Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F-TjtFAfQFBQORuL6j8Z8cfu4Vw.roa
File: F-TjtFAfQFBQORuL6j8Z8cfu4Vw.roa (raw, json)
Hash identifier: eLeMjy1fh/8/3N2H71LkMgyJBP1ktqi88Okpgsmuom8=
Subject key identifier: 17:E4:E3:B4:50:1F:40:50:50:39:1B:8B:EA:3F:19:F1:C7:EE:E1:5C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019688BB7BC58FFC7EEFCFA554BE1BE272E0
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F-TjtFAfQFBQORuL6j8Z8cfu4Vw.roa
Signing time: Wed 30 Apr 2025 22:05:10 +0000
ROA not before: Wed 30 Apr 2025 22:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:88ba:971a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:bb:7b:c5:8f:fc:7e:ef:cf:a5:54:be:1b:e2:72:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 30 22:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e4e3b4501f405050391b8bea3f19f1c7eee15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:53:4b:ec:64:90:e1:1a:e0:1b:fe:8b:8d:
31:2f:6a:0e:41:3d:6d:8f:c6:ec:f3:f0:85:90:20:
32:9c:1a:9b:27:45:59:00:bf:2a:1a:75:d4:3d:c1:
fe:a6:fe:f1:6d:eb:91:b7:aa:30:15:8c:0c:bb:b9:
14:a6:16:06:4c:b7:43:42:f1:bc:58:7e:89:b2:93:
66:b0:ca:10:f4:09:a2:81:da:48:ed:df:52:20:64:
54:1b:cd:89:07:0e:d3:93:b1:12:21:40:87:fc:9a:
cc:d6:ac:83:97:72:b4:7b:3f:46:05:3b:45:ce:64:
a9:da:4b:6f:3c:d7:13:41:15:64:cc:1e:3b:e3:e0:
f6:9c:20:50:ab:a6:1a:48:ec:54:85:e9:ea:d3:a2:
ae:6e:83:b7:00:de:d0:cd:3f:d9:40:62:f8:e9:6d:
be:2a:9a:0f:7c:de:9a:17:82:e5:57:4c:17:e8:32:
92:92:20:2c:c2:b3:96:14:54:d4:47:25:0e:00:ea:
47:8b:8f:c9:bf:92:ba:74:8d:fc:82:3c:8b:49:03:
01:53:64:3f:43:31:59:73:8b:77:c3:b2:7a:30:f0:
1d:68:ef:15:20:8c:36:16:37:86:bc:87:96:b8:50:
8b:87:e9:97:10:f6:69:ff:07:69:5a:ae:dc:fb:ce:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:E3:B4:50:1F:40:50:50:39:1B:8B:EA:3F:19:F1:C7:EE:E1:5C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F-TjtFAfQFBQORuL6j8Z8cfu4Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:88ba:971a/128
Signature Algorithm: sha256WithRSAEncryption
97:22:93:37:d7:74:0d:ce:c7:85:6c:56:1d:0d:16:99:b2:a8:
36:6c:5e:e3:e0:d7:f3:02:be:cd:d0:c7:97:21:e7:ad:d8:e1:
74:84:05:7b:0d:4e:19:de:1f:02:5b:79:92:4d:a6:35:7e:e1:
c7:80:e9:34:b9:69:48:f5:d5:dd:78:7c:f2:16:32:ff:63:78:
c6:8f:b3:84:05:d5:aa:79:60:fb:24:68:3f:25:32:d1:35:88:
b4:98:65:ef:be:c7:36:db:c8:3c:24:ef:f4:fb:d1:e9:37:67:
13:3e:31:8b:a7:8c:a0:26:5a:5a:55:d8:94:d2:05:7c:c9:8e:
d9:c7:cf:96:fd:bf:67:31:47:6b:64:fa:f7:41:71:97:07:f6:
39:f8:4f:d9:b2:18:00:2a:9d:f3:72:1b:6a:e1:8e:f0:39:69:
2d:64:50:08:61:85:27:b0:df:76:6d:4c:df:86:d9:85:5e:a7:
f5:67:3b:68:4e:f1:74:85:9c:77:67:f6:ea:7e:72:8c:52:bc:
83:f6:96:fc:de:5c:85:8b:2a:32:64:50:91:d3:0a:39:3c:31:
0f:16:23:46:43:05:d5:b1:cf:bb:c2:f8:3a:b7:6d:5d:b6:50:
b0:2b:43:86:a0:36:f9:42:16:a0:5a:e9:52:e5:1b:15:ae:ab:
88:a8:d1:6b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZaIu3vFj/x+78+lVL4b4nLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDMwMjIwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2U0ZTNiNDUwMWY0MDUwNTAzOTFiOGJlYTNmMTlmMWM3ZWVlMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujBTS+xkkOEa4Bv+i40xL2oOQT1t
j8bs8/CFkCAynBqbJ0VZAL8qGnXUPcH+pv7xbeuRt6owFYwMu7kUphYGTLdDQvG8
WH6JspNmsMoQ9AmigdpI7d9SIGRUG82JBw7Tk7ESIUCH/JrM1qyDl3K0ez9GBTtF
zmSp2ktvPNcTQRVkzB474+D2nCBQq6YaSOxUhenq06KuboO3AN7QzT/ZQGL46W2+
KpoPfN6aF4LlV0wX6DKSkiAswrOWFFTURyUOAOpHi4/Jv5K6dI38gjyLSQMBU2Q/
QzFZc4t3w7J6MPAdaO8VIIw2FjeGvIeWuFCLh+mXEPZp/wdpWq7c+84P7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBfk47RQH0BQUDkbi+o/GfHH7uFcMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvRi1UanRGQWZRRkJRT1J1TDZqOFo4Y2Z1NFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWiLqXGjANBgkqhkiG9w0BAQsFAAOCAQEAlyKTN9d0Dc7HhWxWHQ0WmbKo
Nmxe4+DX8wK+zdDHlyHnrdjhdIQFew1OGd4fAlt5kk2mNX7hx4DpNLlpSPXV3Xh8
8hYy/2N4xo+zhAXVqnlg+yRoPyUy0TWItJhl777HNtvIPCTv9PvR6TdnEz4xi6eM
oCZaWlXYlNIFfMmO2cfPlv2/ZzFHa2T690Fxlwf2OfhP2bIYACqd83IbauGO8Dlp
LWRQCGGFJ7Dfdm1M34bZhV6n9Wc7aE7xdIWcd2f26n5yjFK8g/aW/N5chYsqMmRQ
kdMKOTwxDxYjRkMF1bHPu8L4OrdtXbZQsCtDhqA2+UIWoFrpUuUbFa6riKjRaw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:52 2025 by rpki-client