Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa
File: OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa (raw, json)
Hash identifier: ocxC8LjAZpzH4X+m3mjaX2pqNeZY8N7xodvdEgzkP1U=
Subject key identifier: 3B:14:D5:69:80:23:3A:AC:F5:67:24:8D:76:00:29:D9:2B:05:EA:58
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01960A218063B473878539D017779016B82F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa
Signing time: Sun 06 Apr 2025 08:04:49 +0000
ROA not before: Sun 06 Apr 2025 08:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:a20:e610/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:21:80:63:b4:73:87:85:39:d0:17:77:90:16:b8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 6 08:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b14d56980233aacf567248d760029d92b05ea58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:ac:82:28:43:c3:70:46:5d:61:0a:5a:66:
d4:0e:c6:07:e0:b3:e3:15:ba:ea:df:af:dd:df:02:
72:1b:14:69:06:5d:ac:e0:ab:d5:46:e6:90:34:0a:
da:a4:48:a8:48:94:fd:31:f9:6c:fd:57:ba:3b:50:
85:ca:23:22:f7:e4:6c:cf:7b:56:5c:fc:59:55:63:
1a:a7:85:3c:9b:79:fe:7b:55:cf:03:03:18:21:86:
4c:07:0b:3a:41:d3:2c:a5:5f:65:cb:34:de:52:45:
d8:5a:74:11:27:a0:4e:47:6a:97:5b:f2:bc:a1:7b:
7d:90:df:ed:79:17:58:74:b6:bd:a5:83:4d:9e:7e:
8a:02:cb:ee:27:09:46:e1:33:46:af:71:a4:8d:90:
96:12:37:a7:fb:0a:83:ff:4c:70:2d:6e:18:6d:db:
7c:5b:0e:f9:7f:f8:08:f9:36:87:94:ca:e4:d6:53:
7e:6b:7e:24:f8:ff:60:9a:86:5c:b8:0d:61:9e:b7:
b4:cf:d9:6a:ee:8b:4e:92:f9:bd:bd:e4:97:cc:20:
7d:59:41:03:f7:17:7a:53:bc:ab:8b:c5:5c:7c:f8:
89:f6:cd:41:23:02:ac:3a:69:f2:3e:3b:30:28:2c:
03:1f:bf:f3:1c:27:48:0c:08:e3:fd:81:b5:10:90:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:D5:69:80:23:3A:AC:F5:67:24:8D:76:00:29:D9:2B:05:EA:58
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OxTVaYAjOqz1ZySNdgAp2SsF6lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:a20:e610/128
Signature Algorithm: sha256WithRSAEncryption
a4:86:da:48:e4:d1:0d:46:9d:4d:e7:01:da:6d:44:4a:b2:4d:
8e:e6:c7:7a:45:3a:32:6a:15:cc:b1:ee:e1:0d:6b:35:0e:44:
80:31:31:82:0c:17:9f:4f:aa:bb:df:ba:9f:48:35:6f:20:82:
20:4d:cb:1c:6a:7f:ad:72:35:92:57:e4:53:e0:6c:08:4e:7f:
81:ef:9d:04:60:fe:ab:fb:89:54:29:b8:c8:f8:df:e5:98:38:
a3:d0:7a:3b:e0:08:9f:83:70:bc:ab:4c:11:b8:22:a9:e7:bf:
02:17:a5:39:36:40:0d:03:ea:eb:16:92:2a:17:59:81:ec:3c:
5c:f2:7e:a5:24:1a:3d:38:98:4c:ef:9a:0a:8d:b1:d3:87:48:
15:ae:41:86:17:fc:08:fa:30:81:e7:09:9c:00:5e:3a:81:da:
b7:88:3d:8b:de:3d:b4:13:69:f3:1d:d7:2f:71:93:af:e7:d3:
25:df:b9:ac:82:52:71:da:eb:01:46:e7:12:0f:ea:db:2e:2a:
85:eb:e3:6d:bd:3d:f3:59:25:99:c9:6d:54:9a:e0:2d:98:e2:
31:c5:56:53:ad:15:ac:d5:9c:b7:b4:ba:b2:4f:c1:4a:ca:25:
6a:27:0e:59:87:43:c8:f1:8f:c7:42:27:32:e6:8a:94:73:2e:
fe:83:68:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:12:14 2025 by rpki-client