Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JgjCZEKq6HM8VIwEWI9OkvK7sC0.roa
File: JgjCZEKq6HM8VIwEWI9OkvK7sC0.roa (raw, json)
Hash identifier: 8LBLXD86G3R51LBTMbXox63k5HH3yRAFBf1oBnoS42M=
Subject key identifier: 26:08:C2:64:42:AA:E8:73:3C:54:8C:04:58:8F:4E:92:F2:BB:B0:2D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196060DCDF622FF7542B73CAA5F63D6F02F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JgjCZEKq6HM8VIwEWI9OkvK7sC0.roa
Signing time: Sat 05 Apr 2025 13:04:49 +0000
ROA not before: Sat 05 Apr 2025 13:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:60d:512f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:0d:cd:f6:22:ff:75:42:b7:3c:aa:5f:63:d6:f0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 5 13:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2608c26442aae8733c548c04588f4e92f2bbb02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:8b:2c:e8:13:e5:20:29:0b:aa:4e:78:79:
f3:81:44:d7:ad:93:46:82:f1:4a:3e:48:ab:96:d6:
e2:0a:56:6d:78:06:69:69:29:97:f9:40:fa:0e:a9:
dd:bb:5d:9b:40:e9:a3:36:f4:36:97:8a:ae:74:52:
31:1c:0b:d9:1d:2a:07:bf:9b:71:95:be:d8:f2:da:
6d:00:52:4b:a0:e7:fe:9a:97:1f:a5:a8:c2:21:be:
81:f6:f1:f8:80:48:a2:74:ee:06:dc:63:34:69:04:
10:2b:f8:ea:4a:ce:f2:e8:3c:81:f3:21:c7:cf:cf:
b3:e6:65:89:1b:e8:f4:a3:5b:a9:78:3f:b5:51:77:
5f:4a:4e:76:7d:20:5b:09:d6:63:1d:c1:cc:6c:9b:
81:82:00:01:c9:ec:e2:ac:db:4b:9d:d8:77:e9:6e:
7a:b7:80:cf:cf:97:06:84:c9:88:bf:18:89:c8:c4:
1e:a0:65:60:b2:06:56:f3:5a:01:4e:06:de:ad:5b:
30:6f:dd:c6:b0:96:e7:5e:87:48:f6:a2:f8:f7:f9:
30:f2:5a:4d:36:1e:df:89:77:07:29:d3:78:0d:c4:
b9:b4:52:dd:3d:80:ed:35:76:12:d9:c2:0b:d1:99:
14:9d:11:26:a5:e8:b4:d7:21:08:24:75:d6:57:14:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:C2:64:42:AA:E8:73:3C:54:8C:04:58:8F:4E:92:F2:BB:B0:2D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JgjCZEKq6HM8VIwEWI9OkvK7sC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:60d:512f/128
Signature Algorithm: sha256WithRSAEncryption
2e:30:61:24:7f:b3:2a:4c:6b:e9:82:c4:81:a6:7a:c8:10:03:
c9:fb:ba:ad:7c:cb:4f:91:a0:3e:ad:91:48:bf:6a:35:56:7f:
e4:cd:d7:5e:83:59:fa:dd:11:82:bd:bc:02:c4:30:e7:b8:c7:
a8:fa:0e:29:4c:fb:61:f4:90:1f:b7:27:2c:9e:95:09:36:5a:
38:bb:55:ed:81:7f:ee:12:3e:bb:7e:37:a2:26:4b:2c:5a:c3:
d8:b0:52:13:a6:fa:5c:56:a5:20:b2:20:95:a5:03:d8:1f:d4:
01:f6:09:e3:5a:4a:4b:e0:e1:f9:39:e8:84:7e:22:42:75:ee:
2b:3c:39:ac:e5:35:40:f6:73:f8:ba:cd:df:94:f0:f3:86:c4:
74:ff:84:e0:77:7e:91:78:ff:2a:b4:0c:40:7c:0d:8a:5b:c7:
67:7b:12:f9:36:c3:58:39:02:85:f9:70:d7:4c:e1:16:05:ea:
13:52:e7:1b:01:dc:f7:21:d9:d6:cf:4c:42:e5:7e:07:60:c5:
56:cd:6f:bf:e6:f5:db:27:b2:fa:bf:8d:f5:69:5c:d9:88:16:
ae:3c:d7:0e:04:bd:ac:1b:a7:4b:9f:6f:e9:e6:34:02:96:78:
c9:71:5f:6d:b8:aa:45:e2:a9:f2:52:8a:b7:38:8c:b1:a2:86:
62:7f:f9:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:27:20 2025 by rpki-client