Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BV8Ougekc9cS9YTKioc8TSuzWBU.roa
File: BV8Ougekc9cS9YTKioc8TSuzWBU.roa (raw, json)
Hash identifier: IsdPgqnrT+P8qbRfsF5hRfMDW0P+otVe+yDDnpeTGTE=
Subject key identifier: 05:5F:0E:BA:07:A4:73:D7:12:F5:84:CA:8A:87:3C:4D:2B:B3:58:15
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019709F055685E9E0F199F33DF90F97B9FBF
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BV8Ougekc9cS9YTKioc8TSuzWBU.roa
Signing time: Mon 26 May 2025 00:13:54 +0000
ROA not before: Mon 26 May 2025 00:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:f0:55:68:5e:9e:0f:19:9f:33:df:90:f9:7b:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 00:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=055f0eba07a473d712f584ca8a873c4d2bb35815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:e7:c4:ea:63:47:d0:d5:de:07:e3:03:23:
9f:01:e9:6d:a8:b2:ee:12:2a:9e:04:fa:f2:6d:02:
d7:63:75:2f:ba:e1:c7:92:da:4d:83:21:87:c7:c5:
b5:a5:94:70:8e:98:8d:f3:d6:8d:6b:e3:f1:21:0a:
57:58:c8:b2:d3:ea:29:4a:88:c0:bd:7e:ca:8f:85:
9b:fd:48:4d:eb:5c:ab:33:64:45:bd:f1:33:02:8f:
21:35:23:c0:be:b3:10:e9:c7:19:42:a0:d2:7a:f4:
32:23:b0:b9:8f:b4:c2:78:03:ed:46:52:a1:43:4c:
73:88:8d:29:5d:bb:08:13:c3:a4:17:fc:a4:0f:7f:
a5:28:5a:d6:0d:0f:6c:ae:89:08:aa:8d:6d:d5:c7:
14:26:5c:9e:7b:16:c3:90:3e:1e:62:b2:7b:40:98:
6c:69:08:c9:27:10:16:6b:c8:17:06:eb:c0:2e:98:
fe:50:69:07:5d:d0:5b:e9:6b:4b:3e:db:6c:a9:77:
94:d5:d3:1d:c7:87:bf:24:a9:06:f7:7d:3b:9c:d4:
9d:9d:a6:22:ca:24:c5:d6:7e:30:92:6f:73:fe:e5:
f1:dd:80:a9:8b:78:b7:44:48:64:03:db:32:b4:55:
a8:a0:1f:ef:4c:b6:5d:5a:28:a0:c4:aa:f8:d5:d5:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:0E:BA:07:A4:73:D7:12:F5:84:CA:8A:87:3C:4D:2B:B3:58:15
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BV8Ougekc9cS9YTKioc8TSuzWBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
81:d5:dd:4e:77:da:94:0c:62:23:45:2b:45:09:d4:af:4c:65:
5a:e6:70:1e:fc:3b:35:bd:0e:4f:db:7d:4d:be:16:be:80:52:
8c:6b:cd:41:1e:d0:e5:64:9f:04:a4:47:f8:1c:4f:99:4d:88:
b5:67:7b:b3:f2:6c:6d:5d:d8:b5:28:da:db:5e:f2:49:a7:6a:
a8:44:4e:66:ef:d9:fc:b0:36:5c:15:3e:6b:40:da:90:0e:90:
e8:30:2f:b3:58:da:b9:00:0c:3b:a5:4d:e7:e4:32:26:b3:58:
aa:dd:14:35:e7:3b:ce:62:86:64:fc:00:0a:aa:cd:b4:72:98:
30:88:1f:47:1c:98:6c:9f:da:78:94:78:05:04:e5:ac:b6:0f:
11:74:77:1d:4a:cf:1c:f3:87:a0:9c:a3:7b:dc:e9:87:de:74:
f1:e8:24:bc:86:69:d4:60:45:67:0e:51:00:ba:25:b6:7d:fd:
3d:39:bc:a0:ae:a8:14:f6:87:73:f2:6b:4f:52:42:6f:d7:77:
8d:35:05:cb:53:ae:e2:a6:f5:5c:58:45:15:05:e3:fb:1d:74:
8d:8e:2a:6e:79:18:d5:6f:cc:32:7e:3e:d8:06:c8:cc:b3:02:
29:7c:2e:73:01:93:d5:f0:66:af:64:d0:3a:5e:c8:f9:96:2b:
13:54:ec:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:52:28 2025 by rpki-client