Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dj6P1XKEVNoLo2X8Ocb2SINvJb0.roa
File: dj6P1XKEVNoLo2X8Ocb2SINvJb0.roa (raw, json)
Hash identifier: JdHOew/FoDpws83zMMQCwhJgftyGvjChN0CZ9abtxtg=
Subject key identifier: 76:3E:8F:D5:72:84:54:DA:0B:A3:65:FC:39:C6:F6:48:83:6F:25:BD
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197598A7DABF140AFCE0F146CF9487F51EB
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dj6P1XKEVNoLo2X8Ocb2SINvJb0.roa
Signing time: Tue 10 Jun 2025 11:12:17 +0000
ROA not before: Tue 10 Jun 2025 11:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:8a:7d:ab:f1:40:af:ce:0f:14:6c:f9:48:7f:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 11:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=763e8fd5728454da0ba365fc39c6f648836f25bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:fa:cc:25:f6:d2:fd:2e:3f:b3:41:af:7f:
70:6b:e0:c9:f6:89:3b:0e:11:ab:f7:69:a3:e6:53:
54:01:88:83:8b:41:27:36:b3:a4:4a:32:94:39:42:
ad:07:87:3e:54:fe:01:1e:23:2c:d5:fc:0e:71:10:
cf:b4:11:58:50:e9:5b:ac:7b:39:91:c2:6a:02:a6:
ef:db:03:61:60:36:43:24:3e:e4:d6:db:04:80:1a:
6e:02:a3:4f:68:66:6e:c7:7c:99:f1:0c:e4:1e:49:
5d:68:bf:cf:31:fe:d8:80:c6:24:5d:ba:85:4c:0c:
72:3b:2b:f1:c5:a3:5b:f9:3b:dd:64:fe:37:b3:b4:
1e:cb:a8:9c:11:07:6b:a5:17:5c:a4:82:e1:cc:cd:
69:66:14:d5:a8:4d:6b:c1:35:7b:80:33:e6:07:06:
0c:61:9c:98:02:d7:bd:77:78:76:5d:86:22:c0:5e:
fb:ef:de:4a:44:60:6d:a4:4d:21:54:ba:b9:ca:0a:
28:94:37:70:21:65:a9:93:dc:ca:ef:5a:7e:a8:68:
1f:c7:4e:98:63:cf:85:22:a9:09:19:a6:b4:57:bd:
fa:08:6f:73:57:40:3d:ae:f0:1a:b0:b2:8d:44:2d:
fe:a9:82:a4:56:53:98:fc:2f:12:e5:5f:79:6e:31:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:8F:D5:72:84:54:DA:0B:A3:65:FC:39:C6:F6:48:83:6F:25:BD
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dj6P1XKEVNoLo2X8Ocb2SINvJb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
45:fc:3f:5e:7e:0e:53:be:2a:b4:df:0e:37:bf:8a:24:2e:fe:
9d:40:31:aa:40:fc:93:ff:b4:c9:46:8b:b3:00:b9:1d:36:6e:
13:54:fb:f2:27:2b:98:26:f0:f8:35:9a:11:79:cc:82:f3:a1:
a3:30:d3:d2:cf:4f:f7:fd:32:52:5a:55:b6:9a:15:d2:75:2f:
12:48:f2:6a:56:3d:59:f2:4c:da:cb:b2:3a:52:3d:09:40:e2:
b2:68:07:34:a8:8c:be:3e:c8:e8:8a:cf:73:03:d6:ea:66:de:
c2:7b:a9:6c:4a:f2:74:c8:4e:30:6e:84:63:23:f2:13:f5:b4:
61:fe:a8:1f:a2:df:28:ef:d3:91:6c:ab:63:71:ef:5d:a6:35:
8b:42:a5:a9:f1:22:08:fd:86:e5:1e:69:d1:48:33:56:60:fb:
02:f0:b8:b3:67:de:86:ba:8e:0a:1d:83:e7:c8:16:4b:07:f0:
5f:cd:e0:1c:a5:6f:81:cd:25:de:ad:14:e2:4a:61:7e:79:8d:
b4:ee:91:ca:b4:30:b5:99:49:fa:a0:47:d4:85:46:b8:2c:6a:
77:b7:79:df:76:c4:46:ff:ed:09:2d:f9:fc:de:85:3d:9c:a1:
a8:ef:09:59:b3:5f:08:c2:7b:cd:08:77:17:1c:50:b0:6a:b5:
ab:44:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:17:40 2025 by rpki-client