Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/H2Thkj6HBabfnq2bFinw71wIDDs.roa
File: H2Thkj6HBabfnq2bFinw71wIDDs.roa (raw, json)
Hash identifier: lrm/GnF3dzM7WCALo9WfYhTqCisRy/K/oklhUKWgufg=
Subject key identifier: 1F:64:E1:92:3E:87:05:A6:DF:9E:AD:9B:16:29:F0:EF:5C:08:0C:3B
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FFD24E91F9A735691A50BA674C5EF25F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/H2Thkj6HBabfnq2bFinw71wIDDs.roa
Signing time: Sat 24 May 2025 01:04:54 +0000
ROA not before: Sat 24 May 2025 01:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:196:ffd1:cc6c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ff:d2:4e:91:f9:a7:35:69:1a:50:ba:67:4c:5e:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 01:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f64e1923e8705a6df9ead9b1629f0ef5c080c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:f4:7e:f8:08:84:90:0f:de:eb:26:49:79:
12:fd:1c:a8:87:1f:82:44:8d:64:95:18:0e:6e:a5:
8e:32:de:6d:52:d3:2c:9b:93:e0:1c:da:8b:88:c4:
af:33:4f:ca:7b:6b:f1:6a:62:ba:6e:36:29:20:46:
d0:e5:5b:33:a2:c8:22:df:94:f9:9e:fc:36:45:71:
25:e5:2a:02:10:71:b7:b1:5c:e5:fd:c1:8e:eb:c4:
d2:13:92:ad:65:99:d5:1b:8f:7c:21:36:25:e7:28:
f4:1b:ff:ee:49:b5:0b:c6:e0:fb:fe:9b:73:32:ab:
8d:24:f8:71:5e:18:45:ef:eb:37:8f:4f:5b:09:58:
de:b6:18:2a:51:5a:55:76:30:a8:e7:69:ab:c5:25:
5f:a7:67:bc:c4:55:9f:90:9c:87:51:d3:60:18:9c:
d9:cf:37:20:f6:0e:60:71:a1:ed:69:46:4b:ca:ef:
26:50:4c:79:46:db:0c:22:e6:0f:9c:d7:bb:7a:ae:
21:9e:3e:4d:26:cc:7d:3e:b2:53:71:40:e9:83:28:
b2:7b:b7:c3:10:cf:b5:93:36:e8:e3:8d:f5:63:d4:
1e:dc:08:5b:46:76:eb:98:3c:b5:dd:99:53:d1:d4:
f3:77:94:f1:bc:44:59:27:e5:d9:b3:e3:89:e8:c6:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:E1:92:3E:87:05:A6:DF:9E:AD:9B:16:29:F0:EF:5C:08:0C:3B
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/H2Thkj6HBabfnq2bFinw71wIDDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:196:ffd1:cc6c/128
Signature Algorithm: sha256WithRSAEncryption
5b:df:e3:5c:3a:b6:ac:2b:c4:b0:ed:40:50:3c:c3:4b:fb:8a:
02:75:14:c8:cd:49:a3:35:a3:79:d6:8b:2a:81:23:ed:19:1e:
5c:00:23:14:91:70:9f:2c:0c:d4:27:e5:cc:a7:4b:b6:36:dc:
be:4c:4e:bb:2e:45:a3:d0:e3:4d:0e:1d:06:f4:bf:a5:b2:85:
f9:4b:c6:c5:31:f4:a1:ae:d4:53:4f:9e:3d:54:db:67:17:6e:
81:08:19:c7:20:cc:af:28:dc:76:d9:5d:70:a5:07:87:ce:8d:
56:0c:a0:6f:c8:6e:3b:8e:fe:70:e0:d8:cd:d5:d6:19:a1:81:
69:63:03:81:cd:f5:51:dc:2d:db:c2:bf:d8:71:e6:ee:78:3d:
ea:86:08:38:f6:53:51:f6:55:70:86:d4:3f:51:3c:8b:8a:7b:
f6:c5:ae:6f:0a:de:ee:a6:32:94:0c:9d:93:e8:75:da:39:e3:
96:5c:6e:cf:78:e6:fe:df:f0:19:a9:71:af:74:50:a6:f8:a2:
f9:31:0f:e6:11:a1:67:2a:39:76:b6:63:d2:9b:ec:1b:51:7c:
6d:e7:e7:51:d1:a8:74:d7:83:67:48:f1:e3:57:16:f8:c1:74:
0b:01:00:fa:1b:cc:2b:a5:66:e9:56:80:a6:a6:94:c1:1f:b9:
f2:89:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:36:33 2025 by rpki-client