Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Q46f5tCjGO-GjD1wnXqnDn3yxZQ.roa
File: Q46f5tCjGO-GjD1wnXqnDn3yxZQ.roa (raw, json)
Hash identifier: dgGGhMjU0sMf3BhmrrESvaxCKcsFnXOxuOFXTiZhYMU=
Subject key identifier: 43:8E:9F:E6:D0:A3:18:EF:86:8C:3D:70:9D:7A:A7:0E:7D:F2:C5:94
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196B3DBD48C54CCA2776286019F3249E179
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Q46f5tCjGO-GjD1wnXqnDn3yxZQ.roa
Signing time: Fri 09 May 2025 07:04:10 +0000
ROA not before: Fri 09 May 2025 07:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:b3db:d0a1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:db:d4:8c:54:cc:a2:77:62:86:01:9f:32:49:e1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 9 07:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=438e9fe6d0a318ef868c3d709d7aa70e7df2c594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:b9:87:83:90:ad:d5:b4:9e:06:41:69:51:
04:29:7c:d7:8b:6a:df:71:d5:e9:fd:86:a0:c7:18:
bb:06:af:80:f0:fd:ac:75:04:be:e9:a5:9e:3a:23:
4f:4b:d0:ea:98:9a:69:a3:d1:93:bf:5c:ab:92:63:
71:85:24:48:1a:8d:79:31:50:43:66:db:1c:40:c1:
15:23:df:47:57:ea:8e:23:ff:95:d9:d8:23:a5:96:
80:55:47:fd:67:1b:46:63:0e:34:d8:e5:0e:44:af:
43:5b:9d:2b:f9:da:b3:f9:1b:da:b5:2d:4c:f2:b1:
64:37:7f:1b:60:b4:3d:84:22:b7:8e:ca:7c:8d:90:
64:7f:64:d4:cd:06:f4:ff:3f:c4:ac:2c:65:84:f5:
43:a2:23:27:bc:b6:bb:c3:33:fe:e6:81:c5:1d:12:
48:23:f6:26:7b:50:bb:38:7c:a8:02:01:66:61:44:
78:60:3a:63:98:83:d4:d2:16:bc:08:dd:37:a7:cb:
2a:e3:61:a3:81:70:70:17:f7:62:ee:76:a2:b3:43:
a8:8a:d1:a8:db:ad:ac:ba:90:57:c3:20:16:df:5f:
3b:60:26:2b:4f:ee:07:c9:c7:0a:77:07:bb:b7:51:
36:c6:fa:8a:1e:0f:3a:21:d3:5d:d9:0e:0f:fe:bf:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:9F:E6:D0:A3:18:EF:86:8C:3D:70:9D:7A:A7:0E:7D:F2:C5:94
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Q46f5tCjGO-GjD1wnXqnDn3yxZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:b3db:d0a1/128
Signature Algorithm: sha256WithRSAEncryption
ac:46:af:82:bf:2a:b6:54:69:71:01:a2:59:f6:42:fd:1e:15:
9d:fe:ec:16:43:05:59:f2:8c:1d:f2:37:de:bf:ed:9b:b3:85:
bc:bc:9d:2c:5b:52:53:3b:3c:a2:79:bd:3e:04:66:54:92:e6:
c7:cd:72:21:d6:82:60:23:73:a2:97:1c:e3:f0:08:8a:4e:02:
b8:d3:7f:2e:04:e5:4d:4e:5b:d1:c9:3e:5b:15:7b:9f:c8:3c:
8d:83:80:3c:b9:fd:bf:e7:f6:fa:f7:9d:05:ae:ab:d6:bb:c4:
46:93:57:ef:41:56:4e:84:2d:94:17:8b:75:8b:b3:a4:09:cd:
2f:2b:a7:50:34:e7:9e:a8:0b:fe:2d:90:63:f5:21:01:01:d6:
ab:fa:64:d2:82:59:0c:37:d9:3c:b4:62:5c:ee:aa:51:37:30:
3f:e1:33:1f:3f:eb:05:fb:9b:99:de:78:69:2f:1f:9b:7a:69:
47:e6:12:7d:c0:7c:82:8c:e7:a8:6b:ed:30:3c:3d:f9:74:f7:
4a:65:5e:db:b2:80:9b:bc:67:86:31:65:8f:68:82:32:b0:c4:
e5:13:7f:58:dc:8a:c7:ad:29:bf:b9:c7:19:49:6e:f0:a0:39:
b1:01:51:1d:18:8e:9d:73:d8:d4:c8:a4:a8:5d:1d:3c:dd:32:
94:46:a4:1e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZaz29SMVMyid2KGAZ8ySeF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTA5MDcwNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzhlOWZlNmQwYTMxOGVmODY4YzNkNzA5ZDdhYTcwZTdkZjJjNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+W5h4OQrdW0ngZBaVEEKXzXi2rf
cdXp/Yagxxi7Bq+A8P2sdQS+6aWeOiNPS9DqmJppo9GTv1yrkmNxhSRIGo15MVBD
ZtscQMEVI99HV+qOI/+V2dgjpZaAVUf9ZxtGYw402OUORK9DW50r+dqz+RvatS1M
8rFkN38bYLQ9hCK3jsp8jZBkf2TUzQb0/z/ErCxlhPVDoiMnvLa7wzP+5oHFHRJI
I/Yme1C7OHyoAgFmYUR4YDpjmIPU0ha8CN03p8sq42GjgXBwF/di7nais0OoitGo
262supBXwyAW3187YCYrT+4HyccKdwe7t1E2xvqKHg86IdNd2Q4P/r+RowIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEOOn+bQoxjvhow9cJ16pw598sWUMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvUTQ2ZjV0Q2pHTy1HakQxd25YcW5EbjN5eFpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGWs9vQoTANBgkqhkiG9w0BAQsFAAOCAQEArEavgr8qtlRpcQGiWfZC/R4V
nf7sFkMFWfKMHfI33r/tm7OFvLydLFtSUzs8onm9PgRmVJLmx81yIdaCYCNzopcc
4/AIik4CuNN/LgTlTU5b0ck+WxV7n8g8jYOAPLn9v+f2+vedBa6r1rvERpNX70FW
ToQtlBeLdYuzpAnNLyunUDTnnqgL/i2QY/UhAQHWq/pk0oJZDDfZPLRiXO6qUTcw
P+EzHz/rBfubmd54aS8fm3ppR+YSfcB8goznqGvtMDw9+XT3SmVe27KAm7xnhjFl
j2iCMrDE5RN/WNyKx60pv7nHGUlu8KA5sQFRHRiOnXPY1MikqF0dPN0ylEakHg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:59:56 2025 by rpki-client