Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/E0WVtA40Q4ctuc29i-1sy8UsWKM.roa
File: E0WVtA40Q4ctuc29i-1sy8UsWKM.roa (raw, json)
Hash identifier: aEtbbIy5skPEPbMtqzSJepjGAMRkOL5+/51kOS2EwK4=
Subject key identifier: 13:45:95:B4:0E:34:43:87:2D:B9:CD:BD:8B:ED:6C:CB:C5:2C:58:A3
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196DB8F18FF5AE041BAB0A4EA5F88ADE6B7
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/E0WVtA40Q4ctuc29i-1sy8UsWKM.roa
Signing time: Sat 17 May 2025 00:05:10 +0000
ROA not before: Sat 17 May 2025 00:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:db8e:49c0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:8f:18:ff:5a:e0:41:ba:b0:a4:ea:5f:88:ad:e6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 17 00:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134595b40e3443872db9cdbd8bed6ccbc52c58a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:a3:dd:6d:2a:6d:37:24:6f:34:d4:68:30:
e8:bb:f3:fd:c4:fb:06:1d:81:39:a5:fe:01:e9:0f:
50:ad:17:04:ca:d1:7f:01:a5:2a:16:c8:20:9f:c3:
dd:0b:dc:1d:f5:42:9d:98:58:90:84:dc:48:4b:dc:
d2:e9:c1:cd:49:4c:8b:0e:42:60:92:89:36:11:b3:
e3:73:a6:0c:f0:4c:e8:e0:6d:f1:e1:bd:19:9c:92:
a2:c6:49:19:f8:bf:a4:05:79:34:2b:89:a6:22:9e:
5b:a2:2b:6e:f6:41:31:6d:62:ff:20:93:97:90:fc:
c6:b5:f2:7d:b1:b2:fd:23:7a:11:e9:f4:65:5a:5c:
d6:ba:d4:0f:a8:3a:7f:25:b6:c1:d5:ba:8d:6f:92:
d2:7a:d4:d1:39:a3:72:6f:bd:b0:e2:50:98:de:27:
a4:bf:64:a5:13:5a:5a:14:50:d1:79:b1:0b:c0:d9:
0d:16:55:4c:24:88:3c:cb:41:ba:2d:06:81:62:2e:
8f:28:b2:58:69:22:62:a7:b3:74:de:cd:7d:34:26:
c2:08:ef:31:d3:e6:07:c8:b0:09:07:47:cf:84:39:
6d:a7:78:5b:e3:f9:3f:88:22:0b:7c:42:16:34:93:
79:01:5d:99:d8:90:cd:1e:26:73:39:62:38:2b:d6:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:95:B4:0E:34:43:87:2D:B9:CD:BD:8B:ED:6C:CB:C5:2C:58:A3
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/E0WVtA40Q4ctuc29i-1sy8UsWKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:db8e:49c0/128
Signature Algorithm: sha256WithRSAEncryption
a6:45:68:0a:ee:e0:75:8d:f9:31:34:2f:d2:b7:42:f4:1b:da:
f4:ce:3e:c0:88:41:ca:8d:17:87:98:c6:cb:ba:64:e1:8e:92:
81:18:64:74:04:3a:88:50:e5:f9:19:e4:6f:e1:a3:49:4f:a3:
5f:29:16:86:ff:43:66:fe:fd:79:52:e9:a9:61:f2:b2:e6:82:
0d:6a:d1:e3:ac:53:01:b6:9f:32:9b:9f:71:b0:24:7e:fd:73:
6d:81:2a:ac:f1:aa:71:c4:30:f2:10:c3:7c:36:3b:2f:db:ce:
0c:d7:ea:fd:c0:53:c0:b4:ad:75:f5:0e:b0:c3:b9:53:29:97:
2b:d5:dc:b4:5a:b5:4a:ec:32:4b:2a:82:68:d9:37:e0:75:94:
09:9c:28:8d:c2:3e:de:3e:c7:2a:2f:1a:db:22:74:38:60:08:
a3:e1:79:26:64:ad:fc:bf:9b:80:f6:5b:76:e6:bc:39:80:0b:
1e:ab:47:b3:cf:30:d3:17:fc:b4:c9:95:3e:1d:2f:53:7f:58:
5f:66:fc:9f:3d:ca:95:90:ea:cd:7d:5f:10:63:5b:55:2c:b2:
17:f0:de:02:da:f0:0d:f7:61:c5:78:3a:2f:85:33:fe:1f:8b:
de:9a:b9:f3:9a:88:97:ad:2b:c3:e1:79:de:16:07:71:e2:e9:
0e:e5:2d:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:56:47 2025 by rpki-client