Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EvQ6l7L6RI-Ssr064IW5QgkD4qw.roa
File: EvQ6l7L6RI-Ssr064IW5QgkD4qw.roa (raw, json)
Hash identifier: HJ91hICNiGXSYo0j52qr/Dtjszdv9TBtdjrC6/Aashg=
Subject key identifier: 12:F4:3A:97:B2:FA:44:8F:92:B2:BD:3A:E0:85:B9:42:09:03:E2:AC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196E310C960DF8335631ABB82A0C91C6A6E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EvQ6l7L6RI-Ssr064IW5QgkD4qw.roa
Signing time: Sun 18 May 2025 11:04:10 +0000
ROA not before: Sun 18 May 2025 11:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:e310:c6f0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e3:10:c9:60:df:83:35:63:1a:bb:82:a0:c9:1c:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 18 11:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f43a97b2fa448f92b2bd3ae085b9420903e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:af:9b:31:78:4b:cb:2b:24:db:08:7d:fe:
1a:74:a4:fa:b0:3d:63:92:57:67:7a:98:7f:35:63:
fb:1f:63:35:aa:c3:1d:75:13:45:31:7f:5e:e7:ab:
3a:0b:15:b3:b9:c3:86:b7:0c:aa:2c:85:25:c3:33:
40:f0:96:92:7c:ad:fa:91:f1:13:72:c4:d0:98:91:
47:38:f6:57:cd:75:fc:f2:64:88:ab:61:bb:66:6a:
11:94:0e:11:0e:b5:f7:63:fe:bc:56:43:ef:6b:69:
9f:2e:17:e3:26:6f:90:f7:af:69:27:6b:6d:f3:59:
d3:81:eb:36:52:25:8b:9b:16:8b:75:b1:35:1b:7a:
a7:39:77:a9:79:de:f8:c8:81:00:86:32:10:0c:85:
fd:ac:b5:7b:d2:8a:af:48:22:f3:75:d8:df:3c:a9:
f7:10:fc:60:e9:2f:ef:36:e7:4f:d6:15:bb:8d:cf:
c4:e5:04:ea:68:dc:22:56:84:dc:2c:51:92:37:c4:
9e:b9:c8:7c:eb:34:4a:7f:0e:94:3e:06:7e:ae:89:
6d:51:12:63:42:8c:08:47:c7:50:8f:d6:9a:63:59:
0f:64:d8:03:01:fd:fc:03:bd:d2:25:ff:68:b5:d9:
1a:63:4d:73:90:12:11:cd:80:7d:10:09:3c:c7:ce:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:3A:97:B2:FA:44:8F:92:B2:BD:3A:E0:85:B9:42:09:03:E2:AC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EvQ6l7L6RI-Ssr064IW5QgkD4qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:e310:c6f0/128
Signature Algorithm: sha256WithRSAEncryption
65:23:75:a2:f9:19:9d:b6:b2:10:c5:f4:9f:5a:a9:5c:c0:d9:
ab:d5:de:1a:52:09:a3:70:a3:8c:2c:13:44:a6:53:e0:1d:a2:
13:87:5d:a6:04:fe:b3:13:a3:ec:56:20:69:ea:cb:ab:27:63:
aa:42:9f:f5:83:29:0b:4d:83:94:b9:b3:27:55:32:42:32:c2:
11:7c:a2:af:b8:60:1b:b8:f1:b9:04:b6:60:32:57:5f:52:5b:
a7:74:24:27:b0:22:68:2f:fc:e5:8d:e8:da:2e:25:37:be:5f:
ce:dc:f8:0e:04:fb:d4:c9:a2:14:78:2d:ce:78:61:11:74:13:
85:d1:7c:ea:05:4f:48:50:70:59:b9:10:8a:45:ea:2c:35:1e:
36:6f:84:31:f1:f8:0a:d6:da:51:43:97:83:b2:b8:a1:04:b5:
8b:37:db:d7:ea:c5:6e:46:09:95:6f:88:4c:b7:03:36:ab:df:
84:60:de:2b:da:30:11:69:b7:56:59:ce:03:a2:f2:c1:58:05:
ba:89:ca:39:14:8c:c8:01:4d:65:ee:c5:82:db:93:1d:40:5a:
e4:19:c1:c5:10:38:51:3a:91:cc:8c:be:a7:f9:3a:f9:e4:3e:
48:97:89:80:10:74:d4:07:16:ff:5d:04:48:73:e5:61:bf:63:
e9:f8:3f:f2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbjEMlg34M1Yxq7gqDJHGpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTE4MTEwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmY0M2E5N2IyZmE0NDhmOTJiMmJkM2FlMDg1Yjk0MjA5MDNlMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkSvmzF4S8srJNsIff4adKT6sD1j
kldneph/NWP7H2M1qsMddRNFMX9e56s6CxWzucOGtwyqLIUlwzNA8JaSfK36kfET
csTQmJFHOPZXzXX88mSIq2G7ZmoRlA4RDrX3Y/68VkPva2mfLhfjJm+Q969pJ2tt
81nTges2UiWLmxaLdbE1G3qnOXeped74yIEAhjIQDIX9rLV70oqvSCLzddjfPKn3
EPxg6S/vNudP1hW7jc/E5QTqaNwiVoTcLFGSN8Seuch86zRKfw6UPgZ+roltURJj
QowIR8dQj9aaY1kPZNgDAf38A73SJf9otdkaY01zkBIRzYB9EAk8x85L9wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBL0Opey+kSPkrK9OuCFuUIJA+KsMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvRXZRNmw3TDZSSS1Tc3IwNjRJVzVRZ2tENHF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW4xDG8DANBgkqhkiG9w0BAQsFAAOCAQEAZSN1ovkZnbayEMX0n1qpXMDZ
q9XeGlIJo3CjjCwTRKZT4B2iE4ddpgT+sxOj7FYgaerLqydjqkKf9YMpC02DlLmz
J1UyQjLCEXyir7hgG7jxuQS2YDJXX1Jbp3QkJ7AiaC/85Y3o2i4lN75fztz4DgT7
1MmiFHgtznhhEXQThdF86gVPSFBwWbkQikXqLDUeNm+EMfH4CtbaUUOXg7K4oQS1
izfb1+rFbkYJlW+ITLcDNqvfhGDeK9owEWm3VlnOA6LywVgFuonKORSMyAFNZe7F
gtuTHUBa5BnBxRA4UTqRzIy+p/k6+eQ+SJeJgBB01AcW/10ESHPlYb9j6fg/8g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:44 2025 by rpki-client