Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JY9VSzrUhKW8ooWgbWa8RvIaedA.roa
File: JY9VSzrUhKW8ooWgbWa8RvIaedA.roa (raw, json)
Hash identifier: 4L4if19P2r1jt0UDm3HlLFbHpXnZmQVzkjK3lU9fp8o=
Subject key identifier: 25:8F:55:4B:3A:D4:84:A5:BC:A2:85:A0:6D:66:BC:46:F2:1A:79:D0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01967A5B1081B92F75162023AC9430E63244
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JY9VSzrUhKW8ooWgbWa8RvIaedA.roa
Signing time: Mon 28 Apr 2025 03:05:10 +0000
ROA not before: Mon 28 Apr 2025 03:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:7a5a:c50e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:5b:10:81:b9:2f:75:16:20:23:ac:94:30:e6:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 28 03:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258f554b3ad484a5bca285a06d66bc46f21a79d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:e6:fa:5d:ea:e0:6f:7b:a5:91:1c:f7:73:
94:31:02:3d:69:bb:f0:ce:c6:c5:a5:f9:2a:43:d3:
97:8d:55:f6:66:8f:ff:c4:55:05:84:e9:79:97:27:
ad:81:5d:f2:af:7e:6a:dc:a6:42:f1:88:57:2a:2d:
2b:ae:98:2c:57:55:fd:76:85:f0:ce:cf:e2:13:84:
61:4f:2c:4d:b4:d4:25:75:9b:4f:b4:a3:d2:9f:b6:
30:69:62:55:dc:67:0c:6a:71:23:89:a1:0e:18:a1:
61:90:be:c6:6e:2d:86:b9:d8:ff:d0:ed:d4:91:39:
36:33:af:5e:79:74:cc:9a:ff:98:ef:70:0c:8c:87:
d5:14:48:0a:55:05:d9:b6:d8:4e:5f:e3:8c:fe:27:
3c:41:f3:62:40:cd:95:27:39:b7:a0:35:9b:77:5d:
82:90:5b:19:6e:e3:64:b9:a8:30:e8:34:82:08:de:
bc:fa:54:e8:68:56:f1:b8:3a:7c:e7:1b:21:8a:88:
3b:4a:2d:a8:c7:d9:e1:7c:4b:02:58:69:15:c4:03:
f5:1e:8a:ff:cc:e7:95:cc:15:bf:26:11:40:f9:b0:
2a:6b:5d:71:ef:f6:7e:55:88:13:40:be:64:e6:f9:
c8:cb:6e:88:63:c6:7a:23:a9:a6:5b:dd:ac:83:af:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:55:4B:3A:D4:84:A5:BC:A2:85:A0:6D:66:BC:46:F2:1A:79:D0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JY9VSzrUhKW8ooWgbWa8RvIaedA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:7a5a:c50e/128
Signature Algorithm: sha256WithRSAEncryption
7c:28:3f:42:f9:32:9c:19:be:29:8d:9b:4c:c4:4d:cd:a3:33:
f5:77:96:f1:e7:f8:5d:1e:46:cc:fd:2f:55:84:be:2d:76:f0:
e2:0f:26:df:1c:c5:7e:39:76:11:86:97:cb:39:b1:aa:63:c5:
28:a5:3f:b8:0e:ff:a3:62:d3:c7:70:19:e6:73:bc:47:3b:91:
a2:7c:78:4f:26:d3:84:70:b3:e4:09:05:1d:f3:f6:4a:64:3f:
b6:b7:38:9e:c8:91:be:06:84:64:e6:0c:ae:a7:ce:aa:f6:88:
66:02:5c:c5:38:55:30:c8:5e:51:a7:3e:4e:7c:da:ac:ff:df:
83:72:87:b0:08:c2:a9:8f:c3:c1:64:76:f9:24:71:aa:1d:a9:
69:af:c5:95:b6:68:ca:35:59:23:89:42:84:2f:8f:f2:6f:6f:
c0:9a:b6:2f:dc:86:38:e4:de:3a:3a:55:76:ed:a0:0c:fe:b5:
28:dc:40:49:82:e2:63:56:e2:47:fd:32:41:19:23:56:70:39:
4a:66:82:27:eb:8a:23:b5:0f:30:16:8a:75:08:3b:1c:d4:71:
4f:15:03:02:37:43:4b:d0:d9:b1:31:19:46:58:46:4b:2b:65:
0f:f1:96:00:c4:ee:d9:d6:a6:ec:6f:00:36:13:a2:28:d8:a6:
0a:89:68:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:04:56 2025 by rpki-client