Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhasOqmHyWOKPzy1_rPKoukpcJI.roa
File: ZhasOqmHyWOKPzy1_rPKoukpcJI.roa (raw, json)
Hash identifier: l79ki3He+Qhg3DcNMn615kdUvxr5+3nMchPqH8GgfgU=
Subject key identifier: 66:16:AC:3A:A9:87:C9:63:8A:3F:3C:B5:FE:B3:CA:A2:E9:29:70:92
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975B476F9C60F37A3D2D83DC22567DA33C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhasOqmHyWOKPzy1_rPKoukpcJI.roa
Signing time: Tue 10 Jun 2025 19:18:17 +0000
ROA not before: Tue 10 Jun 2025 19:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:47:6f:9c:60:f3:7a:3d:2d:83:dc:22:56:7d:a3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 19:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6616ac3aa987c9638a3f3cb5feb3caa2e9297092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:0a:9a:b4:90:84:44:94:47:52:ce:83:11:
7a:c8:a6:fe:06:f2:7c:1c:bb:32:2a:4d:e2:ea:d0:
05:22:91:db:e0:32:28:80:38:90:c4:e8:73:cc:74:
b8:84:ce:28:08:f8:b1:5b:3e:37:ef:e6:91:42:2f:
43:44:83:f6:30:19:48:0b:0b:67:d8:c5:47:38:74:
df:99:54:52:5d:08:6c:f4:66:45:84:b9:b8:42:24:
4c:06:11:71:42:60:e7:a0:00:e6:35:f5:7f:72:78:
92:bd:7c:b8:52:09:f0:e0:49:9d:f1:e5:54:2b:79:
fe:5a:71:db:09:41:ad:56:52:da:b4:ee:36:3e:c1:
7a:21:fb:91:f6:3b:39:1f:25:a2:e7:e9:17:56:c5:
e5:c9:6f:7d:2c:9b:d6:15:e8:67:4b:67:10:90:18:
8c:2d:d1:ca:ba:32:67:0b:82:d7:4e:de:e8:c1:8b:
7f:2e:87:5c:4c:8a:aa:a1:23:ea:a3:13:46:b0:e0:
a2:3b:be:e0:3e:20:65:e4:0f:31:8d:26:6c:55:ab:
f4:1c:af:a1:88:ed:38:29:1d:a6:1b:02:9c:6b:25:
36:25:96:98:5f:07:78:7e:5f:0c:1f:80:b4:28:47:
b3:c0:24:7d:12:93:ac:d2:22:5d:35:4e:24:3b:96:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:AC:3A:A9:87:C9:63:8A:3F:3C:B5:FE:B3:CA:A2:E9:29:70:92
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhasOqmHyWOKPzy1_rPKoukpcJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
75:ad:0f:21:ec:5f:18:db:ad:b7:53:2e:92:13:b4:73:9b:f4:
8b:85:8f:56:43:e7:a6:d6:cf:5d:67:4f:ad:25:f5:3c:d1:fa:
8d:d9:93:f7:bc:25:d9:bb:c4:cf:98:81:2c:9d:a6:9c:a2:75:
d4:c9:cb:71:05:71:a3:d1:f4:aa:62:00:c5:05:3d:96:27:43:
6d:fd:2c:16:e9:ba:48:76:31:af:13:6c:aa:5b:7b:1a:1f:b6:
22:e0:89:28:ec:0b:5f:10:86:6f:04:10:a3:48:99:b0:64:42:
7d:af:e2:1d:e9:ad:f5:d7:d0:ce:9d:e4:85:34:96:48:7b:de:
e9:23:cc:e2:4d:39:d9:93:fc:b1:86:84:fe:f7:76:4e:48:86:
74:32:65:53:a9:7e:f5:10:41:27:63:85:5e:e4:be:0d:a8:35:
67:bf:15:cd:78:9e:da:62:0e:a4:3a:d5:2d:7e:76:a9:62:42:
75:be:a4:19:5a:71:42:52:4a:db:d8:e3:63:55:a3:01:cd:6d:
ff:8a:ee:bd:3f:33:06:ed:b3:c9:43:68:87:76:e3:f1:92:d0:
41:d1:7b:39:5d:8c:c2:c0:77:c3:af:1b:0d:de:38:b9:7b:e3:
22:e4:2b:17:ed:da:e4:cb:20:dc:9f:60:a4:1b:eb:d2:32:a3:
5e:16:2d:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZdbR2+cYPN6PS2D3CJWfaM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjEwMTkxODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjE2YWMzYWE5ODdjOTYzOGEzZjNjYjVmZWIzY2FhMmU5Mjk3MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOkKmrSQhESUR1LOgxF6yKb+BvJ8
HLsyKk3i6tAFIpHb4DIogDiQxOhzzHS4hM4oCPixWz437+aRQi9DRIP2MBlICwtn
2MVHOHTfmVRSXQhs9GZFhLm4QiRMBhFxQmDnoADmNfV/cniSvXy4Ugnw4Emd8eVU
K3n+WnHbCUGtVlLatO42PsF6IfuR9js5HyWi5+kXVsXlyW99LJvWFehnS2cQkBiM
LdHKujJnC4LXTt7owYt/LodcTIqqoSPqoxNGsOCiO77gPiBl5A8xjSZsVav0HK+h
iO04KR2mGwKcayU2JZaYXwd4fl8MH4C0KEezwCR9EpOs0iJdNU4kO5YNIQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFGYWrDqph8ljij88tf6zyqLpKXCSMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvWmhhc09xbUh5V09LUHp5MV9yUEtvdWtwY0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAda0PIexfGNut
t1MukhO0c5v0i4WPVkPnptbPXWdPrSX1PNH6jdmT97wl2bvEz5iBLJ2mnKJ11MnL
cQVxo9H0qmIAxQU9lidDbf0sFum6SHYxrxNsqlt7Gh+2IuCJKOwLXxCGbwQQo0iZ
sGRCfa/iHemt9dfQzp3khTSWSHve6SPM4k052ZP8sYaE/vd2TkiGdDJlU6l+9RBB
J2OFXuS+Dag1Z78VzXie2mIOpDrVLX52qWJCdb6kGVpxQlJK29jjY1WjAc1t/4ru
vT8zBu2zyUNoh3bj8ZLQQdF7OV2MwsB3w68bDd44uXvjIuQrF+3a5Msg3J9gpBvr
0jKjXhYt4w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:56:47 2025 by rpki-client