Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BDz2emzKrlEhku13ijK2XzcFpVY.roa
File: BDz2emzKrlEhku13ijK2XzcFpVY.roa (raw, json)
Hash identifier: KWoFRvBAsb69HB3zR/JXTGYGupN6xG2eGtoCxzCItUk=
Subject key identifier: 04:3C:F6:7A:6C:CA:AE:51:21:92:ED:77:8A:32:B6:5F:37:05:A5:56
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01963241DE69FC06F6FD7F91541BE763729B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BDz2emzKrlEhku13ijK2XzcFpVY.roa
Signing time: Mon 14 Apr 2025 03:04:59 +0000
ROA not before: Mon 14 Apr 2025 03:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:3241:db4d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:41:de:69:fc:06:f6:fd:7f:91:54:1b:e7:63:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 14 03:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=043cf67a6ccaae512192ed778a32b65f3705a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:66:09:17:00:05:e0:d6:4d:d8:09:bf:84:
99:c9:ca:5a:24:6d:03:7e:8a:f7:72:bb:78:7a:e0:
22:0d:31:41:22:57:c6:f2:d4:48:ae:78:43:f7:f2:
a3:4f:84:34:93:23:79:00:6c:38:5d:8c:af:64:84:
c6:04:7d:15:91:fd:3e:ff:75:77:6b:5b:31:8c:1a:
4d:71:d1:20:7f:ed:91:47:94:95:9e:64:14:59:d1:
7f:4b:f7:79:76:23:82:51:db:43:9e:9f:b7:b2:75:
21:6e:e1:bd:70:28:40:4f:88:42:ff:f1:42:40:d5:
7c:b0:f9:ba:30:cc:8b:6b:34:c1:94:88:fd:98:b2:
2d:cb:de:3c:da:a3:d6:3d:6a:66:fc:a0:8b:0c:4e:
a6:e4:80:a8:db:4a:df:67:f3:69:c1:59:2a:6d:17:
bf:15:38:12:cb:4f:3c:f0:c8:3a:bf:8b:d6:98:1a:
d4:83:f2:c3:d4:95:f6:f9:c9:82:cf:61:1e:6e:02:
5c:e7:64:3e:7b:8d:62:8e:10:a6:4b:c3:6c:83:72:
7e:87:53:4c:c2:48:f8:7d:e4:69:60:e9:2d:b1:95:
ab:3f:30:d8:1d:f2:fb:b3:5d:95:f2:a4:12:f3:96:
c6:ec:6f:a7:a8:a7:3d:7b:34:27:cf:66:ff:96:4e:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3C:F6:7A:6C:CA:AE:51:21:92:ED:77:8A:32:B6:5F:37:05:A5:56
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BDz2emzKrlEhku13ijK2XzcFpVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:3241:db4d/128
Signature Algorithm: sha256WithRSAEncryption
0c:2a:88:eb:72:c2:46:fd:c7:2a:77:95:c7:7e:c6:fe:48:40:
5a:10:1b:92:fb:00:ef:cf:27:77:f6:b0:3f:be:18:1a:03:4c:
6c:6e:a9:fe:30:53:ed:13:e4:11:74:8e:e6:2e:b2:08:cd:59:
62:d8:55:a4:89:52:b1:30:08:18:48:30:1a:6c:02:93:55:c9:
1b:57:be:81:bf:96:2a:83:f3:9f:59:4e:59:17:a5:2e:fa:51:
8f:f3:55:51:95:a2:da:19:a1:60:95:19:f8:f7:29:14:38:93:
5b:ad:77:ec:f7:9b:5d:27:3c:3a:d5:f7:52:36:58:f8:33:b4:
e0:6f:ef:26:f1:71:c7:91:1d:2e:48:97:e8:8d:7a:a2:62:c0:
b0:98:1e:b8:a6:40:22:3a:f4:7b:5e:81:1c:b9:44:25:72:ee:
0b:25:e2:54:4a:4b:b2:5f:a8:c5:59:14:63:f9:63:28:09:4a:
75:2d:08:61:0f:bb:47:21:73:d1:fd:02:9b:82:81:12:c8:52:
6f:35:ac:f6:8e:da:b8:d5:b1:83:16:db:bd:e7:68:ee:5a:8c:
f3:95:fa:4d:86:a7:c2:e0:ff:28:59:8e:a3:cd:40:5f:ef:9a:
f4:ba:53:a2:a2:e8:0c:46:24:bc:22:21:72:ca:16:b5:bd:7e:
c9:4f:b0:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:59:49 2025 by rpki-client