Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eGgS0uKgJO5BKJbcZ_EE4vc8nPE.roa
File: eGgS0uKgJO5BKJbcZ_EE4vc8nPE.roa (raw, json)
Hash identifier: +lGXIiwymzC9+mrzHRtBOoClvXHtl0jagayrGOhjLLg=
Subject key identifier: 78:68:12:D2:E2:A0:24:EE:41:28:96:DC:67:F1:04:E2:F7:3C:9C:F1
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01962C07EF8FF1DC6821A07F9CEF17B56C34
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eGgS0uKgJO5BKJbcZ_EE4vc8nPE.roa
Signing time: Sat 12 Apr 2025 22:03:59 +0000
ROA not before: Sat 12 Apr 2025 22:03:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:2c07:ea4f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:07:ef:8f:f1:dc:68:21:a0:7f:9c:ef:17:b5:6c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 12 22:03:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786812d2e2a024ee412896dc67f104e2f73c9cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:21:40:58:95:07:ea:ac:7f:f2:1d:25:f1:
0b:7b:ad:97:8d:a9:f8:fe:12:09:e9:3c:30:4d:be:
d7:a0:9d:18:91:42:2d:eb:15:0f:c3:42:e8:90:15:
89:51:61:b3:1b:f2:3d:13:bb:21:7f:8a:3a:ec:e4:
09:56:e9:4c:ba:60:69:c0:51:87:35:15:bf:05:e3:
27:31:a9:87:c9:a9:0a:67:14:ac:f4:f1:2d:44:70:
29:ca:43:45:85:6a:b3:6a:10:87:2d:40:1f:69:89:
3f:83:12:6e:67:52:8c:bb:75:cf:3a:57:59:9f:25:
ea:05:b3:24:20:78:ea:6a:13:99:dc:d3:f5:61:17:
8a:8c:07:46:e8:94:81:bf:d8:30:20:7e:63:03:96:
68:72:f1:a1:05:03:65:c5:47:2c:1f:d0:bd:09:56:
48:7f:65:2e:cd:d8:08:f0:20:be:f9:10:23:54:e6:
f4:a3:21:61:86:08:c2:df:38:82:92:26:e3:5c:6d:
cb:ec:8c:c2:21:31:19:3a:e5:7a:23:81:78:ee:5a:
de:f3:37:e7:9c:51:a0:c7:64:e4:2c:96:67:c6:3d:
ae:43:15:ac:87:f6:42:a8:52:20:fb:a3:3e:ba:ff:
dc:bf:d1:4d:b9:8e:ef:9d:cc:98:ac:03:27:c9:58:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:12:D2:E2:A0:24:EE:41:28:96:DC:67:F1:04:E2:F7:3C:9C:F1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eGgS0uKgJO5BKJbcZ_EE4vc8nPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:2c07:ea4f/128
Signature Algorithm: sha256WithRSAEncryption
a8:06:91:14:08:f3:3b:02:b3:25:55:e9:b2:a9:19:a2:43:72:
1d:b4:b9:85:43:f9:ec:20:a8:22:f2:35:21:1e:ec:82:dd:96:
a9:70:28:ec:6f:16:ee:23:c9:72:dc:9b:8b:de:7c:37:67:71:
33:03:75:e7:a1:7f:e8:61:91:15:ca:65:08:98:ff:96:c2:34:
58:18:e6:6f:8e:b1:cb:f2:37:e7:10:c4:8d:59:de:f3:fd:ab:
0d:af:b1:d2:0f:d3:8b:8d:e7:37:cb:49:07:16:b6:da:64:df:
3d:c8:b3:b5:ab:2c:25:9e:50:1b:49:4e:6d:e6:85:d8:cd:a0:
3f:65:d3:18:0f:bb:7c:30:07:4d:d7:98:2e:34:3b:60:35:fe:
1e:c0:27:1c:65:c2:5b:dd:c6:68:21:64:61:96:10:4a:1f:d1:
22:aa:16:aa:ae:e6:03:2c:f9:d6:0b:29:8f:e2:b8:8d:9b:4f:
26:26:8f:c3:a7:4e:25:df:9e:57:9a:53:8e:04:d9:88:db:76:
ed:90:e1:36:8a:54:c3:40:a4:17:cc:6d:38:46:24:82:86:7c:
2c:1f:57:a4:f7:4c:5c:12:7c:37:7d:69:11:7f:85:2d:4b:f7:
30:4a:5b:b4:6b:c6:68:7d:26:cb:db:29:fa:32:3a:fa:18:18:
07:c0:e3:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:58:42 2025 by rpki-client