Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/B-ZvObXL5uXoYBXXIXtBSi39IYQ.roa
File: B-ZvObXL5uXoYBXXIXtBSi39IYQ.roa (raw, json)
Hash identifier: NvBjiS0XqYLN59nvD0tSTwo3Yq4QdjphtPxkCSsALiE=
Subject key identifier: 07:E6:6F:39:B5:CB:E6:E5:E8:60:15:D7:21:7B:41:4A:2D:FD:21:84
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973880D94F91F18EB4482830B890E97CCD
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/B-ZvObXL5uXoYBXXIXtBSi39IYQ.roa
Signing time: Wed 04 Jun 2025 01:14:17 +0000
ROA not before: Wed 04 Jun 2025 01:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:80:d9:4f:91:f1:8e:b4:48:28:30:b8:90:e9:7c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 01:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07e66f39b5cbe6e5e86015d7217b414a2dfd2184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:45:d6:2f:63:f1:64:e3:4c:99:9e:3d:f1:
88:f8:74:ac:f0:0c:ea:52:28:a7:d9:79:32:1c:9a:
61:39:f3:a5:d2:a0:ca:b8:be:1d:78:56:77:cf:63:
fa:c4:b2:74:69:0b:94:93:ed:22:f0:61:e6:c6:a5:
c5:d0:0d:5d:ea:47:9d:1a:e3:cb:dc:a4:d8:26:5f:
ea:f4:81:0e:a5:04:67:45:9b:b0:32:02:e3:76:85:
aa:e8:af:25:b7:90:ef:41:45:ce:0f:a5:e7:a2:70:
8b:a0:31:5a:32:f6:59:9e:28:fa:65:f5:e5:f7:09:
89:7e:74:c3:ed:8d:13:9f:67:66:5b:1c:80:10:69:
0b:e4:b6:12:9c:51:67:1a:8d:01:22:eb:3e:b5:c2:
2f:0c:de:b2:ff:65:1c:da:25:2c:22:60:90:56:95:
85:9e:6f:89:c4:71:65:36:67:fc:54:6c:40:91:cd:
ea:4e:19:23:83:c1:a3:ff:f3:25:91:54:3e:3e:25:
7f:6b:c3:9c:35:a3:ab:08:4c:b8:7a:8e:a2:a9:30:
d2:83:c7:88:89:30:bf:cc:e4:0f:2d:68:1f:22:99:
40:bb:fd:b2:5f:5f:31:72:40:39:4a:8b:89:3d:f1:
2a:36:9c:04:44:26:ec:0b:0b:d9:33:6b:cf:12:10:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:6F:39:B5:CB:E6:E5:E8:60:15:D7:21:7B:41:4A:2D:FD:21:84
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/B-ZvObXL5uXoYBXXIXtBSi39IYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
0d:ec:e3:f5:e3:e8:29:e6:00:a4:d7:3b:00:2e:68:29:68:f2:
bb:9b:54:07:d5:17:e4:62:fa:57:57:a9:bc:25:5b:8e:9a:ae:
5f:46:cd:67:fb:02:04:55:28:5d:d7:2b:60:22:ed:55:4b:af:
a7:73:85:0a:f1:44:06:18:ff:4c:1d:ea:cf:e2:d5:21:79:32:
45:a6:f8:5d:1b:31:95:65:0c:ee:d9:49:e2:57:14:15:f3:3f:
7b:90:0d:23:c3:13:58:78:e0:49:72:8c:c7:cb:57:47:07:ff:
d5:9c:a5:28:ad:09:9f:f9:1d:7c:84:4e:39:81:00:dd:2b:7b:
7b:b3:86:8e:7f:4b:d2:79:d0:cb:4d:1e:e1:a7:08:2a:51:f5:
80:52:82:15:b5:e7:48:cb:f5:1c:c5:f9:82:5d:13:8e:a1:a2:
3c:5f:95:a0:ac:cc:04:d3:28:18:ca:04:e5:ac:b8:29:31:eb:
a8:0f:43:95:5d:11:c4:69:82:bf:c1:db:c5:94:e0:44:c5:6c:
57:ae:1a:10:cd:c3:13:65:76:2c:06:8d:47:f5:d0:a5:85:e2:
e3:82:5c:59:f9:4c:d2:03:2e:f4:13:6a:d5:67:1d:42:75:3b:
9e:a8:9b:82:35:b2:27:8c:00:c1:4d:75:11:f3:d7:49:f4:45:
dd:c4:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:48:05 2025 by rpki-client