Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OpMv7nr-bhKs73qP1R0CdpJFD-U.roa
File: OpMv7nr-bhKs73qP1R0CdpJFD-U.roa (raw, json)
Hash identifier: jTLPemgRDcGmi2l1U5cPWs5tOt24UDnjX7Y8cI1mzK0=
Subject key identifier: 3A:93:2F:EE:7A:FE:6E:12:AC:EF:7A:8F:D5:1D:02:76:92:45:0F:E5
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972AC6B43DFAC0AAF020F7A42B89F767B1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OpMv7nr-bhKs73qP1R0CdpJFD-U.roa
Signing time: Sun 01 Jun 2025 09:15:54 +0000
ROA not before: Sun 01 Jun 2025 09:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:c6:b4:3d:fa:c0:aa:f0:20:f7:a4:2b:89:f7:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 09:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a932fee7afe6e12acef7a8fd51d027692450fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:f9:c8:a4:af:e8:62:2f:67:3c:60:16:fe:
b9:d7:bd:cf:06:80:a1:60:ae:17:63:3c:8d:a0:63:
e2:f6:da:30:c7:d1:6d:52:f1:eb:d6:fc:f6:88:ac:
d6:97:da:67:5d:93:aa:5f:2a:1f:0c:b3:a9:3b:4c:
67:7a:b6:ba:f6:c2:72:b7:bf:2e:89:67:68:65:a0:
89:2d:96:e2:bc:68:97:3c:69:ea:79:7c:53:93:38:
1e:84:72:cd:c2:8a:1c:16:b8:da:24:fa:cc:49:d9:
24:64:69:66:13:ee:66:43:0e:68:f0:df:4e:cd:aa:
bd:b0:a1:e3:3a:68:c0:44:f6:57:de:de:b2:46:a7:
dd:ac:e8:3f:2c:25:ae:6d:b6:c3:89:a8:17:10:3d:
8b:df:2d:9c:62:77:38:82:74:d7:dc:0c:e9:33:87:
e2:f3:6e:4f:13:14:be:38:3a:5c:1e:5a:46:1e:ba:
d3:56:cc:01:d6:63:fc:97:78:c7:b2:a2:62:70:f1:
c8:2d:ea:e3:63:02:19:cb:6a:9b:99:c5:5f:b4:11:
28:df:fd:f5:2f:a3:80:26:95:c9:34:85:6d:7a:85:
12:a7:02:52:ed:f9:8f:a4:14:fb:df:e7:fb:08:67:
7f:2a:16:17:c3:fb:48:3d:73:b2:5b:32:08:9f:6c:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:2F:EE:7A:FE:6E:12:AC:EF:7A:8F:D5:1D:02:76:92:45:0F:E5
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OpMv7nr-bhKs73qP1R0CdpJFD-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
47:58:6d:44:99:ef:a4:2f:37:4e:3c:71:22:99:2b:5a:74:b6:
b0:2f:87:43:03:21:ac:5e:3c:b2:73:0d:47:52:56:47:18:28:
30:37:f3:89:4a:2c:53:7a:cc:dd:f1:e8:65:0e:7d:a4:49:ed:
0b:18:8d:ac:7e:f8:92:6f:c4:7b:f3:3d:4b:e9:c6:f4:c6:de:
4a:ce:d2:8a:a7:1f:c5:80:17:c8:1e:f9:a0:c7:36:5d:ed:42:
d5:f4:91:cf:04:f2:1c:38:86:36:b8:10:4d:17:6b:d9:af:32:
10:b9:b0:3d:f2:d6:93:86:34:e4:cf:eb:8f:e3:88:ed:32:16:
24:d3:d0:4e:66:91:74:0a:20:0a:92:d4:ef:19:2c:ad:22:50:
98:50:c2:6e:a9:90:82:b2:50:17:55:f6:1e:d1:6d:4a:da:ed:
1b:8e:8f:e0:67:1f:f1:eb:c8:4f:87:67:32:ee:18:d0:ac:0b:
48:94:37:6e:76:44:9c:fa:91:5a:7f:2c:9c:e4:e5:3b:b2:65:
c9:ca:e6:7b:1b:bb:03:04:6c:ed:7a:ad:a2:71:09:18:54:d3:
4a:5b:cd:6a:44:d1:be:ce:84:1f:98:27:23:11:bf:21:d5:10:
35:d4:33:28:95:28:db:4b:6e:51:75:e6:6f:03:4d:a6:96:a1:
a5:6d:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:27:22 2025 by rpki-client