Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BT8vYDmcUoamph5xl5-lN6FNjKE.roa
File: BT8vYDmcUoamph5xl5-lN6FNjKE.roa (raw, json)
Hash identifier: PJMurb2BXec/KrOTXF6NOuWcw6MgTbN0P4TV7XLGiUA=
Subject key identifier: 05:3F:2F:60:39:9C:52:86:A6:A6:1E:71:97:9F:A5:37:A1:4D:8C:A1
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019733C9451EE65CFB76031EC0110DC07D01
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BT8vYDmcUoamph5xl5-lN6FNjKE.roa
Signing time: Tue 03 Jun 2025 03:15:17 +0000
ROA not before: Tue 03 Jun 2025 03:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:33:c9:45:1e:e6:5c:fb:76:03:1e:c0:11:0d:c0:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 3 03:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=053f2f60399c5286a6a61e71979fa537a14d8ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:2d:94:c4:37:7a:97:32:c3:8e:d6:0b:1e:
3b:18:4e:86:e5:12:8d:be:41:1b:47:e9:35:23:fa:
6b:cf:e0:d5:79:77:f1:a7:2b:3d:15:35:cd:48:4a:
d2:93:5b:28:13:94:41:6e:86:df:c7:c1:82:ae:e2:
91:67:48:f0:83:3f:20:35:7a:22:d2:c2:f1:4d:a5:
cc:5a:f3:2b:89:2d:0a:4b:f9:65:9c:8c:96:c9:13:
37:f1:20:45:c3:31:be:cd:77:74:15:32:91:9a:05:
c9:7e:ef:90:ce:b3:82:7a:0f:94:39:65:12:cf:b2:
e4:86:33:4b:b1:13:b0:02:88:9c:3c:35:48:8f:36:
5d:df:a2:ae:48:b1:71:7f:6d:12:79:5c:a5:35:6c:
73:ef:15:8e:9b:89:58:00:b8:ae:d1:50:36:df:ae:
58:d4:6a:dd:25:d2:8f:cb:a9:7b:6e:fe:ff:a4:b0:
f1:00:64:4d:86:2e:f0:63:e5:c5:77:f5:d1:f3:2e:
dd:30:3b:ca:dd:81:01:0c:84:74:87:4d:bd:32:cd:
e0:44:e3:36:df:e4:e5:a9:e1:9d:57:b2:25:00:ba:
15:5e:86:c7:3f:44:e9:68:0d:bc:bf:0d:14:d1:7f:
56:4f:92:87:d9:3c:49:d9:dc:a6:af:de:e4:39:86:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:2F:60:39:9C:52:86:A6:A6:1E:71:97:9F:A5:37:A1:4D:8C:A1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BT8vYDmcUoamph5xl5-lN6FNjKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
3c:5e:7e:9e:b6:0a:78:63:87:0b:53:b1:cc:3b:6b:62:82:84:
97:d9:d2:e5:e7:97:a6:f5:3a:33:13:7e:b9:29:b7:1d:66:76:
d1:16:0b:76:0a:67:8b:31:63:e6:70:a8:a0:48:1a:63:bd:8b:
b7:2a:a0:93:ed:84:42:44:6f:b3:c2:5b:2a:64:3d:6b:a6:9f:
b6:ef:7b:d6:9f:82:5d:19:ac:fe:07:b8:5a:79:8e:aa:3b:b6:
1d:1d:b6:f2:db:0c:f6:70:93:2b:8d:64:a0:57:d2:ca:45:a3:
7b:e9:ab:7f:b6:df:54:06:c2:d9:b2:df:37:12:a6:6e:11:97:
01:41:ac:7b:ba:70:63:67:39:2a:21:ca:c3:0e:1a:84:c1:4d:
aa:f7:08:a5:71:09:7b:3e:59:6a:6f:91:cd:b8:f6:f2:9f:fe:
18:95:91:84:3c:4c:2c:1c:f5:63:64:39:15:d6:91:ef:af:4b:
ea:67:92:ce:61:0d:89:99:d6:7c:04:26:5e:0a:90:02:6c:59:
53:c3:e0:6f:3c:07:92:c1:0d:2c:45:1e:7f:e9:ab:89:39:98:
1d:bf:fd:b1:d2:e0:1d:11:b4:92:75:d0:ee:a5:0c:9b:52:c4:
35:f1:f4:21:ce:9e:cd:6a:ab:b5:1e:6e:3f:e8:a7:28:8c:a9:
25:da:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:30:42 2025 by rpki-client