Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhtEiP3XCcXRacw5iQ-NcBW7DcI.roa
File: ZhtEiP3XCcXRacw5iQ-NcBW7DcI.roa (raw, json)
Hash identifier: zvw2rladJmDUsnaM8G/OH5yjMq1kdisCXxsLmC0j1ck=
Subject key identifier: 66:1B:44:88:FD:D7:09:C5:D1:69:CC:39:89:0F:8D:70:15:BB:0D:C2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196937611CD4DF37AC2DEDB248B98CC27D3
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhtEiP3XCcXRacw5iQ-NcBW7DcI.roa
Signing time: Sat 03 May 2025 00:05:10 +0000
ROA not before: Sat 03 May 2025 00:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:9375:44dc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:76:11:cd:4d:f3:7a:c2:de:db:24:8b:98:cc:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 3 00:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=661b4488fdd709c5d169cc39890f8d7015bb0dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:bc:ff:56:30:f1:d5:c7:fb:ff:66:61:48:
c3:7c:b7:09:70:c5:30:f5:b0:2b:f7:92:98:db:72:
9d:56:81:c7:b6:b7:6a:38:d7:6a:08:99:d0:0e:f2:
05:29:5e:c9:4a:ac:6e:36:c6:78:b4:41:06:3b:28:
dd:e0:eb:8e:4a:4e:bd:ee:74:5f:ec:4a:96:c5:42:
0f:36:ca:01:c5:78:61:db:7e:0e:f3:59:44:87:df:
10:fa:88:d2:12:74:bf:68:83:e6:f2:1e:8b:88:4a:
1d:ab:96:14:7b:77:6a:64:70:cd:15:da:65:05:a4:
c0:ff:c0:9d:4d:81:12:aa:45:58:d5:5b:3e:ab:e2:
db:99:db:b4:d6:e4:e6:a9:54:da:aa:72:c2:a7:65:
38:1a:0d:f8:9a:77:b7:1c:b0:58:23:af:1c:a3:6f:
99:3d:d8:46:91:6a:42:bb:53:05:ca:94:f2:07:2f:
15:87:e4:84:55:25:60:28:c3:e2:24:cb:bf:ee:84:
eb:04:60:48:7e:8e:26:dd:74:bf:33:58:4b:a5:dc:
ce:cd:fa:ba:09:cf:99:40:04:bc:3c:80:e7:01:c6:
60:56:0e:46:0d:3c:35:c6:da:56:bb:88:f0:d2:be:
7c:bc:42:87:d3:6d:d2:92:b9:a7:48:12:86:aa:2b:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:44:88:FD:D7:09:C5:D1:69:CC:39:89:0F:8D:70:15:BB:0D:C2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZhtEiP3XCcXRacw5iQ-NcBW7DcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:9375:44dc/128
Signature Algorithm: sha256WithRSAEncryption
32:35:f8:2b:fc:0a:09:9e:d8:e3:81:6a:f1:2d:ca:d0:86:d3:
d3:af:8a:b9:74:d4:d1:17:55:4f:71:62:be:23:75:4b:dd:7f:
c5:dd:55:a8:ed:4f:1f:1e:44:e0:5a:9b:b5:4c:00:f0:5b:87:
51:ee:35:6b:93:e9:e5:ba:36:de:fb:f5:01:be:40:de:9c:85:
c0:bc:ff:1a:1f:f6:3b:17:28:46:d4:cf:db:0d:b9:7a:a0:d1:
7b:38:22:e1:a5:5b:62:75:84:b8:42:ef:11:b2:28:42:df:24:
ef:7c:01:b9:45:d9:54:cc:ce:bc:9a:27:94:23:ce:8c:16:ab:
b9:1c:ac:c9:29:c1:08:f3:b6:55:15:c1:4e:36:5c:7a:ae:5d:
51:91:b6:d6:9b:16:19:7f:53:1c:27:4b:75:fc:a1:fb:de:7a:
dc:a2:92:eb:cb:30:71:b8:4c:77:ea:8b:f8:f9:dc:45:1d:34:
a2:70:cc:5a:c1:68:93:f4:88:86:6f:94:e6:41:96:bf:96:6f:
0f:fc:08:a8:4f:2d:e2:f1:a4:a5:89:0b:df:ee:c1:f7:b8:51:
fe:38:9a:cc:91:b6:1c:84:01:5b:64:04:61:d6:d6:82:83:b8:
02:af:be:db:3d:ec:be:96:5a:a5:fa:b8:5f:d9:a9:00:5d:e5:
d5:5b:42:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:22:19 2025 by rpki-client