Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ESUWc1zSrG_HfzegFz7QlJGG43M.roa
File: ESUWc1zSrG_HfzegFz7QlJGG43M.roa (raw, json)
Hash identifier: x/rPVOCq2sxpykDqfkv8qE4wl0zppjOyY8NtUcDcVNk=
Subject key identifier: 11:25:16:73:5C:D2:AC:6F:C7:7F:37:A0:17:3E:D0:94:91:86:E3:73
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F0CE3E6EF8634F90F26AC3054AC7794E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ESUWc1zSrG_HfzegFz7QlJGG43M.roa
Signing time: Wed 21 May 2025 03:06:10 +0000
ROA not before: Wed 21 May 2025 03:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:196:f0cd:d578/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f0:ce:3e:6e:f8:63:4f:90:f2:6a:c3:05:4a:c7:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 03:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=112516735cd2ac6fc77f37a0173ed0949186e373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:b7:41:58:06:60:57:96:02:ac:9e:fd:da:
79:d1:db:ff:f1:85:c4:10:06:4f:bb:ea:80:0d:3d:
a0:f7:c2:da:65:a5:c8:80:dc:89:70:21:c9:76:02:
d5:30:f3:6f:e8:c4:de:6b:08:69:3d:f2:b7:36:54:
38:a1:7d:a3:c1:03:66:3f:83:b1:5a:87:90:32:e3:
a4:aa:c7:e4:fe:d7:a1:83:e5:6c:89:87:cd:76:9e:
92:ac:d4:d7:94:d5:89:aa:11:40:ae:23:8c:6b:1d:
69:18:f0:c3:ba:96:78:0e:a9:f7:25:83:f0:7b:84:
ca:f8:e2:10:4f:ee:a5:60:b5:3d:94:1b:98:4f:17:
4b:24:06:c4:9c:60:4c:48:93:54:84:e2:9d:27:54:
b8:f4:9c:12:c0:6f:ca:9c:e8:51:f0:fe:19:42:e4:
77:bf:05:27:58:3e:b5:77:c6:42:ef:f7:28:c7:ba:
2a:46:e3:ab:44:5c:8f:7e:16:dc:70:3b:49:e0:fb:
a9:bf:ce:47:7e:72:79:ca:a5:fc:36:25:3b:6c:4a:
1a:13:bf:02:7c:3e:d4:71:d9:b5:a8:27:85:29:10:
2a:15:40:1a:17:1f:8d:61:8d:38:c0:23:71:88:d0:
15:55:ca:4c:3d:25:9b:06:7a:c4:79:c9:f0:48:2b:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:16:73:5C:D2:AC:6F:C7:7F:37:A0:17:3E:D0:94:91:86:E3:73
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ESUWc1zSrG_HfzegFz7QlJGG43M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:196:f0cd:d578/128
Signature Algorithm: sha256WithRSAEncryption
ae:a6:b5:ce:c2:2d:09:9f:70:60:0d:64:00:38:79:d5:d1:73:
2b:a0:75:59:8c:7b:04:8e:3f:e9:62:71:b3:b4:b7:a3:4d:f0:
c2:89:bb:eb:e4:ee:10:87:d5:93:52:5a:26:59:8b:2c:cb:e7:
85:59:36:b0:1a:ad:47:75:b0:df:bd:f4:83:f0:17:65:44:97:
47:2a:d6:4d:70:9e:af:a2:16:2e:c2:f8:0f:9d:0d:fd:90:76:
63:26:9f:92:55:c3:1d:a4:cc:16:29:dd:7b:96:cd:d8:83:0b:
0a:8b:4a:f1:69:77:4d:71:d1:fe:ec:bf:f2:00:92:36:90:cd:
f2:da:e8:cf:3a:f5:ce:6b:43:74:ef:a9:fd:49:7e:75:b6:b5:
9e:bc:60:47:36:e6:85:35:0f:39:a5:25:c9:a8:e6:e9:15:12:
36:42:06:78:51:7d:e3:f8:93:a3:97:92:4d:84:c5:f3:0b:77:
4a:73:e2:4b:77:6e:e8:3d:27:53:32:75:b8:11:55:53:14:1f:
f1:c5:73:05:96:13:d5:a1:a3:6b:98:71:b7:cb:01:13:4e:50:
5b:78:40:54:da:f7:b0:c9:fc:e9:36:90:78:e0:77:26:5b:74:
53:76:5d:05:50:b4:5c:55:ca:b0:88:1b:fe:1a:8d:5e:3b:f1:
d4:62:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:09:35 2025 by rpki-client