Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/O4dBXYc9_-x8m5pQsl0czY1oI3Y.roa
File: O4dBXYc9_-x8m5pQsl0czY1oI3Y.roa (raw, json)
Hash identifier: R+RI6vYhYNr5eXaqAs6govG5479df28md00p7jYl4yA=
Subject key identifier: 3B:87:41:5D:87:3D:FF:EC:7C:9B:9A:50:B2:5D:1C:CD:8D:68:23:76
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972AFBCE3FB9BD6AED00F3BECF78DBEFD4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/O4dBXYc9_-x8m5pQsl0czY1oI3Y.roa
Signing time: Sun 01 Jun 2025 10:13:54 +0000
ROA not before: Sun 01 Jun 2025 10:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:fb:ce:3f:b9:bd:6a:ed:00:f3:be:cf:78:db:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 10:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b87415d873dffec7c9b9a50b25d1ccd8d682376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:5b:70:09:56:5f:b4:0c:72:fe:19:16:8d:
6a:f7:21:59:ba:8e:29:84:f1:d7:68:c5:7d:b1:b9:
54:97:3c:4a:22:ee:81:26:ad:5c:e7:3b:3c:5a:21:
57:6b:a3:56:92:b5:96:72:96:3d:e5:8d:2f:0c:a7:
ff:37:5c:48:ec:54:15:d1:54:4b:37:21:9f:6e:e0:
1f:c5:f9:c4:3b:e0:89:64:a1:5a:68:d1:f5:97:2a:
6d:8a:aa:d1:bb:2f:e7:c8:56:2e:62:22:3c:95:e7:
8f:d8:e8:3c:8e:91:45:e9:ae:75:28:6a:f3:48:e2:
63:87:de:54:bd:d0:0a:68:76:24:6b:d3:b4:a0:48:
8e:ba:7c:7a:b2:dd:1d:9e:c0:04:f4:af:fc:cb:c9:
36:9d:68:0d:26:1d:87:51:97:b0:0d:52:34:90:0b:
52:d8:de:f0:7e:65:bd:83:35:bf:b3:75:68:0e:07:
45:a3:1e:77:95:a3:fe:36:bb:9c:cc:aa:31:9b:9e:
b6:f0:c0:0b:6f:f5:e1:ad:34:9a:04:4e:a7:76:21:
17:d0:ba:9c:00:d2:b8:3b:99:52:8f:ef:c6:41:5f:
1b:45:13:24:01:79:4f:ec:bf:28:e6:94:d5:2b:89:
f4:9b:b4:7d:c8:1d:6f:5a:02:5d:ac:c6:6f:e3:84:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:87:41:5D:87:3D:FF:EC:7C:9B:9A:50:B2:5D:1C:CD:8D:68:23:76
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/O4dBXYc9_-x8m5pQsl0czY1oI3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
60:f0:4c:91:4e:ac:44:db:02:b6:6f:cd:1e:47:8a:e7:c4:ea:
43:f6:13:de:29:9b:f2:48:5a:ef:6e:b4:c1:5e:a9:90:11:03:
65:57:67:fb:08:9a:9a:de:3b:f1:8c:52:05:cd:1b:2c:22:b6:
35:a1:0c:e1:c2:0d:23:24:0c:da:c2:5b:21:68:cc:f0:ae:39:
71:25:ed:9b:36:86:3c:b2:e4:5a:d4:e6:05:42:92:10:35:fe:
4f:c8:ac:c6:74:52:da:d9:78:b8:f3:07:62:cd:13:49:b9:84:
70:11:43:f0:98:40:15:6b:75:7a:ff:90:27:94:26:7b:b6:8e:
b5:9e:c7:32:65:ff:e6:2d:04:b7:6d:a1:c6:93:d7:d0:c6:30:
3b:35:06:ce:06:5c:d5:26:19:4b:50:1f:73:42:6b:a8:16:7e:
e1:c5:c1:49:19:1f:9c:55:dc:2c:ee:43:34:d6:43:19:2e:11:
fb:c6:da:dc:55:bd:c6:cd:36:ed:5f:f9:3a:5e:76:f1:73:35:
30:71:3f:c5:14:20:8e:eb:90:17:a7:39:25:5c:47:08:6b:5f:
5f:a8:e0:3c:24:2c:13:ae:59:22:15:ef:6d:f6:df:cc:a9:2a:
c2:90:60:32:a7:bf:40:0e:e9:72:01:33:5f:08:d6:49:da:9c:
29:3f:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:20:04 2025 by rpki-client