Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eV3OMlh6ERQ8o6BEsScRevgnX6M.roa
File: eV3OMlh6ERQ8o6BEsScRevgnX6M.roa (raw, json)
Hash identifier: XFVSOMVALnQ30z3K9NqbRkxs7WNeADoGY7tLmrSu5bM=
Subject key identifier: 79:5D:CE:32:58:7A:11:14:3C:A3:A0:44:B1:27:11:7A:F8:27:5F:A3
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974E98FA468BD73A493F7D0F43BAD489A2
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eV3OMlh6ERQ8o6BEsScRevgnX6M.roa
Signing time: Sun 08 Jun 2025 08:12:17 +0000
ROA not before: Sun 08 Jun 2025 08:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:98:fa:46:8b:d7:3a:49:3f:7d:0f:43:ba:d4:89:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 8 08:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795dce32587a11143ca3a044b127117af8275fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:bd:b5:c3:27:23:f8:d8:89:f9:f8:be:1e:
80:ab:99:e2:3f:ae:af:1d:57:db:13:b3:61:bc:3f:
a8:46:e0:8f:d7:ae:54:bc:85:24:3c:95:0e:cb:47:
16:8f:28:b4:57:d1:80:41:27:94:09:2a:21:8c:2a:
c3:d5:f4:8c:1b:61:15:3e:1f:ef:29:63:38:87:b7:
29:fa:be:ac:a8:f6:47:40:38:94:79:17:32:88:de:
d0:31:1a:41:b9:a4:63:05:2f:31:c6:c5:b7:f1:ed:
67:0c:f5:6e:c7:8d:6a:2a:0b:05:c6:5c:99:1d:3b:
3c:a0:38:c4:5a:62:e0:59:fa:1a:64:3b:e1:07:05:
3c:67:22:50:25:16:32:f0:28:d7:73:49:f2:f7:30:
a6:41:4c:dc:40:6c:02:df:f1:db:ec:33:39:8b:59:
cf:7c:cc:58:c4:3b:92:a1:0e:f7:2a:54:7d:06:2c:
4e:97:e4:fd:c1:3d:1d:0f:e9:b2:9c:c5:4a:67:a3:
bd:fd:0e:5b:c0:4d:8e:17:4c:3b:1a:9d:95:3f:7b:
86:87:00:7d:86:76:c4:56:1a:01:6c:d8:4b:3d:b5:
a4:8c:f6:fb:6d:d0:22:c6:da:88:73:5a:d0:20:20:
2a:87:ee:a7:e4:14:7b:e3:8b:ae:b9:c1:72:67:58:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:CE:32:58:7A:11:14:3C:A3:A0:44:B1:27:11:7A:F8:27:5F:A3
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eV3OMlh6ERQ8o6BEsScRevgnX6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
3f:1b:0b:d6:f5:5e:4f:e6:ca:c5:f5:df:be:0d:70:1e:88:d4:
e6:4f:fc:52:f5:cd:78:0f:a2:a0:c8:b3:b3:33:21:d9:af:ba:
dd:b4:f9:75:e9:a8:dc:62:04:20:36:62:9e:7a:76:b9:41:a3:
35:58:02:f9:e7:34:38:46:dc:b1:8f:5c:d1:f8:cb:ae:d3:f6:
ae:eb:56:c6:10:12:c2:0a:b2:a0:50:c6:fb:92:9d:83:4a:af:
a1:6d:06:00:45:e0:68:36:14:33:14:61:96:a0:fa:06:34:09:
a1:4f:ab:b4:55:fb:66:d2:c2:c2:64:12:3f:0d:c3:38:a4:f2:
76:1a:d3:2d:75:01:07:94:bc:b9:16:5e:f8:69:1a:c7:95:77:
a2:1f:7f:2d:8a:73:45:5f:5b:45:59:cb:8f:3a:91:ac:62:c6:
68:cd:d0:c0:5c:f8:a0:7c:16:2c:83:05:b0:8b:0a:f4:c5:23:
bc:1f:af:91:e0:6c:71:a7:92:ca:d9:09:fe:2d:b1:bc:c1:62:
41:69:df:9a:ff:ec:f9:c0:e2:53:bf:0c:53:69:bb:91:d1:98:
7a:36:3a:aa:2b:ad:a8:a1:9c:c0:7a:6d:44:6d:cd:c3:44:dc:
05:e7:54:d5:dd:b5:4b:e7:f6:e4:9b:0c:41:62:17:65:29:1b:
22:c5:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:12:34 2025 by rpki-client