Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SKqWizjam5Xzuzh5eW0ZoSNtZsY.roa
File: SKqWizjam5Xzuzh5eW0ZoSNtZsY.roa (raw, json)
Hash identifier: 9T22b1w5AZrMFj+0Ud6jEIzSy2TliI7BMnVHokthOnY=
Subject key identifier: 48:AA:96:8B:38:DA:9B:95:F3:BB:38:79:79:6D:19:A1:23:6D:66:C6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975B7B9F9DE3F934241E18A3EE099A488B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SKqWizjam5Xzuzh5eW0ZoSNtZsY.roa
Signing time: Tue 10 Jun 2025 20:15:17 +0000
ROA not before: Tue 10 Jun 2025 20:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:7b:9f:9d:e3:f9:34:24:1e:18:a3:ee:09:9a:48:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 20:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48aa968b38da9b95f3bb3879796d19a1236d66c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:ad:a8:2e:5a:e6:e6:cb:0e:86:e8:a6:2e:
15:f5:32:1d:cf:77:54:9e:12:65:77:b2:08:a0:91:
06:c4:41:85:7f:79:fd:9c:63:ca:dd:9d:98:89:99:
af:aa:12:58:df:dd:ee:bd:8a:ff:ce:7b:89:5b:5c:
2c:0f:ee:28:83:54:e1:1b:68:38:59:bb:ba:17:c0:
e0:5b:f4:c7:06:75:04:67:a1:bc:8d:93:7c:57:60:
b9:ed:3b:3b:26:d6:da:17:23:f3:a6:05:9e:9a:aa:
6a:af:80:ce:3f:c4:ca:09:21:b3:b4:62:dd:de:08:
d8:33:11:19:f9:b9:fe:32:49:d3:05:29:63:5e:b6:
57:a2:05:5a:68:f3:e2:bb:28:72:4a:05:3a:90:3c:
ae:1f:f3:b4:57:3a:e7:e1:91:a1:54:bd:c0:cb:3b:
e7:10:c4:59:35:11:d6:c7:7c:a0:fd:07:fd:a4:c8:
48:cd:6e:ad:41:5a:f4:93:b2:09:9a:bc:fd:b6:b1:
96:26:10:44:9b:b3:68:72:b7:50:58:a4:e2:c5:81:
4d:5c:4b:fa:72:ba:21:ae:f8:b0:4e:aa:ae:9c:96:
fb:8f:86:0d:24:8e:10:06:5d:05:b7:d4:62:bd:a8:
1b:15:f0:76:61:94:9d:ba:f0:17:48:3b:0b:e1:08:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:96:8B:38:DA:9B:95:F3:BB:38:79:79:6D:19:A1:23:6D:66:C6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SKqWizjam5Xzuzh5eW0ZoSNtZsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
50:56:52:4b:83:3c:1b:1f:ec:e4:e0:fc:f0:a5:94:e2:c1:98:
fc:98:e9:b4:0a:7c:ae:1a:3c:a4:cb:85:25:03:d2:eb:4f:aa:
64:ee:a9:c3:aa:42:e2:89:c8:dc:67:7d:6e:01:28:b7:60:a3:
8e:86:8e:e8:e3:62:22:f6:2b:3a:6d:04:80:32:cc:48:e9:57:
36:a5:ec:02:c7:db:7e:a0:f8:23:d8:80:ec:40:99:5c:0f:47:
bc:14:66:48:8e:a1:6a:e0:75:9e:d6:cd:f4:8d:a0:7b:e5:61:
4f:0a:2e:3a:20:4e:37:3c:59:de:35:ae:43:c9:08:fb:9d:87:
17:e1:b4:a5:5c:3c:33:43:51:c7:2b:68:ab:e9:2e:7c:3e:01:
3f:e9:a6:bf:6d:7b:5d:de:bf:eb:c2:38:b7:37:0a:6d:8c:c8:
09:6d:16:04:3a:fb:3b:2b:c6:5b:32:03:d3:da:ef:c1:3f:6a:
76:c9:e5:4c:2b:99:89:3c:12:25:23:fd:f4:b4:6d:72:74:45:
5c:28:1a:e4:9d:c6:c4:26:3e:74:e5:88:b0:ad:bb:87:ab:aa:
f0:5c:8e:97:b1:28:6c:9a:21:ff:ee:6e:39:b5:af:88:22:0a:
70:10:ac:9e:cb:82:cb:62:91:8f:75:6d:57:cd:87:fb:f8:12:
33:51:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:49:51 2025 by rpki-client