Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F0VXIpGD2LOXG-MdqfHQqgWLPN8.roa
File: F0VXIpGD2LOXG-MdqfHQqgWLPN8.roa (raw, json)
Hash identifier: fnTs4WcDhqWpV9w4953sZliebxYS4C71Teh+xsVy0p8=
Subject key identifier: 17:45:57:22:91:83:D8:B3:97:1B:E3:1D:A9:F1:D0:AA:05:8B:3C:DF
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01961324A12AF1636B95BF0C0CD985BD951F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F0VXIpGD2LOXG-MdqfHQqgWLPN8.roa
Signing time: Tue 08 Apr 2025 02:04:49 +0000
ROA not before: Tue 08 Apr 2025 02:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:1324:9bc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:24:a1:2a:f1:63:6b:95:bf:0c:0c:d9:85:bd:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 8 02:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=174557229183d8b3971be31da9f1d0aa058b3cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:59:ef:5e:30:42:45:3d:cf:56:4d:c1:57:
f0:18:96:93:cc:9f:f1:37:4e:fe:2c:95:8e:29:ad:
0d:ea:94:ff:b7:ba:f6:04:ce:e4:0c:09:fa:31:42:
e5:40:b6:0b:7e:42:e6:b5:1f:e2:29:64:8a:59:2e:
a5:fe:30:53:91:2e:08:bc:0f:bc:88:af:6c:d7:88:
ff:d2:32:ed:b9:fb:37:c6:1d:f5:a4:14:0f:8f:34:
ed:5f:97:2c:c0:8a:cb:58:89:39:42:fb:6a:18:c9:
f8:03:ff:b7:18:bc:1f:e6:b1:69:da:c9:7b:a7:52:
52:a5:0b:bc:da:f2:41:50:33:a4:b3:3f:1e:b8:31:
18:99:ef:34:97:58:f8:85:b7:72:de:1d:be:f2:f1:
a3:45:0a:77:76:a2:d9:e8:cc:7b:22:f5:c2:e0:86:
e1:70:a7:e6:30:6f:9d:40:46:61:7a:be:8e:41:1b:
ee:18:f9:34:17:3b:db:08:b3:f9:2f:72:ee:0d:bb:
85:6d:1f:83:c0:60:ae:0a:f3:6c:2e:ef:db:68:8d:
93:8a:87:05:03:aa:95:3a:be:8f:4f:53:34:a8:5c:
11:30:a5:8e:1d:cc:75:e8:f8:b5:48:9f:23:6d:5f:
d0:4a:47:38:fe:fc:e0:8a:2d:91:36:b2:2d:a7:fc:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:45:57:22:91:83:D8:B3:97:1B:E3:1D:A9:F1:D0:AA:05:8B:3C:DF
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F0VXIpGD2LOXG-MdqfHQqgWLPN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:1324:9bc/128
Signature Algorithm: sha256WithRSAEncryption
8a:d4:79:8d:f1:91:d2:21:18:80:cf:34:ee:8e:a0:b4:87:fb:
53:28:e1:00:64:44:ce:6c:93:62:29:a4:ce:35:af:9e:f3:0e:
dc:4e:26:f1:a8:e5:1c:b9:27:76:80:6d:1f:ac:f2:26:c7:94:
ee:3b:02:88:04:94:3f:c5:23:ac:17:de:66:89:b6:bc:f3:1a:
d1:09:ed:a4:c6:5a:75:67:12:93:84:61:93:95:5d:5b:6b:01:
0b:01:8c:48:7a:19:0e:b2:24:65:1f:e3:44:b6:d2:40:7f:77:
9c:3c:9c:f1:82:ee:a2:e0:e3:b3:2b:24:a8:80:a8:72:69:80:
8d:21:b9:1c:5a:84:2d:81:92:82:b7:53:8c:92:97:cf:ad:99:
b6:45:2f:c7:92:c3:c7:66:b7:06:4b:ae:09:26:74:28:12:d8:
f6:9e:1e:49:10:11:ac:6f:5b:6b:55:78:da:49:4b:c8:0a:02:
3b:81:01:28:a7:e4:71:3a:3f:42:d0:f1:3f:48:de:39:5b:c6:
64:f6:78:d1:d8:af:a0:bb:75:d8:c1:18:81:ec:33:2c:47:29:
74:40:78:dc:36:1d:a5:ba:1f:6f:06:f9:d4:d5:37:35:b7:4f:
01:b8:3e:8c:40:c5:cd:8c:0e:98:13:23:cb:62:a9:82:f7:46:
53:ad:ae:38
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZYTJKEq8WNrlb8MDNmFvZUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDA4MDIwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzQ1NTcyMjkxODNkOGIzOTcxYmUzMWRhOWYxZDBhYTA1OGIzY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1RZ714wQkU9z1ZNwVfwGJaTzJ/x
N07+LJWOKa0N6pT/t7r2BM7kDAn6MULlQLYLfkLmtR/iKWSKWS6l/jBTkS4IvA+8
iK9s14j/0jLtufs3xh31pBQPjzTtX5cswIrLWIk5QvtqGMn4A/+3GLwf5rFp2sl7
p1JSpQu82vJBUDOksz8euDEYme80l1j4hbdy3h2+8vGjRQp3dqLZ6Mx7IvXC4Ibh
cKfmMG+dQEZher6OQRvuGPk0FzvbCLP5L3LuDbuFbR+DwGCuCvNsLu/baI2TiocF
A6qVOr6PT1M0qFwRMKWOHcx16Pi1SJ8jbV/QSkc4/vzgii2RNrItp/wiVwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBdFVyKRg9izlxvjHanx0KoFizzfMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvRjBWWElwR0QyTE9YRy1NZHFmSFFxZ1dMUE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWEyQJvDANBgkqhkiG9w0BAQsFAAOCAQEAitR5jfGR0iEYgM807o6gtIf7
UyjhAGREzmyTYimkzjWvnvMO3E4m8ajlHLkndoBtH6zyJseU7jsCiASUP8UjrBfe
Zom2vPMa0QntpMZadWcSk4Rhk5VdW2sBCwGMSHoZDrIkZR/jRLbSQH93nDyc8YLu
ouDjsyskqICocmmAjSG5HFqELYGSgrdTjJKXz62ZtkUvx5LDx2a3BkuuCSZ0KBLY
9p4eSRARrG9ba1V42klLyAoCO4EBKKfkcTo/QtDxP0jeOVvGZPZ40divoLt12MEY
gewzLEcpdEB43DYdpbofbwb51NU3NbdPAbg+jEDFzYwOmBMjy2KpgvdGU62uOA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:12:30 2025 by rpki-client