Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/FyuGMevdQeO1OboIlNExGiYLOO0.roa
File: FyuGMevdQeO1OboIlNExGiYLOO0.roa (raw, json)
Hash identifier: w4zV1OuG8e7/fF7tTegFcitrQBx/+fn5uflAD9S75Oc=
Subject key identifier: 17:2B:86:31:EB:DD:41:E3:B5:39:BA:08:94:D1:31:1A:26:0B:38:ED
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197561D6A3C0EBBD4D072B132B63D668528
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/FyuGMevdQeO1OboIlNExGiYLOO0.roa
Signing time: Mon 09 Jun 2025 19:14:17 +0000
ROA not before: Mon 09 Jun 2025 19:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:1d:6a:3c:0e:bb:d4:d0:72:b1:32:b6:3d:66:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 9 19:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=172b8631ebdd41e3b539ba0894d1311a260b38ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:b5:02:1a:9a:f7:3b:b1:a6:91:f2:86:49:
dd:8a:50:d8:3d:1c:0d:dd:9c:f9:b2:fa:80:45:b6:
9b:32:bc:ea:53:8d:73:7f:18:21:d6:00:b2:0a:e6:
36:1f:df:3d:1d:1a:21:b0:3e:8f:16:9a:0b:d1:d8:
b3:d3:20:1f:af:65:0b:75:6e:db:c6:a0:e6:aa:fe:
6d:d3:da:e2:5a:46:89:2f:7a:a3:6c:00:28:30:4a:
e6:e6:b6:d8:b1:25:78:65:47:7f:53:19:55:e9:65:
fe:ad:74:37:1d:dd:e6:d2:17:d9:84:ea:0b:4e:9d:
60:46:b6:e9:12:aa:b5:6c:85:c7:50:ba:3f:26:84:
ae:0a:e7:b9:52:ff:be:f6:1d:32:6d:45:ed:4f:c0:
14:71:f1:13:11:99:b8:19:b0:6c:dc:84:8e:f0:e1:
24:8d:90:56:ff:54:71:2c:90:44:9d:67:0b:c7:fa:
a7:47:59:b1:e0:de:f7:0b:28:7e:e7:69:9e:ae:3e:
8a:d2:b7:e4:eb:0f:42:bb:98:9d:17:12:c7:43:d3:
97:49:71:e7:eb:c9:9a:db:21:c1:cc:53:39:f9:c4:
af:ec:62:c2:75:1f:c8:8e:26:b5:8c:a6:39:bc:f0:
6d:c3:8a:4f:45:49:0e:b1:ca:e6:7c:62:ec:c7:27:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2B:86:31:EB:DD:41:E3:B5:39:BA:08:94:D1:31:1A:26:0B:38:ED
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/FyuGMevdQeO1OboIlNExGiYLOO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
14:c6:b9:ee:9b:0f:6b:7b:f1:a3:82:71:56:e4:33:54:16:e5:
84:3f:98:c2:88:ec:ff:2c:41:fe:be:8c:ca:2c:dd:9b:6a:02:
06:3a:f5:2f:1f:1a:45:c8:9f:f5:ac:a3:4a:c4:5f:92:23:97:
6b:0c:c6:19:0b:22:f6:d8:4f:f1:53:9d:49:42:c9:ed:9f:54:
b8:2e:f6:32:e1:30:17:06:ba:a0:19:bf:52:c8:72:a4:92:8b:
a3:66:82:d1:6a:f2:48:af:98:c3:1a:49:bd:71:96:f6:93:26:
3c:f8:7d:9d:bc:93:4b:51:05:20:71:4a:10:23:2b:ed:6a:23:
0c:46:73:a7:42:21:0f:10:7b:22:db:7b:52:57:19:48:1b:3b:
87:14:39:bb:93:a9:1b:a4:de:7c:ed:6d:ca:35:e8:e2:ac:94:
ab:ad:1d:11:43:de:19:89:a0:c6:fb:76:22:60:b6:d6:e9:29:
cb:d5:1f:2f:8f:cc:75:2a:22:53:0e:75:c3:6a:92:3a:1d:e5:
f2:ba:fd:ae:0f:30:32:24:50:04:54:ac:03:53:a5:96:99:fa:
47:24:bf:5f:a8:b9:f1:b1:ad:bc:60:4d:e4:5e:ee:50:61:f3:
78:c9:d6:5d:a7:32:b1:63:f9:17:70:d9:47:97:27:bc:58:e4:
cc:c5:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:50 2025 by rpki-client