Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CGrS63LpElXIHDV4hkyXoPKNHxs.roa
File: CGrS63LpElXIHDV4hkyXoPKNHxs.roa (raw, json)
Hash identifier: cQiwsPeIJU9iPTt/Ys8x8dQRjWYoJJzHisL3Zi7Zhjw=
Subject key identifier: 08:6A:D2:EB:72:E9:12:55:C8:1C:35:78:86:4C:97:A0:F2:8D:1F:1B
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196373175C099EEDD778E2A1C10A7311807
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CGrS63LpElXIHDV4hkyXoPKNHxs.roa
Signing time: Tue 15 Apr 2025 02:05:10 +0000
ROA not before: Tue 15 Apr 2025 02:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:3730:974c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:31:75:c0:99:ee:dd:77:8e:2a:1c:10:a7:31:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 15 02:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=086ad2eb72e91255c81c3578864c97a0f28d1f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:10:ce:b0:27:4c:c1:b8:15:78:59:d6:4b:
3b:e8:0e:c2:4b:7e:58:5e:1b:90:b7:bc:af:1a:d3:
9e:3a:bd:d9:b0:fd:b1:6f:61:49:cb:6d:7a:31:22:
93:9c:70:3a:e4:73:ca:33:0b:1f:b2:57:36:23:61:
9f:53:5f:ce:2f:bd:1b:7f:ec:48:ce:d8:2e:d4:73:
57:7d:36:7c:5f:4e:c8:cf:b9:84:7e:cf:8e:87:5d:
3e:35:38:e0:be:93:05:06:04:f6:67:e1:6f:ff:0a:
c1:e6:cd:b6:f0:1e:10:6a:da:99:a9:a8:99:16:c6:
cf:0b:1f:94:3b:cd:46:98:f1:94:60:b0:c7:94:b4:
46:96:77:7e:9c:3b:19:c5:c5:60:85:7b:f8:90:06:
24:7e:e2:ac:88:68:1e:5c:aa:f6:21:3d:81:12:0c:
0a:ce:51:77:21:a3:16:89:f8:3b:d7:f6:6e:5d:d8:
e3:4c:a3:97:d9:8b:1b:9c:6e:32:2d:dd:63:a4:3f:
1d:41:a6:03:7d:74:ab:80:c6:cc:5c:5c:8f:b1:e6:
b4:62:a5:b9:ed:4d:22:e3:88:42:4a:8a:cb:8f:97:
5b:a9:a0:a8:e1:cb:71:99:09:85:8d:d6:34:e3:b5:
4a:ab:8f:46:a2:59:e8:9f:b2:02:69:2b:49:d1:ba:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:D2:EB:72:E9:12:55:C8:1C:35:78:86:4C:97:A0:F2:8D:1F:1B
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CGrS63LpElXIHDV4hkyXoPKNHxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:3730:974c/128
Signature Algorithm: sha256WithRSAEncryption
0c:05:27:65:2d:71:b1:ca:84:ef:92:61:51:9f:39:31:fa:cf:
5c:cf:63:43:ce:08:9d:85:70:09:49:e9:04:a2:de:bf:cc:d7:
d4:4d:48:23:c5:cc:8d:ab:1c:44:f1:5d:ca:fb:b5:ef:9a:ea:
01:f0:af:44:14:7c:f5:b0:78:46:dd:42:18:06:c0:23:a8:43:
55:4c:26:9a:45:44:2d:2a:9d:9b:29:39:91:c5:7c:ec:3c:2d:
d7:cf:ba:5f:12:5f:37:0b:53:94:83:ec:e1:06:8b:21:31:c9:
48:1a:05:04:71:ff:c2:c1:f7:a3:cb:e6:26:0d:d3:14:ec:66:
ec:c6:08:72:26:8e:fb:d4:93:8b:97:4b:a2:30:8f:10:3e:23:
f4:a3:15:8d:a7:b2:43:69:57:59:bb:e6:72:54:72:41:fd:79:
8c:49:16:e6:a2:07:94:26:ec:14:0e:03:c8:b1:fb:8c:b5:20:
db:01:1c:ca:c1:90:e7:4e:fe:2b:fa:ae:dc:84:ee:07:72:b5:
19:c9:e0:ca:39:c5:f0:5f:e1:13:8c:b8:77:48:11:ef:8e:05:
5a:f1:0f:1c:4c:82:d3:0d:2c:a5:c8:cb:53:7e:40:d3:d7:9a:
83:0a:bf:9a:cb:ee:47:df:1d:3c:2f:e8:c3:58:49:d6:57:ab:
bb:88:cd:c6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZY3MXXAme7dd44qHBCnMRgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDE1MDIwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODZhZDJlYjcyZTkxMjU1YzgxYzM1Nzg4NjRjOTdhMGYyOGQxZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3MQzrAnTMG4FXhZ1ks76A7CS35Y
XhuQt7yvGtOeOr3ZsP2xb2FJy216MSKTnHA65HPKMwsfslc2I2GfU1/OL70bf+xI
ztgu1HNXfTZ8X07Iz7mEfs+Oh10+NTjgvpMFBgT2Z+Fv/wrB5s228B4QatqZqaiZ
FsbPCx+UO81GmPGUYLDHlLRGlnd+nDsZxcVghXv4kAYkfuKsiGgeXKr2IT2BEgwK
zlF3IaMWifg71/ZuXdjjTKOX2YsbnG4yLd1jpD8dQaYDfXSrgMbMXFyPsea0YqW5
7U0i44hCSorLj5dbqaCo4ctxmQmFjdY047VKq49Golnon7ICaStJ0bpSZQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAhq0uty6RJVyBw1eIZMl6DyjR8bMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvQ0dyUzYzTHBFbFhJSERWNGhreVhvUEtOSHhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWNzCXTDANBgkqhkiG9w0BAQsFAAOCAQEADAUnZS1xscqE75JhUZ85MfrP
XM9jQ84InYVwCUnpBKLev8zX1E1II8XMjascRPFdyvu175rqAfCvRBR89bB4Rt1C
GAbAI6hDVUwmmkVELSqdmyk5kcV87Dwt18+6XxJfNwtTlIPs4QaLITHJSBoFBHH/
wsH3o8vmJg3TFOxm7MYIciaO+9STi5dLojCPED4j9KMVjaeyQ2lXWbvmclRyQf15
jEkW5qIHlCbsFA4DyLH7jLUg2wEcysGQ507+K/qu3ITuB3K1GcngyjnF8F/hE4y4
d0gR744FWvEPHEyC0w0spcjLU35A09eagwq/msvuR98dPC/ow1hJ1leru4jNxg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:58:30 2025 by rpki-client