Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/P_eo-8wsdqyX_omOBhjE9Bi0vps.roa
File: P_eo-8wsdqyX_omOBhjE9Bi0vps.roa (raw, json)
Hash identifier: HhS5tEWshjWYm4C0AQPp63EPD4jAERs/74dojHN1aY4=
Subject key identifier: 3F:F7:A8:FB:CC:2C:76:AC:97:FE:89:8E:06:18:C4:F4:18:B4:BE:9B
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974069165555EE0BB45AFE12882E0C613B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/P_eo-8wsdqyX_omOBhjE9Bi0vps.roa
Signing time: Thu 05 Jun 2025 14:05:18 +0000
ROA not before: Thu 05 Jun 2025 14:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:4068:5117/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:69:16:55:55:ee:0b:b4:5a:fe:12:88:2e:0c:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 14:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ff7a8fbcc2c76ac97fe898e0618c4f418b4be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:96:27:d9:e8:fb:1a:b6:90:38:6c:54:b4:
b8:11:73:c1:3e:6d:38:26:2d:ad:5a:ce:bb:83:63:
44:9f:f1:43:7e:bf:d5:fa:7c:e2:41:61:85:b7:31:
8d:c9:43:62:14:29:b7:37:9d:25:f8:73:d0:61:17:
d9:66:79:c4:9c:03:16:79:32:ed:2e:3e:ae:6f:fb:
bd:1b:4e:08:a8:a2:13:07:12:22:1e:42:85:55:79:
31:59:35:5f:15:99:86:fd:cc:83:75:7b:6a:ee:6e:
17:e1:44:aa:8b:d9:f2:c2:a5:31:b7:78:db:04:61:
bd:c2:35:8c:ba:9b:47:fd:65:da:47:fb:37:2c:44:
2b:ea:21:35:2b:54:3c:31:fd:db:ba:1a:4d:0f:58:
bc:15:94:78:3c:7c:8a:83:dd:60:0d:af:8b:00:ee:
5d:f8:e5:c5:9d:16:d9:09:6d:9c:1b:e5:bc:5d:f2:
09:11:21:91:71:23:59:f4:b0:5d:a8:83:6a:8c:fa:
62:31:f0:1b:50:24:e2:df:e4:e2:70:ab:0a:a0:97:
dc:35:54:0a:85:08:0c:73:a1:2d:7a:14:6d:16:6a:
5c:aa:3b:f8:48:61:d3:d2:a3:01:de:ec:dc:c0:cc:
36:62:67:49:9d:ff:47:0e:73:75:b0:5f:50:fb:8a:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:A8:FB:CC:2C:76:AC:97:FE:89:8E:06:18:C4:F4:18:B4:BE:9B
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/P_eo-8wsdqyX_omOBhjE9Bi0vps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:4068:5117/128
Signature Algorithm: sha256WithRSAEncryption
bc:8c:34:26:04:c6:e6:80:dd:29:37:25:6e:32:82:b4:3f:ff:
06:e9:9b:cd:a7:e0:ac:3a:0a:1f:d8:14:d3:60:58:17:3a:c4:
c0:a3:9b:0a:88:cc:82:20:71:93:16:53:be:f3:06:50:e6:15:
c1:da:74:b0:0a:27:f6:dd:9d:5a:1c:51:d2:c2:28:ba:e7:e3:
46:fb:8d:9f:19:22:2a:04:8d:9d:56:cb:a4:f8:86:2c:3b:be:
4d:51:0a:f4:dd:fd:14:42:b4:76:2f:61:d9:dd:03:02:ea:79:
63:ec:b2:aa:4f:cf:25:31:10:dc:a3:07:e9:08:ad:02:c7:8c:
82:aa:75:0b:45:9d:ee:e7:2a:c8:5e:5d:9c:92:15:89:1c:02:
d7:e3:33:d9:19:e2:10:d3:46:48:b1:50:b5:b7:aa:41:6d:88:
aa:32:3c:af:e9:89:86:d3:a3:c9:14:a7:36:33:9f:64:93:c6:
72:51:69:17:10:8f:e6:71:8b:72:73:9a:96:7b:7c:80:f1:7c:
4a:62:12:54:25:74:75:a7:94:9d:f8:6f:3f:e8:af:20:db:05:
69:c9:97:43:a3:53:29:a2:4e:59:16:24:91:34:92:41:14:b9:
d1:16:27:ea:46:92:cf:5b:10:b5:0d:7b:ae:5f:8a:c3:0e:1d:
82:42:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:59:33 2025 by rpki-client