Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zl8FMijcKt7jBKiDqQ9gHeMNZx0.roa
File: Zl8FMijcKt7jBKiDqQ9gHeMNZx0.roa (raw, json)
Hash identifier: OiI47GZamsKnYMamEwVmXCOBUCKvJ7VDxoG1qoY+9XU=
Subject key identifier: 66:5F:05:32:28:DC:2A:DE:E3:04:A8:83:A9:0F:60:1D:E3:0D:67:1D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197026CCF4C0A56312A692594C3B93FF121
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zl8FMijcKt7jBKiDqQ9gHeMNZx0.roa
Signing time: Sat 24 May 2025 13:12:54 +0000
ROA not before: Sat 24 May 2025 13:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:02:6c:cf:4c:0a:56:31:2a:69:25:94:c3:b9:3f:f1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 13:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665f053228dc2adee304a883a90f601de30d671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:92:7e:7c:a9:f1:9a:ee:ac:c4:51:11:63:
5b:92:fa:3f:93:81:a3:68:64:86:3f:24:e1:24:25:
c7:eb:84:e8:05:94:44:9f:a1:d2:28:9c:f1:ed:c0:
82:04:c8:cb:68:1d:de:6c:2a:bc:c3:e9:d5:fd:02:
b6:82:69:33:e5:90:7c:6e:e7:eb:60:35:6c:84:ee:
79:ed:d3:8c:7f:52:f8:39:d2:73:33:0b:35:5c:39:
4c:54:f4:25:2f:73:6e:6b:49:49:e9:dd:5d:d8:9f:
28:0a:93:ca:61:aa:25:2f:49:44:75:bf:8c:b1:f2:
41:bb:db:c9:65:ca:e4:3e:c1:25:0d:4d:c8:a1:0f:
66:8f:a6:fd:9d:59:f4:c1:0e:37:72:73:4b:d0:82:
24:ae:9b:f6:34:a1:20:13:04:16:2d:e7:da:f5:33:
9c:f1:d6:82:29:6e:58:ab:76:27:d5:88:5d:90:02:
9d:0a:e6:c0:bd:9c:63:61:d5:c9:91:9f:c5:e4:cb:
e2:b5:85:d8:8f:48:02:45:13:ad:56:61:fe:64:d9:
4c:66:a9:cd:d9:05:d1:62:cf:f5:50:4c:f5:ad:ca:
38:3a:ac:41:94:0d:c2:e6:49:49:92:1b:f7:7a:af:
68:56:c1:6c:ae:61:a9:b2:3a:7c:ed:f7:f7:9e:aa:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5F:05:32:28:DC:2A:DE:E3:04:A8:83:A9:0F:60:1D:E3:0D:67:1D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zl8FMijcKt7jBKiDqQ9gHeMNZx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
96:69:e0:96:ed:61:fd:f2:5a:5c:c4:f0:fb:44:58:c4:87:38:
9e:29:ac:62:73:8a:af:3e:0f:68:70:58:75:3f:38:81:e8:46:
ee:6d:26:77:57:73:89:6f:37:38:d7:10:ee:54:b8:81:16:ea:
80:f1:df:7d:b4:94:7a:59:11:48:76:5c:52:fd:c8:3c:35:5a:
bb:16:60:27:b6:ec:e9:cb:02:d8:90:c4:94:1e:a8:6f:46:24:
67:c2:68:0a:e2:17:5b:15:e4:d8:00:5a:c2:c5:36:e2:b5:df:
69:2f:2e:c8:36:b4:65:4f:91:8d:da:b3:08:c0:77:92:39:82:
4c:32:50:ec:c4:46:19:1e:58:ec:db:68:ab:e4:29:b1:c2:18:
df:fa:71:67:5e:c1:67:e7:64:31:58:85:1f:44:ae:1f:db:a7:
d7:76:61:74:99:81:d1:ea:cf:af:15:da:0e:12:1f:2a:f8:34:
d5:7b:34:cb:7b:be:d5:f1:b9:7e:76:86:15:64:fe:bb:a8:44:
db:6c:06:fe:fa:9f:63:79:2d:06:cd:0c:0a:54:bd:98:80:a7:
ee:2f:a0:0f:9d:7b:90:7f:e7:c9:7d:89:f1:2d:ce:45:ec:63:
ce:03:36:a5:a4:42:b4:00:b0:4b:33:7a:26:f5:80:a6:eb:c2:
d7:ea:5c:ff
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZcCbM9MClYxKmkllMO5P/EhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTI0MTMxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVmMDUzMjI4ZGMyYWRlZTMwNGE4ODNhOTBmNjAxZGUzMGQ2NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMuSfnyp8ZrurMRREWNbkvo/k4Gj
aGSGPyThJCXH64ToBZREn6HSKJzx7cCCBMjLaB3ebCq8w+nV/QK2gmkz5ZB8bufr
YDVshO557dOMf1L4OdJzMws1XDlMVPQlL3Nua0lJ6d1d2J8oCpPKYaolL0lEdb+M
sfJBu9vJZcrkPsElDU3IoQ9mj6b9nVn0wQ43cnNL0IIkrpv2NKEgEwQWLefa9TOc
8daCKW5Yq3Yn1YhdkAKdCubAvZxjYdXJkZ/F5MvitYXYj0gCRROtVmH+ZNlMZqnN
2QXRYs/1UEz1rco4OqxBlA3C5klJkhv3eq9oVsFsrmGpsjp87ff3nqqAnwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGZfBTIo3Cre4wSog6kPYB3jDWcdMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvWmw4Rk1pamNLdDdqQktpRHFROWdIZU1OWngwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAlmnglu1h/fJaXMTw+0RYxIc4
nimsYnOKrz4PaHBYdT84gehG7m0md1dziW83ONcQ7lS4gRbqgPHffbSUelkRSHZc
Uv3IPDVauxZgJ7bs6csC2JDElB6ob0YkZ8JoCuIXWxXk2ABawsU24rXfaS8uyDa0
ZU+RjdqzCMB3kjmCTDJQ7MRGGR5Y7Ntoq+QpscIY3/pxZ17BZ+dkMViFH0SuH9un
13ZhdJmB0erPrxXaDhIfKvg01Xs0y3u+1fG5fnaGFWT+u6hE22wG/vqfY3ktBs0M
ClS9mICn7i+gD517kH/nyX2J8S3ORexjzgM2paRCtACwSzN6JvWApuvC1+pc/w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:02:58 2025 by rpki-client