Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WRytfboHWTSJB4GLaswefzN02PY.roa
File: WRytfboHWTSJB4GLaswefzN02PY.roa (raw, json)
Hash identifier: vJL8oXeNGbd6dnFtJ0CMguC3cIVgqMYtuUci1GDn33Y=
Subject key identifier: 59:1C:AD:7D:BA:07:59:34:89:07:81:8B:6A:CC:1E:7F:33:74:D8:F6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975426CAF29F8529CAA1ACF1D82B51F8C0
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WRytfboHWTSJB4GLaswefzN02PY.roa
Signing time: Mon 09 Jun 2025 10:05:17 +0000
ROA not before: Mon 09 Jun 2025 10:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:5426:2e63/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:26:ca:f2:9f:85:29:ca:a1:ac:f1:d8:2b:51:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 9 10:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591cad7dba0759348907818b6acc1e7f3374d8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:c1:6f:e6:ce:ee:ce:25:c4:94:e8:30:f6:
c4:c0:19:84:8b:b9:67:df:94:b8:d0:e0:b0:de:2f:
86:70:f9:25:09:d9:cd:11:07:41:3d:f4:3d:e2:31:
48:84:d8:a2:38:3e:dc:94:c9:57:da:43:68:ff:7e:
b4:dd:4b:75:7f:f7:55:f1:cb:0f:e8:d7:5c:c2:04:
10:59:72:54:49:0c:0d:8b:4d:40:60:c8:06:e9:21:
be:17:fa:46:6f:31:9e:8b:e3:b4:8f:29:b7:61:b9:
9f:0c:53:ba:62:ee:53:bc:cf:41:b8:1d:2a:68:ec:
8f:5b:8c:10:4c:44:3a:3d:01:5b:9c:a1:a1:30:7a:
7a:fb:d7:c3:09:fb:bb:79:01:6b:72:e1:16:fd:ee:
83:65:d4:3a:81:6a:c2:fa:89:09:22:8d:50:23:46:
3d:ae:4c:9e:d5:c9:0d:a4:c0:cf:7c:f7:09:99:e2:
b6:62:b8:60:83:1a:a0:9f:1c:5d:d9:c9:ff:7c:dc:
8d:e9:84:7b:3e:6d:f2:50:f4:b3:2e:c2:56:a5:dc:
0f:28:bd:f9:2e:54:bc:8b:de:c9:65:f9:c2:f0:c0:
21:08:43:fd:6e:18:f8:3b:9b:18:89:84:c0:0d:63:
3f:3f:5f:9a:6d:c3:5a:e9:f7:7e:ff:98:a6:2f:e1:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:AD:7D:BA:07:59:34:89:07:81:8B:6A:CC:1E:7F:33:74:D8:F6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WRytfboHWTSJB4GLaswefzN02PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:5426:2e63/128
Signature Algorithm: sha256WithRSAEncryption
5e:a7:69:fb:5c:ee:fd:da:c2:10:4b:39:cb:4c:6d:6a:7d:74:
16:e3:88:1d:5b:af:e6:7d:9b:87:2d:c5:26:14:7b:9c:7f:fd:
a8:42:6b:6a:79:cd:1e:65:dc:73:17:d8:97:40:69:9e:76:85:
eb:43:6b:b6:22:50:19:79:c1:30:de:d9:ea:74:82:7d:23:b1:
a3:c8:a2:fd:b4:44:60:5c:0d:29:cf:6c:66:b1:45:c2:f8:6a:
3e:34:f6:26:1b:15:87:5a:cd:47:d4:08:da:bf:8d:8b:30:dd:
ae:80:16:fa:54:56:1a:7e:83:34:94:3b:5e:1e:a0:80:7b:60:
2e:38:32:f0:b4:f1:d5:ba:71:54:21:58:8a:40:de:c9:9b:38:
1a:91:7c:a9:cc:87:42:d6:f8:b7:f4:b8:46:4a:b7:03:7c:f4:
db:27:b5:96:5b:16:1f:92:02:e4:64:e1:23:83:80:25:84:6b:
15:76:04:79:a9:e4:6f:06:99:e4:d2:ba:2e:e3:f3:77:ab:21:
f3:9d:1b:8f:7d:03:da:02:4f:4e:37:56:f1:45:61:6b:db:61:
d6:df:e0:21:81:57:e9:35:96:bc:9f:58:5b:18:4f:ae:cb:1e:
3d:16:1c:f3:12:56:00:99:22:34:d6:71:26:fa:87:31:3c:6a:
fb:86:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:00:35 2025 by rpki-client