Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CZaHmt2i766d2RF2HV7-4DMF-4o.roa
File: CZaHmt2i766d2RF2HV7-4DMF-4o.roa (raw, json)
Hash identifier: 7J62v7Yhs1HSK2nGvmfD4m1HQKsQ9MXIhQJHUPBrYxk=
Subject key identifier: 09:96:87:9A:DD:A2:EF:AE:9D:D9:11:76:1D:5E:FE:E0:33:05:FB:8A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01964B2619DCA922D317F0ABA698F6DF818C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CZaHmt2i766d2RF2HV7-4DMF-4o.roa
Signing time: Fri 18 Apr 2025 23:05:10 +0000
ROA not before: Fri 18 Apr 2025 23:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:4b25:436d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:26:19:dc:a9:22:d3:17:f0:ab:a6:98:f6:df:81:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 18 23:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0996879adda2efae9dd911761d5efee03305fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5b:bb:57:3f:f3:95:54:53:8f:c8:ff:32:a9:
24:42:99:95:91:38:f6:42:ed:e7:87:be:f7:79:ec:
2a:63:aa:d4:97:94:9f:d7:fd:f0:03:45:ae:6e:69:
40:6f:1d:32:21:2d:bc:fa:e5:47:dd:99:cf:aa:cf:
40:30:58:bc:6f:2a:0d:1f:e3:e8:d7:ae:dd:05:75:
59:71:f8:db:31:3b:07:71:7a:99:91:dd:95:e0:93:
77:5c:49:25:26:89:c3:3a:61:22:20:d0:f2:dc:66:
9d:df:b7:de:5d:cc:2f:2b:58:cd:a7:5b:70:55:76:
95:80:f7:ea:b6:12:bc:b0:8f:7a:3c:81:c3:e4:44:
04:00:e3:03:c7:c4:29:12:6b:be:5e:c1:d8:f3:53:
c8:a4:07:e6:d4:35:30:69:de:d7:d7:60:00:c3:c4:
10:ca:cf:b2:65:30:fe:96:a8:48:39:9d:7c:27:84:
98:dc:95:37:b4:13:b5:b0:64:6d:e4:0b:bc:f9:bb:
05:55:ce:35:f2:4d:75:01:5d:c1:cb:08:50:37:87:
78:8a:ab:0e:2e:df:06:4c:40:9a:f5:03:5a:e3:3e:
9d:f4:94:0e:13:6b:81:ae:07:5e:25:be:d2:c2:03:
9a:a4:b6:e8:a2:69:4e:3c:9a:4d:ed:3d:80:c6:a2:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:87:9A:DD:A2:EF:AE:9D:D9:11:76:1D:5E:FE:E0:33:05:FB:8A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CZaHmt2i766d2RF2HV7-4DMF-4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:4b25:436d/128
Signature Algorithm: sha256WithRSAEncryption
9f:da:44:92:1d:b4:f0:bc:4e:e6:c3:3f:cd:73:9d:7e:56:fb:
a3:99:ef:93:4a:dc:35:57:a1:d7:88:7a:e1:f3:86:a7:7f:54:
c4:e8:1d:21:01:51:8c:69:d5:f5:e5:29:9d:61:68:a2:1e:11:
c1:02:65:40:67:10:59:66:86:31:eb:08:76:40:d4:57:68:97:
b4:bd:bf:5a:19:d6:2f:34:fc:2e:47:35:0e:f0:00:c9:39:93:
57:92:dd:03:1a:5e:39:17:89:5e:20:9c:88:ef:a4:86:be:29:
70:ce:ec:c4:33:d6:11:7e:a6:22:ed:1a:57:de:a3:3b:62:00:
d2:3c:e1:ca:ba:7f:8b:0a:2b:27:b9:ab:a2:af:b7:69:54:e4:
ad:6e:33:12:3c:4b:94:cc:56:dc:c9:86:cc:43:8c:d4:ab:4a:
6d:92:d9:09:87:25:ba:90:99:8f:ef:81:19:2e:98:25:5d:be:
0c:f2:5a:47:73:ee:43:2c:15:e8:47:72:6e:62:d4:a6:8b:e2:
31:4d:fd:c4:07:d8:16:36:15:6b:c1:20:a3:d5:8b:94:3c:0c:
64:66:57:1b:d6:ff:09:88:f7:04:b0:97:0a:4f:2e:6a:7d:85:
cc:e8:6b:44:8f:a0:35:5c:96:8a:30:a2:75:b3:02:a0:75:87:
90:48:6a:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:01:44 2025 by rpki-client