Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/L6aY7DMUGPSZU3bh6urUuLCZxNk.roa
File: L6aY7DMUGPSZU3bh6urUuLCZxNk.roa (raw, json)
Hash identifier: FFsOoZDDMqkENiMtAILjdzT9Mywa5WBbj+i64JEjtaQ=
Subject key identifier: 2F:A6:98:EC:33:14:18:F4:99:53:76:E1:EA:EA:D4:B8:B0:99:C4:D9
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973B79A88A14FA7AACFB41385BEB87C577
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/L6aY7DMUGPSZU3bh6urUuLCZxNk.roa
Signing time: Wed 04 Jun 2025 15:05:18 +0000
ROA not before: Wed 04 Jun 2025 15:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:3b78:e289/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:79:a8:8a:14:fa:7a:ac:fb:41:38:5b:eb:87:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 15:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fa698ec331418f4995376e1eaead4b8b099c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:d1:f9:85:ff:9e:3f:f7:bd:f3:06:d8:bb:
34:e6:e8:4f:4b:24:99:0d:c1:e1:ed:06:01:5f:ae:
34:a8:b4:d7:7a:24:c0:5d:b1:3d:3c:72:bf:4e:79:
3c:6d:ea:2d:0f:a4:8f:14:0f:e2:68:39:03:95:e9:
e0:dd:ad:77:2a:44:80:1a:9f:8b:26:44:f8:28:55:
7b:8e:10:10:08:16:1f:f9:79:67:dd:3d:23:b5:ab:
80:6c:ac:59:7b:20:96:7d:9d:1a:6c:4e:dc:ec:d7:
b1:92:23:c7:a0:ba:a2:45:03:b0:34:69:90:be:26:
a9:10:fa:98:1d:92:42:55:da:c7:7c:87:2b:39:b7:
99:2b:48:38:18:07:42:f0:37:13:df:7f:0c:67:69:
df:ff:68:91:0a:6c:42:86:0b:17:1c:68:73:5b:93:
28:15:70:31:43:e7:e4:46:7b:2d:f8:93:d0:c6:6d:
ff:9a:32:bd:12:57:3a:3e:57:56:37:59:72:03:d2:
76:80:4a:a5:02:64:1d:ec:94:45:43:f4:6c:00:ed:
fa:50:27:52:d6:37:28:36:56:6f:c1:4c:54:dd:78:
ff:8c:d3:b4:06:52:07:e6:f7:2c:48:b0:94:75:4c:
d0:e6:cb:76:db:44:25:d9:18:c1:61:c3:b2:1a:25:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:98:EC:33:14:18:F4:99:53:76:E1:EA:EA:D4:B8:B0:99:C4:D9
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/L6aY7DMUGPSZU3bh6urUuLCZxNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:3b78:e289/128
Signature Algorithm: sha256WithRSAEncryption
98:41:7c:51:bd:e3:a8:87:81:46:93:3c:43:48:0a:40:da:7b:
fe:1c:c0:47:9d:60:28:52:98:ab:78:07:f2:fe:37:7f:46:c7:
16:38:54:71:98:b6:ce:9b:c2:a5:09:91:4d:67:39:a1:f6:3e:
40:be:13:0f:0a:d5:69:0b:55:c7:ab:3e:ee:3f:54:69:00:3a:
6a:3e:c6:d0:42:43:df:3d:0a:eb:47:82:4c:a3:79:f6:7c:6e:
61:cc:a8:73:33:bf:9f:aa:8f:d2:81:73:a9:73:f9:62:87:38:
b5:59:af:b0:31:40:48:81:3e:ca:0c:63:58:5e:90:72:4d:3c:
d9:b7:8d:53:f1:d7:2e:82:3d:1a:78:bf:d9:5e:ff:0f:03:99:
38:a2:fc:6d:19:5f:1e:0f:ab:2e:7b:94:07:d3:6c:24:d5:8e:
5f:9a:3c:96:0f:b8:a8:3b:2e:8f:46:3e:e0:d3:f3:b9:32:ac:
17:e3:f5:3b:58:de:8a:31:57:68:6c:f8:22:85:7f:2e:c5:ec:
80:64:3f:fb:28:83:37:06:c1:3c:56:32:4c:04:6e:db:d8:da:
ee:1e:f4:a5:1e:d8:ac:15:ae:9b:ee:2b:aa:56:2f:50:f9:58:
d0:fc:52:35:1d:3b:61:dc:03:cc:85:4b:51:c1:30:76:c1:d6:
6f:07:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:11 2025 by rpki-client