Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Gz1zB14sVighgE5A0pQGe_W8VCQ.roa
File: Gz1zB14sVighgE5A0pQGe_W8VCQ.roa (raw, json)
Hash identifier: jstfYTSJ5rPp1Zxu5axRRQhY2RTUb9cv/SrLk/raJqg=
Subject key identifier: 1B:3D:73:07:5E:2C:56:28:21:80:4E:40:D2:94:06:7B:F5:BC:54:24
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019740A7562C8DC4D122C88A264751EAC5B8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Gz1zB14sVighgE5A0pQGe_W8VCQ.roa
Signing time: Thu 05 Jun 2025 15:13:17 +0000
ROA not before: Thu 05 Jun 2025 15:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:a7:56:2c:8d:c4:d1:22:c8:8a:26:47:51:ea:c5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 15:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b3d73075e2c562821804e40d294067bf5bc5424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:8b:ba:1e:54:b9:9f:d3:df:d6:fb:7d:1f:
75:01:aa:d6:fe:77:f9:07:55:93:71:dc:d2:a7:7f:
55:59:98:f3:11:0d:38:3f:4b:19:c5:10:a9:06:bd:
65:bc:3a:29:9b:1e:34:d7:9b:d8:c9:5c:cc:f2:12:
0b:12:56:26:d1:e9:55:fb:01:d9:87:43:95:86:73:
85:af:48:36:0a:92:ef:32:2b:0d:77:d6:ce:9c:83:
de:1f:04:ec:ba:b9:99:d3:cf:2d:2e:97:f4:b8:30:
b8:9a:0a:f8:0e:f6:a0:4b:59:17:74:37:74:e9:0c:
d2:4e:36:54:12:ea:65:46:42:9c:28:9b:ef:c2:b2:
16:b1:ca:2a:ec:75:39:4d:cf:f0:48:be:5e:38:01:
58:10:bc:38:48:3d:3e:18:4b:2b:d3:f6:35:9f:b8:
3c:f1:0d:c0:a6:80:7c:7f:f6:8a:5e:a8:f0:cc:2b:
c4:a2:17:2e:72:d5:00:5e:93:dc:b1:db:d6:44:2e:
4c:51:b6:29:5a:87:cb:94:33:73:e7:8c:e7:47:e3:
f3:86:d2:4e:f2:c6:73:56:ef:44:2a:33:35:7e:74:
0d:15:7f:c0:09:7f:48:20:72:d3:f2:7c:ba:f0:ec:
d6:b5:c8:1d:28:67:e5:db:ff:90:85:ef:98:8d:f3:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:73:07:5E:2C:56:28:21:80:4E:40:D2:94:06:7B:F5:BC:54:24
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Gz1zB14sVighgE5A0pQGe_W8VCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
3e:01:8e:44:f4:93:55:67:30:cc:22:e6:d9:6d:68:12:08:da:
e9:d4:de:e1:c1:92:93:cd:6c:ec:ff:ea:f6:3e:ef:c2:e8:78:
a4:b2:5b:ab:08:26:f0:14:be:8d:91:79:57:b8:41:f9:dc:55:
1b:f0:8b:cb:04:92:02:5a:a3:8c:eb:7d:c9:55:8d:52:88:e2:
38:57:c8:05:42:42:ab:5d:17:05:ce:fe:18:05:86:0a:80:ce:
99:e9:0d:26:b8:98:54:8d:8e:f0:41:90:aa:8b:5a:f3:90:ce:
90:51:4f:9b:bb:b3:84:72:af:0d:e0:6f:27:ff:b5:ba:88:32:
86:ee:05:c1:66:04:46:31:d8:83:d5:fa:3f:e7:f2:99:f2:c7:
47:b0:0c:22:c9:ca:e2:c6:7e:73:c5:92:8e:5f:fc:0d:bf:1a:
c4:e6:96:45:20:2c:7c:98:c8:08:c5:6f:19:d6:ac:5b:61:40:
26:c0:02:13:2a:23:64:51:3f:a0:8b:24:9a:19:82:cf:d2:7d:
96:95:36:d0:c0:02:6a:fa:f9:f0:a4:70:2f:2c:86:82:ea:20:
d8:a2:97:6a:a5:b7:94:16:01:da:1d:1c:ab:52:ad:d4:c7:ba:
19:ff:94:70:86:e2:5e:f7:4a:f6:5d:31:e3:bb:51:ae:23:fe:
72:06:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:54 2025 by rpki-client