Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DAATMhbyZHltXxCrqHRz0Men4Jk.roa
File: DAATMhbyZHltXxCrqHRz0Men4Jk.roa (raw, json)
Hash identifier: qoUZSMiL9SGNiUjF88i7F3welk916LDIlR/WAOVmePw=
Subject key identifier: 0C:00:13:32:16:F2:64:79:6D:5F:10:AB:A8:74:73:D0:C7:A7:E0:99
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196C57439DEAAAB7C9AC02C3AEC5EE187F4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DAATMhbyZHltXxCrqHRz0Men4Jk.roa
Signing time: Mon 12 May 2025 17:04:10 +0000
ROA not before: Mon 12 May 2025 17:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:c574:3315/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:74:39:de:aa:ab:7c:9a:c0:2c:3a:ec:5e:e1:87:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 12 17:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c00133216f264796d5f10aba87473d0c7a7e099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:df:e5:6d:d3:cf:e1:7d:78:52:44:96:be:
4b:0d:82:e4:9b:88:6c:a7:26:08:d8:41:64:33:54:
f5:b4:d1:c6:dd:2f:3e:9a:ba:63:88:01:50:ed:7e:
8d:86:8e:8e:86:c2:ec:38:ea:7b:12:38:38:02:59:
d7:45:80:f7:f0:06:e2:56:52:df:ca:63:cd:b9:55:
e2:12:6c:9f:b7:96:40:ae:a5:49:e2:fe:e3:ac:fb:
1e:05:c6:62:2a:a7:fd:0d:40:47:96:06:af:cc:49:
40:75:06:6e:9a:59:57:01:b8:ad:0c:64:a1:f9:99:
0e:fc:40:e3:d9:cb:ce:1a:41:eb:a4:f9:61:9f:df:
69:ae:2d:0b:8a:46:d5:44:29:e3:62:86:b7:53:32:
69:b0:57:a3:24:e1:f3:6d:0a:2e:78:25:b2:76:31:
0a:3a:2c:35:17:32:3a:59:57:28:94:96:e2:6c:e4:
51:89:59:d6:5f:dc:35:11:6a:03:19:f3:ba:22:8e:
34:85:86:40:45:bf:cd:e9:9b:4d:7c:57:ca:85:79:
c8:04:c2:5a:b8:67:aa:e1:fe:2b:87:08:96:8f:07:
ef:f8:10:d1:73:da:73:1d:66:83:af:8e:a6:76:66:
25:bc:eb:f3:f6:b6:ef:0c:86:de:6c:8c:9f:a6:6e:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:13:32:16:F2:64:79:6D:5F:10:AB:A8:74:73:D0:C7:A7:E0:99
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DAATMhbyZHltXxCrqHRz0Men4Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:c574:3315/128
Signature Algorithm: sha256WithRSAEncryption
6c:00:ab:93:e3:c9:24:26:2f:48:2b:b1:5b:b7:34:bd:c6:93:
3a:aa:fd:18:16:b1:7c:98:99:f0:6a:5e:85:73:d2:b8:f9:e9:
f9:d9:a5:f4:f1:a4:0d:d1:ca:6e:e9:ed:11:23:00:c9:30:8b:
36:62:e5:70:49:4a:79:fb:d5:79:e2:c7:c0:f8:e5:5c:90:2b:
73:46:ab:30:a2:43:14:6a:51:49:be:45:ae:70:cd:68:3d:b6:
d0:5b:42:45:3d:52:72:4d:1f:82:6b:c3:7c:59:2b:21:ca:da:
2a:1b:e0:37:7f:f2:9a:89:82:ba:12:19:86:5b:14:0e:24:18:
24:5b:e2:58:58:59:7c:e2:5c:2e:24:48:78:34:84:5a:cc:7b:
27:04:75:ed:e3:3a:de:40:af:41:f7:4a:d4:f5:dc:29:33:00:
52:88:13:90:be:2e:f1:0d:03:70:f7:d7:be:8c:c3:a4:6a:9e:
14:e4:63:68:e6:c8:6f:08:a8:92:6d:c4:ba:9f:e5:2e:fe:02:
e7:7d:d4:ff:37:48:d1:77:0d:bc:0d:e9:3e:e2:dc:a4:9d:fe:
f0:04:42:87:3d:8c:ab:e4:45:37:03:5f:b4:ef:8f:51:e1:53:
d3:4a:a1:2a:47:e1:38:bb:7c:fb:84:0c:dd:69:82:df:56:6b:
6a:e8:af:5e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbFdDneqqt8msAsOuxe4Yf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTEyMTcwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzAwMTMzMjE2ZjI2NDc5NmQ1ZjEwYWJhODc0NzNkMGM3YTdlMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ7f5W3Tz+F9eFJElr5LDYLkm4hs
pyYI2EFkM1T1tNHG3S8+mrpjiAFQ7X6Nho6OhsLsOOp7Ejg4AlnXRYD38AbiVlLf
ymPNuVXiEmyft5ZArqVJ4v7jrPseBcZiKqf9DUBHlgavzElAdQZumllXAbitDGSh
+ZkO/EDj2cvOGkHrpPlhn99pri0LikbVRCnjYoa3UzJpsFejJOHzbQoueCWydjEK
Oiw1FzI6WVcolJbibORRiVnWX9w1EWoDGfO6Io40hYZARb/N6ZtNfFfKhXnIBMJa
uGeq4f4rhwiWjwfv+BDRc9pzHWaDr46mdmYlvOvz9rbvDIbebIyfpm7rDwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAwAEzIW8mR5bV8Qq6h0c9DHp+CZMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvREFBVE1oYnlaSGx0WHhDcnFIUnowTWVuNEprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWxXQzFTANBgkqhkiG9w0BAQsFAAOCAQEAbACrk+PJJCYvSCuxW7c0vcaT
Oqr9GBaxfJiZ8GpehXPSuPnp+dml9PGkDdHKbuntESMAyTCLNmLlcElKefvVeeLH
wPjlXJArc0arMKJDFGpRSb5FrnDNaD220FtCRT1Sck0fgmvDfFkrIcraKhvgN3/y
momCuhIZhlsUDiQYJFviWFhZfOJcLiRIeDSEWsx7JwR17eM63kCvQfdK1PXcKTMA
UogTkL4u8Q0DcPfXvozDpGqeFORjaObIbwiokm3Eup/lLv4C533U/zdI0XcNvA3p
PuLcpJ3+8ARChz2Mq+RFNwNftO+PUeFT00qhKkfhOLt8+4QM3WmC31ZrauivXg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:27:48 2025 by rpki-client