Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Iid5dDlUsPgzmK0OMn38VtZRTmo.roa
File: Iid5dDlUsPgzmK0OMn38VtZRTmo.roa (raw, json)
Hash identifier: pV4G9Hcj5NF9jh9tTqPGfYLYmTR2trs6+qSmNwRGCrg=
Subject key identifier: 22:27:79:74:39:54:B0:F8:33:98:AD:0E:32:7D:FC:56:D6:51:4E:6A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01960F47DC8F7962C92A4D5A860E72B83422
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Iid5dDlUsPgzmK0OMn38VtZRTmo.roa
Signing time: Mon 07 Apr 2025 08:04:49 +0000
ROA not before: Mon 07 Apr 2025 08:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:f47:d1ea/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:47:dc:8f:79:62:c9:2a:4d:5a:86:0e:72:b8:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 7 08:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222779743954b0f83398ad0e327dfc56d6514e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:18:ed:c9:ab:b2:4b:b5:83:83:98:5f:c4:3d:
6e:3f:b4:0b:4d:04:2e:7c:ac:6b:ae:11:e6:e6:ad:
60:fa:8a:cb:da:e5:58:e7:78:00:80:2b:a2:7a:82:
82:38:98:73:42:d9:b3:e5:79:83:69:8a:56:85:14:
a0:ec:0b:04:16:b2:fe:33:dc:01:5a:20:a2:b7:7f:
2d:50:ba:98:17:8f:5b:2d:b4:90:cb:54:93:0a:a2:
1b:5e:c7:55:b4:e4:92:60:e3:61:a0:ab:5d:4f:3f:
4f:0f:ee:17:98:e5:e8:ad:bd:0d:1e:5a:e3:af:75:
d9:b9:a5:60:76:61:4a:81:9a:cd:e3:90:0b:1f:4b:
45:48:5b:2e:d4:c2:55:b1:c2:2c:d6:95:af:8e:25:
ac:72:f8:ab:43:11:6f:fc:22:20:51:07:5d:cc:04:
a6:71:7d:11:9b:30:34:64:68:09:d3:18:ee:94:75:
31:11:5c:2c:35:b4:87:46:79:81:8d:68:d9:f1:45:
ba:ef:ae:b6:2c:51:47:4e:bf:7f:2d:85:71:0f:4c:
f7:bb:00:2a:b8:5e:e7:0c:bc:2f:9d:4e:14:dc:df:
55:1f:9b:3c:d2:08:dc:d2:6c:84:4b:4a:b7:95:b6:
03:d8:ce:1c:ed:c8:f9:c1:89:97:e5:83:6f:cd:28:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:27:79:74:39:54:B0:F8:33:98:AD:0E:32:7D:FC:56:D6:51:4E:6A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Iid5dDlUsPgzmK0OMn38VtZRTmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:f47:d1ea/128
Signature Algorithm: sha256WithRSAEncryption
8d:e0:87:02:4e:70:54:c0:db:63:31:37:20:5d:c7:5c:7e:bb:
22:f3:f9:ec:1a:52:7a:c7:80:2a:8c:79:2e:5a:2a:cb:ff:1f:
30:94:bc:5a:f6:a8:fb:05:80:65:01:f3:97:f9:ac:46:b1:33:
a2:47:8d:0c:f5:e1:1e:2b:2a:33:32:fb:08:01:3d:15:17:22:
bf:ea:4c:39:81:10:bc:2e:e2:0d:c6:fd:44:eb:9a:ac:2a:a8:
45:85:02:13:94:c2:f2:81:ca:64:31:be:79:b7:41:85:80:c3:
3a:64:76:61:91:21:69:c8:f2:93:ff:45:14:ca:fd:92:2c:e2:
58:00:35:4b:4c:84:22:a1:96:1f:03:95:3b:3b:82:31:66:75:
09:fa:d4:f1:78:85:ed:8f:01:23:12:78:b0:91:9b:35:be:19:
8a:99:07:57:ad:d9:df:9a:a4:14:75:43:e8:34:f2:2e:70:81:
bf:ee:72:e8:f4:62:f8:0d:f5:34:96:1a:12:bd:51:e6:9c:da:
24:85:9e:ce:7c:6a:d1:18:6e:d9:89:0a:33:49:a9:a2:59:1e:
bd:12:31:f6:88:b3:1d:6a:b1:6f:a2:c6:be:f5:f5:d9:72:85:
c0:55:09:e0:1e:bc:83:f4:47:d9:cb:87:59:00:a0:3e:0b:cc:
fa:a2:21:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:45 2025 by rpki-client