Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/UFfw6490bYyU0sgL3oUwWEtOwtA.roa
File: UFfw6490bYyU0sgL3oUwWEtOwtA.roa (raw, json)
Hash identifier: D6WECCSJ1SbqqaC/nf24kYd9CoAX3oMSx7YU9wtP0Jk=
Subject key identifier: 50:57:F0:EB:8F:74:6D:8C:94:D2:C8:0B:DE:85:30:58:4B:4E:C2:D0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019730FE3E4CDF5339EDE1181D6F38357651
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/UFfw6490bYyU0sgL3oUwWEtOwtA.roa
Signing time: Mon 02 Jun 2025 14:14:17 +0000
ROA not before: Mon 02 Jun 2025 14:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:fe:3e:4c:df:53:39:ed:e1:18:1d:6f:38:35:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 14:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5057f0eb8f746d8c94d2c80bde8530584b4ec2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:45:8b:da:f2:bb:a8:1c:e8:51:22:51:71:
b4:1c:a4:81:16:52:13:29:21:ec:c7:2f:9c:fd:57:
45:88:f8:7b:86:7e:93:ba:82:a7:3c:ea:00:46:fc:
83:31:88:08:7c:28:7d:7e:76:2f:bd:9c:c8:47:86:
e1:7c:c6:48:28:49:2a:1a:4e:1f:00:36:84:68:10:
6e:c2:88:7e:9e:a4:2e:54:7d:52:4f:01:24:4d:29:
60:17:a4:69:13:5d:81:05:c1:e7:d2:c6:06:a8:a8:
1a:0b:04:d2:6d:dd:7b:f6:0a:cc:10:61:dd:1e:02:
1c:83:23:50:41:60:e6:18:0e:e7:02:f3:1c:34:ae:
b4:7b:b2:6a:bb:59:40:40:2f:e1:8e:1e:07:ae:52:
7b:79:07:02:0d:18:d1:b4:50:2f:9d:a4:41:2b:b6:
4c:4c:4d:b2:ee:aa:29:15:b9:5e:3f:5f:da:6c:f6:
d6:01:e7:35:c7:7a:72:d5:15:7e:58:eb:c5:67:1d:
1d:1b:f5:7f:d2:7d:5c:16:4e:50:6e:dc:7b:4c:04:
7c:6b:bd:62:aa:d3:4a:2c:d5:81:d7:ac:ee:91:c6:
2c:00:6c:e0:04:21:5b:e9:39:70:f8:9d:1b:b6:41:
4a:b5:80:56:49:6e:06:82:e8:5f:03:e1:c1:cb:82:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:F0:EB:8F:74:6D:8C:94:D2:C8:0B:DE:85:30:58:4B:4E:C2:D0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/UFfw6490bYyU0sgL3oUwWEtOwtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
8c:f0:98:b9:5a:34:39:69:ec:45:5c:6b:f3:0e:81:7c:b7:23:
11:65:d2:cf:8a:b0:90:0d:8a:a3:11:1d:9d:60:23:2e:6c:02:
85:74:e1:cf:0e:fb:a2:ea:6c:be:85:14:bf:85:ac:02:52:03:
87:39:91:43:82:d1:8c:34:d2:2a:14:c6:97:01:45:43:94:71:
69:ec:cb:8f:cb:a9:37:d8:d6:28:8d:d9:a7:f5:a4:0c:e9:9d:
48:1e:77:2b:90:2a:86:23:41:74:bf:3f:d3:d0:18:8d:b9:81:
05:1b:be:ec:c2:85:8b:c4:42:47:35:a7:e9:47:78:58:db:7f:
fa:db:ae:4c:e1:14:99:6f:fa:59:71:82:40:eb:e5:06:69:41:
2c:07:62:b7:70:6e:bb:58:19:cd:f9:3d:58:81:89:2c:0a:06:
6d:3f:20:a5:ca:8b:b3:16:f9:ce:11:44:dc:2d:0b:26:e3:60:
1f:26:2d:09:90:c9:32:4b:bf:8f:6d:58:57:6c:a9:c5:7b:08:
c7:c3:24:81:66:cf:5a:2e:5b:01:99:dd:1b:78:b7:1f:ad:62:
4b:08:c1:b6:f5:54:18:2d:15:8b:d4:b6:17:dd:83:8e:b7:e1:
a2:ea:f6:3d:34:ef:e5:35:eb:07:28:9d:3e:e5:5b:66:2a:63:
2c:cf:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:03 2025 by rpki-client