Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BcwyiDl-_ff7AuTxiYpDSZaDsgg.roa
File: BcwyiDl-_ff7AuTxiYpDSZaDsgg.roa (raw, json)
Hash identifier: 7NrZj2AYKnBR0dGOK2EUpInw8BheP20L9Hyw3av5pvM=
Subject key identifier: 05:CC:32:88:39:7E:FD:F7:FB:02:E4:F1:89:8A:43:49:96:83:B2:08
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196A5B3416DDDF1ADBF7C78BE86591B6D2B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BcwyiDl-_ff7AuTxiYpDSZaDsgg.roa
Signing time: Tue 06 May 2025 13:05:10 +0000
ROA not before: Tue 06 May 2025 13:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:a5b2:a73b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:b3:41:6d:dd:f1:ad:bf:7c:78:be:86:59:1b:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 6 13:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05cc3288397efdf7fb02e4f1898a43499683b208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:e4:20:3d:67:3d:22:f2:39:1d:76:e8:5c:
9c:60:13:07:45:b6:73:c1:06:5b:a4:5d:75:fc:61:
a0:6b:e4:90:f8:c9:86:54:32:8e:95:5f:88:73:54:
c7:8f:1d:42:4c:bf:4d:aa:cd:57:c9:bb:76:87:4c:
ef:9d:f8:77:35:93:cb:49:a6:22:fa:12:ff:c0:93:
f5:92:c0:d4:ab:0a:6d:67:e8:3e:e1:d0:91:16:35:
aa:bc:1d:f1:ee:ef:7f:32:59:e3:31:f9:1e:08:45:
8f:95:8e:86:cb:f1:ae:29:38:f4:25:e7:8d:b5:ca:
7e:31:f0:f2:48:1b:2f:e5:9b:45:7d:dc:b8:4e:86:
2c:8f:3f:99:b2:99:34:8e:05:cd:6c:a5:20:e0:82:
ca:67:2c:69:49:b2:c8:87:e9:7e:5b:7d:43:df:cd:
98:eb:7a:41:14:68:0f:44:47:33:6c:e0:ec:1a:cf:
67:ae:b4:5f:9b:10:4f:fd:18:9f:8b:0f:69:8e:e5:
b5:db:7e:5d:91:d4:c9:a8:cf:22:7d:e7:a2:05:a2:
16:f2:35:2c:55:35:fa:df:f9:68:63:7b:b3:bc:61:
04:8e:98:1f:88:c8:4a:b2:16:a2:bc:73:18:d4:f6:
53:a1:76:6d:2a:e4:84:d8:99:ee:89:da:e4:ee:bd:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:32:88:39:7E:FD:F7:FB:02:E4:F1:89:8A:43:49:96:83:B2:08
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BcwyiDl-_ff7AuTxiYpDSZaDsgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:a5b2:a73b/128
Signature Algorithm: sha256WithRSAEncryption
78:fe:2c:5d:28:bc:78:b2:3f:4e:dc:9d:3f:fe:35:58:88:6f:
23:b1:44:f9:97:80:60:c5:a2:2e:c0:ad:a3:ba:62:b7:d4:31:
f1:5f:7f:1a:3b:8e:1c:66:66:25:1c:90:c1:74:c6:1c:80:06:
34:9e:33:6b:2f:1a:3a:e3:bb:1f:c3:4f:56:e4:7d:9b:20:80:
cc:24:64:35:86:48:d3:5d:d0:7f:06:ab:4d:5f:bf:cc:1b:28:
17:52:69:d3:75:19:b6:33:7b:d8:aa:67:06:42:c8:a8:13:8f:
cc:85:ba:9b:72:fa:bc:96:4b:0c:d7:a3:66:fd:73:fd:7f:d1:
40:f8:a3:02:b4:ba:6d:30:db:28:26:9a:78:1b:52:d8:01:ed:
51:09:fa:74:00:03:09:c4:9d:a7:ef:42:f5:ec:c4:6a:36:78:
3a:8e:88:52:e5:8b:16:8b:cc:5d:69:ed:e1:d5:2a:71:4f:ec:
23:f4:ff:08:7f:17:8c:a9:85:6f:90:0a:c5:28:b8:4a:3f:20:
24:46:85:b6:b9:d4:de:e9:fa:38:62:62:c2:a4:8c:91:06:40:
f5:02:75:10:00:dd:8d:e9:00:09:83:55:7b:76:a6:a7:53:16:
9b:e3:88:ea:92:6e:a5:2d:f0:f2:78:3e:7c:45:7f:8d:74:90:
3e:1a:cc:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:19 2025 by rpki-client