Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/bzE1WOvB0sZZnXPqM7A3HxcZW9A.roa
File: bzE1WOvB0sZZnXPqM7A3HxcZW9A.roa (raw, json)
Hash identifier: Nv0FkWgzoTZ9H297gyiqeq0n+NlR3xouMTJLpb1pqj4=
Subject key identifier: 6F:31:35:58:EB:C1:D2:C6:59:9D:73:EA:33:B0:37:1F:17:19:5B:D0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019734DB0308762D367F77D283862B897591
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/bzE1WOvB0sZZnXPqM7A3HxcZW9A.roa
Signing time: Tue 03 Jun 2025 08:14:17 +0000
ROA not before: Tue 03 Jun 2025 08:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:db:03:08:76:2d:36:7f:77:d2:83:86:2b:89:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 3 08:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f313558ebc1d2c6599d73ea33b0371f17195bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:34:4e:18:62:f8:f6:41:5c:08:80:a1:05:
02:c8:bc:03:58:55:b7:13:79:4d:62:a2:42:30:c1:
99:c2:2d:e3:61:97:42:8f:84:f7:c0:c9:10:ff:11:
48:fc:29:4d:ab:ca:b1:e2:a2:66:17:66:d5:da:b1:
71:41:a7:8b:e3:64:d7:aa:31:06:aa:71:3c:29:9f:
0a:22:43:3e:7c:1b:91:7b:16:83:ec:a4:04:7f:b5:
93:8b:2b:56:58:2c:8a:41:e6:08:fc:61:7f:3a:d6:
5b:29:10:93:73:67:d2:7f:3a:51:4b:c9:22:20:18:
86:7e:92:1e:1a:7a:51:ec:03:49:2d:f2:f7:5b:e7:
35:38:89:6e:f8:04:35:22:23:74:c1:1a:55:ef:0f:
34:5a:9c:82:7a:2a:74:80:8d:86:86:fc:aa:73:43:
10:20:9c:3a:13:29:6b:84:a7:b7:24:a5:81:2f:74:
ab:73:41:1b:c8:59:4c:c7:4d:cc:b6:c5:e5:31:05:
01:50:f6:6f:ed:fe:1c:2b:e4:06:93:6a:34:a7:ef:
05:0e:46:74:96:3d:6e:6a:eb:ee:c8:39:74:4d:c1:
fc:ea:d7:da:29:5b:fd:78:95:19:c5:59:08:6f:3a:
bd:12:e8:2e:d8:6c:a8:ef:f8:7a:ec:f8:ff:38:49:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:35:58:EB:C1:D2:C6:59:9D:73:EA:33:B0:37:1F:17:19:5B:D0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/bzE1WOvB0sZZnXPqM7A3HxcZW9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
c2:a0:13:fd:a0:38:d7:be:8e:45:48:59:98:ed:87:6f:6b:d5:
38:b6:01:65:c6:db:e1:7f:b4:f6:29:57:2b:bb:b1:fe:92:a8:
d4:e1:5d:fb:45:aa:3d:83:c3:14:8f:fd:2b:ca:a6:a0:47:a8:
6a:cf:fd:f8:33:96:ce:6b:bf:ce:6a:48:23:ce:d8:31:1f:66:
3a:0f:47:62:a5:3d:76:39:7c:1a:a8:4a:b5:ca:4b:67:60:45:
52:59:14:13:ae:96:b3:67:94:ac:9e:5b:67:de:b7:a5:ac:48:
8b:79:a4:d2:9e:cb:5f:f1:06:8c:06:9c:24:8f:ea:01:fa:d3:
09:7e:a1:49:5f:9d:d1:6e:07:54:43:b0:6c:29:cf:bf:cc:4b:
81:66:d8:8b:07:d4:af:e9:3c:e2:eb:6c:fc:09:34:35:25:ea:
0b:e8:6c:5f:d2:ef:24:e5:93:95:0b:ac:57:5b:24:b1:78:eb:
7b:d8:3f:4b:b8:bf:4a:92:1f:5b:4b:20:ac:13:9f:0b:36:dc:
91:8f:15:49:39:34:20:67:af:58:df:6e:6e:55:74:a2:26:b4:
c3:7b:60:3e:b3:c8:ab:a7:59:a8:bf:88:c4:ac:98:62:57:3a:
82:91:a6:f2:1e:32:0b:38:15:81:a4:cc:8a:05:e4:65:23:33:
b5:30:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:16 2025 by rpki-client