Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/c_w-zkvQa3wS9Ql021Ke_BBcHJQ.roa
File: c_w-zkvQa3wS9Ql021Ke_BBcHJQ.roa (raw, json)
Hash identifier: u8eGV3Odo5cPyARuXSBGXsgPJGDV1PnKCcEoG9sU074=
Subject key identifier: 73:FC:3E:CE:4B:D0:6B:7C:12:F5:09:74:DB:52:9E:FC:10:5C:1C:94
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01962FE59F3A633A784C970BA0257CF2FD4A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/c_w-zkvQa3wS9Ql021Ke_BBcHJQ.roa
Signing time: Sun 13 Apr 2025 16:04:59 +0000
ROA not before: Sun 13 Apr 2025 16:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:2fe4:cffc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:e5:9f:3a:63:3a:78:4c:97:0b:a0:25:7c:f2:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 13 16:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fc3ece4bd06b7c12f50974db529efc105c1c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:32:96:ec:ee:b2:d5:2a:80:ff:49:ff:fd:
45:c0:db:4e:07:dd:fc:2b:c0:88:28:a6:9c:99:d0:
53:da:20:4e:70:84:a7:46:dc:6d:d4:3b:30:94:b1:
0e:ae:c1:1d:00:e9:ad:e1:af:7d:bc:5f:e6:75:d0:
ca:46:2c:77:c7:7f:a8:26:7d:ce:a2:4e:c2:f6:dc:
0f:4a:42:b7:75:c3:06:d2:35:81:26:5f:96:16:9c:
40:70:33:29:16:f2:6d:aa:6e:0e:13:bc:44:c5:f4:
fd:4a:0f:46:ed:73:e1:5f:37:af:f4:cb:c8:9f:34:
cb:15:ad:ef:cb:30:d6:a3:43:c1:78:6f:d9:88:da:
63:aa:e5:d5:71:ec:22:1e:a6:ca:9a:ca:a6:0f:3c:
c1:a6:4d:2a:20:b6:51:23:b2:09:67:4e:9d:1e:5d:
ce:7b:82:97:52:e7:06:70:b5:b3:b2:f2:7a:ee:ff:
f7:ef:47:32:c9:e0:15:2a:bc:17:95:6c:53:dd:3f:
3f:ba:06:da:57:65:e4:e3:56:d3:b9:38:67:3d:15:
6f:2d:32:2a:e8:a0:c8:eb:45:93:ce:37:b1:da:a7:
73:33:de:83:ce:f9:6a:f5:3e:a9:a0:ff:48:c4:ec:
3f:12:9c:24:22:44:b5:bc:a7:c4:bf:f1:8b:3b:35:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:3E:CE:4B:D0:6B:7C:12:F5:09:74:DB:52:9E:FC:10:5C:1C:94
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/c_w-zkvQa3wS9Ql021Ke_BBcHJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:2fe4:cffc/128
Signature Algorithm: sha256WithRSAEncryption
90:ac:c3:b8:17:c7:0d:ce:9f:95:01:92:e8:1d:d0:ab:cf:c1:
9f:8c:d8:cc:b6:2c:16:c0:fc:d2:63:64:89:2e:94:2e:35:8a:
da:d6:8f:e9:60:ad:7f:77:1e:db:16:27:b7:c4:78:54:14:02:
c3:1d:b7:ad:a8:f4:dd:81:ee:15:eb:87:68:0d:77:42:b2:ad:
05:c0:e2:c7:0b:8c:0f:9b:6d:5e:ad:bb:ec:80:ad:90:43:1e:
86:75:e6:1e:84:b2:07:00:b1:da:06:aa:90:22:0a:08:f8:c9:
38:fa:09:50:10:01:3b:b1:65:8c:51:34:aa:67:f9:66:af:6c:
f0:03:8f:1f:8f:b7:82:5b:83:2b:5c:34:56:6d:98:34:92:10:
e7:d8:dd:28:54:40:65:a8:b4:f8:d7:65:cb:6e:a7:ea:3c:58:
55:2b:40:fa:88:12:5f:cd:97:cf:81:44:9f:b0:5d:0b:e4:31:
91:35:7b:3d:39:3d:dc:e9:ba:2f:dd:8c:e5:a1:df:fc:cf:b4:
b5:e3:00:f4:c6:1a:43:53:8c:4b:d6:05:53:4e:6f:99:03:15:
6c:5c:6d:1a:56:8c:32:80:8c:ba:1a:6a:1c:78:89:38:f1:8f:
1b:c4:ee:71:fc:ec:fd:af:fa:5e:b8:de:c0:bf:76:67:23:70:
43:d8:e6:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:15 2025 by rpki-client