Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IXtGedz_Z6EcW-aaXY2jOfvUKsY.roa
File: IXtGedz_Z6EcW-aaXY2jOfvUKsY.roa (raw, json)
Hash identifier: qQ6HvCXcDn6WRTKS5uaRRAsItvmmwQxs3VHfb0gOkYs=
Subject key identifier: 21:7B:46:79:DC:FF:67:A1:1C:5B:E6:9A:5D:8D:A3:39:FB:D4:2A:C6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01960E3534386FFBE4D274C593D33496CB41
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IXtGedz_Z6EcW-aaXY2jOfvUKsY.roa
Signing time: Mon 07 Apr 2025 03:04:49 +0000
ROA not before: Mon 07 Apr 2025 03:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:e34:c79b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:35:34:38:6f:fb:e4:d2:74:c5:93:d3:34:96:cb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 7 03:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=217b4679dcff67a11c5be69a5d8da339fbd42ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:0f:fb:6a:80:6f:cc:32:b4:ba:56:29:d0:
3a:6d:ee:c5:17:a2:19:34:5b:da:06:bc:6e:e1:f3:
ca:b8:ce:f4:ba:b2:58:e5:8e:b1:1a:e3:e0:21:2f:
2a:1a:a9:3a:b1:d5:51:df:13:0b:8e:60:5d:18:36:
47:75:01:52:88:6d:aa:71:34:ec:98:cb:63:b0:44:
5b:c0:21:01:b5:8f:99:12:45:c8:5e:fd:92:2d:8a:
ff:95:93:87:eb:6a:af:43:5a:8c:cf:34:dc:58:28:
9e:d9:cd:05:d4:25:82:30:ff:73:70:cf:b6:42:3e:
a9:4c:e6:2c:6c:ff:69:55:a2:69:65:64:60:05:c2:
e1:f0:e6:de:ff:3b:67:ae:f8:33:61:40:f4:ac:40:
63:2e:8d:33:de:62:d9:85:2c:3f:c6:2c:ff:89:64:
4a:1b:b2:f7:76:c5:60:70:9e:70:91:de:ee:5b:96:
57:1a:05:a0:3b:32:28:a0:17:65:65:b0:b3:2a:de:
63:ca:65:69:8b:8b:6b:c9:01:27:57:81:32:23:3b:
08:0a:87:cc:27:00:33:4e:09:ac:b5:84:1c:d9:db:
df:3a:c4:c1:89:46:ff:41:37:0b:ba:05:14:9e:db:
f2:cc:0f:3c:49:dc:cb:73:8c:8a:ef:74:fb:c0:38:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:46:79:DC:FF:67:A1:1C:5B:E6:9A:5D:8D:A3:39:FB:D4:2A:C6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IXtGedz_Z6EcW-aaXY2jOfvUKsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:e34:c79b/128
Signature Algorithm: sha256WithRSAEncryption
56:64:b0:63:60:ee:d7:da:c0:b9:7e:70:59:8a:24:51:56:61:
cf:dd:81:8b:60:88:d1:b7:79:68:8f:94:88:48:4f:be:21:5f:
48:78:9e:41:48:2a:22:07:4a:1e:4e:59:74:c2:f6:49:79:8c:
a0:31:f0:7b:a0:c1:31:2f:a1:ea:e7:d2:46:d2:64:8b:54:ad:
8e:41:fe:d4:1d:bc:f8:d5:2a:f8:81:fb:c2:84:ad:7d:a0:48:
c4:8d:6e:b8:67:00:21:90:9c:bd:0c:8a:7a:d9:cd:3c:90:b5:
eb:14:5c:ba:63:ad:69:e9:92:a7:2f:57:c6:f8:f1:c8:5b:04:
9d:97:5b:a9:29:6b:d5:5a:b0:4a:1a:a0:cb:19:bb:e7:b7:ee:
2b:41:14:9d:1e:c4:61:08:fd:61:1a:3d:76:44:a7:62:22:3c:
ce:a6:92:c5:a4:fe:ee:1f:e8:02:29:b3:af:1c:f2:7c:15:4d:
17:6b:6c:57:81:82:e6:f3:c9:48:73:ff:00:23:0e:4d:d7:93:
c4:34:dd:61:39:c3:c9:36:3f:7d:b3:23:ad:c1:2e:23:8a:f1:
e6:6f:d0:9d:66:53:69:d7:12:5f:88:82:62:04:ae:fe:31:99:
67:29:ff:59:c8:11:25:bf:83:ef:45:ca:c7:96:e7:d5:a9:72:
f7:28:a3:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:51:42 2025 by rpki-client