Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WJ669KchDwwJE67uOU3c-Hkz_Q4.roa
File: WJ669KchDwwJE67uOU3c-Hkz_Q4.roa (raw, json)
Hash identifier: ZODF2dvSSWaS3QqhP5noJvlLpHCAgQ7b5mnPxTNQck0=
Subject key identifier: 58:9E:BA:F4:A7:21:0F:0C:09:13:AE:EE:39:4D:DC:F8:79:33:FD:0E
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970453DF2D166DE9D691169BE80C68EC4B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WJ669KchDwwJE67uOU3c-Hkz_Q4.roa
Signing time: Sat 24 May 2025 22:04:54 +0000
ROA not before: Sat 24 May 2025 22:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:453:42dc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:53:df:2d:16:6d:e9:d6:91:16:9b:e8:0c:68:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 22:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=589ebaf4a7210f0c0913aeee394ddcf87933fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:cf:f7:85:20:cf:48:04:d7:89:bb:c8:5b:
7c:58:10:ae:21:dc:1e:d7:fa:21:96:b8:fe:c2:88:
e8:45:3f:b1:09:87:0a:70:a4:68:bd:07:c9:9e:35:
9c:42:5c:f5:33:1a:6d:26:83:bb:cc:ce:7c:71:ad:
2c:8f:46:ef:03:b0:d1:cb:1e:31:9b:ef:dd:0b:80:
8f:b3:26:74:ad:cd:72:6f:ee:b6:f5:29:c8:2a:54:
cf:a9:3e:e7:c9:e9:1d:58:14:5b:be:38:32:20:2a:
7a:df:d8:f2:44:9b:75:11:e1:65:9a:4d:7b:fb:f9:
c0:c5:c4:d6:79:66:7f:d3:21:01:f0:9f:6f:9d:a0:
98:1f:6b:82:17:7e:47:51:0c:e5:b1:7d:95:37:c9:
0c:f9:2a:43:ef:c4:a9:6f:28:fe:6c:9d:90:da:97:
c7:c3:27:00:03:aa:22:ae:a0:7f:a1:99:30:33:79:
98:b9:2c:ab:6a:f8:79:4e:d8:72:be:df:11:7e:ec:
3f:08:ba:86:a6:38:9b:19:fe:9f:3e:f6:21:ef:24:
0b:c9:59:3d:16:0b:ca:d6:3c:c1:ee:9e:55:96:20:
9a:97:ae:d9:20:3c:43:0d:31:17:0b:da:75:ed:90:
6c:80:f9:cd:4c:95:8d:17:bc:36:a4:2b:8f:91:01:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:BA:F4:A7:21:0F:0C:09:13:AE:EE:39:4D:DC:F8:79:33:FD:0E
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WJ669KchDwwJE67uOU3c-Hkz_Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:453:42dc/128
Signature Algorithm: sha256WithRSAEncryption
02:f5:c0:0f:aa:9a:a5:b8:c8:24:2c:79:3b:3d:8d:83:8a:f8:
25:24:76:11:f5:3d:74:c2:55:c0:73:74:51:b1:92:b7:69:db:
61:b7:23:71:99:a5:5e:dd:7e:67:4a:2b:f3:2d:a8:a8:cf:e7:
d5:b2:8a:9f:c0:f1:8a:39:32:93:60:f2:24:d0:2c:68:76:d4:
9a:06:63:3a:fc:fb:42:45:31:80:9e:83:1d:21:c9:f6:e5:db:
d0:be:6e:50:4f:ce:1b:e1:59:d3:b0:bb:51:c1:b2:22:5e:5e:
7c:76:14:00:f4:05:26:b4:99:a7:62:ac:37:4e:dd:84:0d:1f:
e5:6e:51:a7:32:fc:26:e4:fd:f0:70:63:13:75:2a:57:c3:9e:
9e:c4:b6:53:00:84:0b:18:b4:0d:f0:f9:57:2a:a5:89:e4:2a:
03:42:1c:ea:cc:2a:c1:f9:1d:f8:0e:77:fb:25:67:ad:a3:f7:
7d:5f:22:c3:d0:b8:0a:88:65:8d:43:42:52:df:d3:ff:c4:ae:
29:c8:c9:cd:c1:78:e7:a2:91:3a:48:e3:59:20:66:41:77:cb:
82:73:93:16:f2:8e:3b:7b:12:83:b4:2f:04:55:fa:01:a0:ea:
b9:b9:21:97:f1:5d:c3:b4:1f:84:e9:c4:a7:47:98:67:4a:72:
0b:e6:04:02
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZcEU98tFm3p1pEWm+gMaOxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI0MjIwNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODllYmFmNGE3MjEwZjBjMDkxM2FlZWUzOTRkZGNmODc5MzNmZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqjP94Ugz0gE14m7yFt8WBCuIdwe
1/ohlrj+wojoRT+xCYcKcKRovQfJnjWcQlz1MxptJoO7zM58ca0sj0bvA7DRyx4x
m+/dC4CPsyZ0rc1yb+629SnIKlTPqT7nyekdWBRbvjgyICp639jyRJt1EeFlmk17
+/nAxcTWeWZ/0yEB8J9vnaCYH2uCF35HUQzlsX2VN8kM+SpD78Spbyj+bJ2Q2pfH
wycAA6oirqB/oZkwM3mYuSyravh5Tthyvt8Rfuw/CLqGpjibGf6fPvYh7yQLyVk9
FgvK1jzB7p5VliCal67ZIDxDDTEXC9p17ZBsgPnNTJWNF7w2pCuPkQGbaQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFieuvSnIQ8MCROu7jlN3Ph5M/0OMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvV0o2NjlLY2hEd3dKRTY3dU9VM2MtSGt6X1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlwRTQtwwDQYJKoZIhvcNAQELBQADggEB
AAL1wA+qmqW4yCQseTs9jYOK+CUkdhH1PXTCVcBzdFGxkrdp22G3I3GZpV7dfmdK
K/MtqKjP59Wyip/A8Yo5MpNg8iTQLGh21JoGYzr8+0JFMYCegx0hyfbl29C+blBP
zhvhWdOwu1HBsiJeXnx2FAD0BSa0madirDdO3YQNH+VuUacy/Cbk/fBwYxN1KlfD
np7EtlMAhAsYtA3w+VcqpYnkKgNCHOrMKsH5HfgOd/slZ62j931fIsPQuAqIZY1D
QlLf0//ErinIyc3BeOeikTpI41kgZkF3y4Jzkxbyjjt7EoO0LwRV+gGg6rm5IZfx
XcO0H4TpxKdHmGdKcgvmBAI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:09 2025 by rpki-client