Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZcjZqsVHmZo1H3a_fpcjzClKNVQ.roa
File: ZcjZqsVHmZo1H3a_fpcjzClKNVQ.roa (raw, json)
Hash identifier: iEXMeAgpCJxWveqHPsQfif86NzWt1OkQQguPq6WHyGc=
Subject key identifier: 65:C8:D9:AA:C5:47:99:9A:35:1F:76:BF:7E:97:23:CC:29:4A:35:54
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019759C515778594910CBBA63327FCC4D397
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZcjZqsVHmZo1H3a_fpcjzClKNVQ.roa
Signing time: Tue 10 Jun 2025 12:16:17 +0000
ROA not before: Tue 10 Jun 2025 12:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:c5:15:77:85:94:91:0c:bb:a6:33:27:fc:c4:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 12:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65c8d9aac547999a351f76bf7e9723cc294a3554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:fe:b0:19:b2:d8:95:34:d5:39:12:e6:14:
c4:75:47:06:46:48:56:fd:f9:95:64:62:7b:be:fa:
25:67:c5:58:df:c5:60:f9:ae:fe:1a:6b:9f:ff:eb:
2e:ac:da:98:e4:55:a3:86:01:32:5b:40:0e:40:e2:
42:d6:51:d0:36:63:e9:fd:ff:89:19:b7:cd:b6:13:
22:e9:3a:10:fb:63:ea:25:f8:a7:41:21:2c:49:8c:
72:9d:99:ce:95:96:96:e2:43:0e:88:46:a1:3d:2a:
cc:f3:65:a6:03:5d:d1:db:e6:56:ee:b3:4c:18:af:
84:d6:15:7f:71:90:01:1e:e3:46:e3:8c:48:17:6a:
68:1b:9b:e9:16:72:0a:29:f7:88:55:0d:12:fb:d5:
2e:fc:4e:df:b6:8d:ad:b3:10:79:3d:26:ed:52:fd:
48:4f:c8:5b:c7:b6:67:d4:e3:46:01:d6:8f:43:f7:
62:f7:c2:91:14:f5:1a:18:4d:bf:1c:ad:fc:ab:59:
77:ce:96:b4:07:80:ae:00:df:a3:c9:88:28:ee:e3:
43:71:01:08:17:4f:40:ef:8c:c8:51:eb:c6:e2:bb:
e2:33:bc:9a:67:0a:cb:cd:5e:5c:86:9a:6e:44:d1:
95:8d:4a:ea:5d:91:12:00:61:2e:20:b8:0a:f3:58:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:D9:AA:C5:47:99:9A:35:1F:76:BF:7E:97:23:CC:29:4A:35:54
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZcjZqsVHmZo1H3a_fpcjzClKNVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
a4:de:ed:50:ff:cf:f7:8b:e4:ee:84:29:bd:d0:2e:50:54:53:
74:82:80:23:03:cb:02:1f:b0:17:5d:5c:17:fb:21:5b:d7:55:
49:4c:31:1c:79:7c:44:40:de:ea:d6:24:b4:2e:e4:f7:85:ba:
82:91:ae:8a:39:50:99:91:54:8e:85:9d:0d:fc:36:d8:0e:b5:
7d:05:79:2f:5e:93:59:6f:30:2d:56:9a:b2:fb:d1:e7:f5:38:
36:3e:15:6a:12:07:a7:73:43:79:68:50:d0:63:7e:ac:93:9d:
58:6d:62:df:b1:c5:55:de:77:68:6f:4c:0f:bd:0a:c7:14:15:
43:3e:ff:ae:aa:5e:2e:32:25:c9:dd:02:43:52:3a:54:da:0a:
8f:87:1b:1b:e3:2f:4b:d2:4c:6f:79:d8:ea:eb:97:98:b4:86:
bd:2b:cb:9c:28:a6:2e:84:6f:63:2e:0f:49:ba:2e:36:2e:11:
e4:3d:38:9c:18:0b:76:39:41:7e:99:64:95:ac:08:a1:cd:38:
5a:bc:a8:4e:9d:68:05:f6:09:f5:6e:c3:c0:3c:6f:b4:80:93:
4b:54:b6:56:3a:25:0e:61:79:57:cb:5a:d5:bc:88:da:f6:60:
ab:87:a8:0b:2e:5b:ba:96:44:bc:99:36:01:bd:02:ce:33:60:
b7:d6:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:56 2025 by rpki-client