Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Yjns87KUVKhR_z_-L9tPiNWBLPg.roa
File: Yjns87KUVKhR_z_-L9tPiNWBLPg.roa (raw, json)
Hash identifier: z/ZwaGIrfRm9CxmyZb0Y5oCeBaORij4BqH1z7i1OcT8=
Subject key identifier: 62:39:EC:F3:B2:94:54:A8:51:FF:3F:FE:2F:DB:4F:88:D5:81:2C:F8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FDE3EC75208DED162A3EB137B6599850
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Yjns87KUVKhR_z_-L9tPiNWBLPg.roa
Signing time: Fri 23 May 2025 16:04:54 +0000
ROA not before: Fri 23 May 2025 16:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:196:fde3:3054/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:e3:ec:75:20:8d:ed:16:2a:3e:b1:37:b6:59:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 16:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6239ecf3b29454a851ff3ffe2fdb4f88d5812cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:34:6a:6f:45:a0:07:42:a2:c7:66:29:37:
93:7a:c8:dd:f1:71:50:fe:fb:ed:7c:27:dc:98:fb:
1d:16:74:a6:9f:60:ed:e1:2b:55:b6:ce:8a:5f:cf:
98:66:06:e8:fb:52:63:8c:58:24:91:32:15:1c:f0:
f6:7d:19:8d:f8:8e:57:51:ef:d0:cc:6a:c4:58:24:
a0:35:25:59:6d:42:ba:c9:97:37:80:f8:c5:19:b5:
fa:50:d4:86:38:2b:95:e6:db:ad:78:cc:6e:ff:d6:
e9:8e:1f:71:e6:6e:ea:50:64:4f:c9:5b:9e:b5:09:
b5:ba:83:e7:13:01:ea:8b:c7:52:70:94:dc:20:42:
ea:1d:77:56:f5:6e:16:9d:53:3c:8f:17:98:9e:0a:
87:e0:e6:b8:5f:64:0f:43:f7:9d:ad:b9:16:12:31:
64:97:b6:62:14:1f:9c:8b:dc:bd:4e:96:fc:41:b0:
44:d4:b7:37:8d:67:0e:ef:b1:dc:aa:f2:59:3f:96:
0c:24:51:f2:58:a4:d9:e7:91:61:25:09:dc:b7:2a:
79:3e:a8:cc:6f:70:c5:bc:62:9d:1d:10:85:11:2e:
5e:ed:bd:34:f4:08:2c:02:0f:c7:84:6b:af:bc:2f:
10:a4:38:2d:1d:80:92:0c:6f:82:2b:b0:40:3a:1e:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:EC:F3:B2:94:54:A8:51:FF:3F:FE:2F:DB:4F:88:D5:81:2C:F8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Yjns87KUVKhR_z_-L9tPiNWBLPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:196:fde3:3054/128
Signature Algorithm: sha256WithRSAEncryption
95:18:7e:76:61:25:c6:0e:0a:aa:85:19:37:fc:53:10:5d:7a:
33:08:a4:5c:ab:87:f5:1b:05:96:29:0d:5d:30:66:67:aa:35:
33:90:fa:88:ed:55:3d:17:72:ff:78:67:1f:18:c8:e8:c0:8c:
1b:3a:28:02:56:4f:ba:17:0b:45:84:31:02:33:7b:9e:5b:04:
ec:51:24:b4:2b:b9:0f:b6:05:7c:af:92:ae:a0:7e:e3:e4:28:
1e:d8:5a:cc:35:7a:72:58:13:99:c2:b1:e7:b7:da:6f:9f:08:
01:45:00:75:3f:da:ac:fb:00:b2:7f:50:aa:16:fd:80:cf:ed:
3e:71:0d:44:51:07:8c:f2:d4:ab:e6:26:7d:2b:50:fa:44:0c:
0a:99:b4:10:68:24:88:63:b6:bd:e5:f5:5c:60:3d:e9:7c:b3:
cb:7c:0c:34:c9:fa:d4:2f:13:54:8e:5f:c2:79:53:cb:f0:94:
e9:03:1b:e8:e2:af:29:5a:e7:4d:82:81:d2:33:2b:14:f8:ac:
09:df:36:09:ea:82:d0:28:58:14:89:d4:1e:e8:46:47:02:9a:
5e:c5:7d:15:72:a7:4e:43:9c:cd:b9:97:91:ae:da:5e:77:66:
5d:06:64:7a:cd:9f:52:9e:32:ac:1d:22:00:7e:86:cb:2f:e2:
b3:45:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:21 2025 by rpki-client