Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ehvM4N9Q8A33LWEWuayOjWdIZRw.roa
File: ehvM4N9Q8A33LWEWuayOjWdIZRw.roa (raw, json)
Hash identifier: ZUO6tzJ9eldMQTCNKuwd0tybIHGnjraOzjTh4FE+Afo=
Subject key identifier: 7A:1B:CC:E0:DF:50:F0:0D:F7:2D:61:16:B9:AC:8E:8D:67:48:65:1C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196B8953E4BA2AFB9E0E18BC57CA00FB598
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ehvM4N9Q8A33LWEWuayOjWdIZRw.roa
Signing time: Sat 10 May 2025 05:05:10 +0000
ROA not before: Sat 10 May 2025 05:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:b894:839c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:95:3e:4b:a2:af:b9:e0:e1:8b:c5:7c:a0:0f:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 10 05:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1bcce0df50f00df72d6116b9ac8e8d6748651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:db:60:78:0c:eb:50:3c:8d:05:88:3e:63:
50:42:7d:d9:01:f3:0a:8a:df:7f:cf:7c:ae:3f:bf:
22:34:be:d1:bf:5c:ec:87:49:9a:08:c6:17:44:89:
0d:35:fe:51:af:2b:11:cb:47:c9:0e:d4:fe:a1:1b:
e0:be:04:84:e8:32:70:6a:d5:96:71:ea:1e:4c:1c:
6d:43:6d:9e:8e:1b:9b:83:f7:86:b1:e9:97:88:e7:
33:ec:8b:14:30:f5:d4:ce:ef:06:eb:97:df:be:d6:
78:a6:05:25:23:e4:b1:df:7e:7a:94:ec:e3:a4:20:
ea:76:68:f4:9d:37:b1:f0:41:0c:65:09:4f:cd:b4:
79:6f:c0:34:22:14:be:22:f5:64:4a:26:83:cc:8d:
1b:03:d1:ae:08:b1:f1:9a:18:0a:20:05:a9:b3:97:
f7:39:25:67:1b:77:73:76:d9:db:af:ba:70:bf:6e:
40:9c:71:4f:98:25:0c:23:f7:b8:14:32:f5:93:56:
bd:c6:78:b9:be:4d:df:1e:80:7f:ae:69:67:99:0b:
68:cc:5e:7d:ef:67:a6:17:e7:06:91:fa:6b:85:d0:
41:65:9c:94:01:d7:4f:fe:b5:57:00:56:4c:d9:97:
98:03:73:ab:a9:2d:41:74:57:f6:4a:21:f8:c9:01:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1B:CC:E0:DF:50:F0:0D:F7:2D:61:16:B9:AC:8E:8D:67:48:65:1C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ehvM4N9Q8A33LWEWuayOjWdIZRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:b894:839c/128
Signature Algorithm: sha256WithRSAEncryption
a6:a7:96:c3:a8:be:b8:90:13:33:9b:e0:27:e7:c6:8f:79:0a:
c4:1c:0b:0b:89:b3:e6:c7:23:f3:7a:27:63:c9:53:da:68:50:
47:31:c1:b9:d5:b9:41:34:e3:b8:cd:20:8a:8e:95:a4:b3:22:
cb:5d:cd:57:82:11:cd:de:00:f1:60:72:43:70:d6:da:bb:35:
21:91:76:b4:bf:dd:49:26:63:8c:04:ce:56:7f:ce:32:bd:8c:
e8:cb:fd:e9:aa:04:68:01:be:da:ce:3e:fe:b1:e0:e4:64:a3:
37:3d:10:4d:57:74:d9:1b:99:6f:e0:24:06:b7:04:9b:8d:2b:
e4:f6:e6:b1:5a:1e:a6:2d:47:21:12:9e:46:18:45:02:88:a9:
76:31:ca:bc:33:66:6d:11:11:50:60:26:a6:01:b7:01:a2:bb:
70:b0:e2:fc:29:d7:39:43:1d:09:73:42:36:a3:14:55:6b:0d:
10:0f:8b:79:d8:87:fe:89:c0:aa:99:a0:47:30:0c:55:5d:fa:
62:f4:a7:15:3e:28:fa:f0:b5:83:22:d1:2a:00:32:cd:30:ce:
d1:4a:fc:90:da:12:dc:40:29:b9:69:50:2c:1d:eb:f6:19:e2:
e7:29:54:c1:18:37:28:aa:45:b7:d4:9b:68:41:cd:3c:8a:86:
dd:6e:28:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:11:57 2025 by rpki-client