:7f:3a:
96:22:17:80:c9:c8:9d:f4:1f:9b:0b:a2:84:dc:92:a9:89:cf:
34:0c:af:f7:bf:6d:e4:73:e9:9c:10:3d:11:fa:d7:1c:24:69:
67:92:aa:73:bb:5b:59:f4:65:b2:7a:8f:1a:30:16:f0:93:69:
f6:e4:ad:6a:6c:84:fe:83:c9:c2:7e:e2:e5:3c:c6:77:eb:b2:
46:e0:9e:f8:c2:4b:09:5a:41:49:00:46:be:be:c5:51:07:ea:
03:43:d8:36:59:b5:9e:f5:ff:84:6d:25:80:82:b1:56:2d:a3:
f6:44:88:dd:70:da:c6:7d:34:3f:f5:58:f2:1e:da:35:28:d1:
2b:54:0b:36:28:29:a0:9b:ed:ac:f9:0f:d3:2f:ce:c1:b8:6e:
c7:6f:18:ed:20:58:cf:e5:98:ce:24:e1:18:49:40:01:19:f9:
0c:90:72:e0:de:88:4d:fe:25:16:81:0c:f6:36:6f:96:2a:0a:
30:c4:28:5d:19:3b:72:0f:6d:cc:1f:f8:2d:ff:69:d3:1a:a5:
1b:2b:a6:a8:40:42:f9:00:1b:64:c7:de:0b:30:48:4a:e4:a8:
d6:a5:3e:d8:48:1f:9d:d9:12:b2:f9:49:81:1b:4d:c5:da:06:
52:48:2f:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:30 2025 by rpki-client