Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/fVxCNqP7vYazK180TWcQa0C08qg.roa
File: fVxCNqP7vYazK180TWcQa0C08qg.roa (raw, json)
Hash identifier: VAHKVwmJdmtrby59YyaL+NfX1udxygzUelkJY4Urqe0=
Subject key identifier: 7D:5C:42:36:A3:FB:BD:86:B3:2B:5F:34:4D:67:10:6B:40:B4:F2:A8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01966C688177FCB87597DCE754A04822FCA6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/fVxCNqP7vYazK180TWcQa0C08qg.roa
Signing time: Fri 25 Apr 2025 10:05:10 +0000
ROA not before: Fri 25 Apr 2025 10:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:6c67:b23a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:68:81:77:fc:b8:75:97:dc:e7:54:a0:48:22:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 25 10:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5c4236a3fbbd86b32b5f344d67106b40b4f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:8d:20:09:c1:07:6a:a6:87:3b:81:2f:04:
55:66:48:0b:e1:be:f3:f9:fb:b3:18:0d:f2:eb:8c:
52:fc:41:ce:b2:a0:65:9d:44:63:dd:10:42:7a:4d:
a5:25:86:40:b5:89:c9:01:cb:08:f5:5d:55:7d:5f:
8c:b2:52:d4:f4:85:d3:04:32:9f:97:82:a3:ac:be:
af:1a:e9:40:29:86:72:5a:a3:6a:a7:f4:e5:67:48:
7e:61:c9:e5:c7:3d:db:39:cf:08:37:39:b3:9f:34:
bf:b0:d9:df:31:48:f8:86:fb:04:93:43:e1:0e:99:
8f:53:9c:ac:de:9f:f0:ef:0c:41:af:41:22:c4:31:
55:dc:cb:93:cc:67:67:04:a0:e2:b2:9a:23:67:bd:
7f:74:f8:0c:cb:09:41:d2:29:72:83:df:39:01:3e:
e6:62:6d:22:d9:9c:0d:e7:05:f7:7f:e0:db:76:2b:
95:92:c2:e0:d1:91:4b:b0:bd:f8:69:6e:76:cc:6b:
49:ec:30:9e:b7:51:d2:01:88:a3:87:75:ba:cb:f9:
a4:9d:91:e9:3c:df:f6:8e:a5:f5:aa:be:4f:c0:3e:
4e:20:a7:34:9a:1b:2f:fa:d8:20:71:65:35:94:ed:
65:9b:51:5d:7d:79:61:9d:d9:dd:ee:8e:83:76:0c:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:42:36:A3:FB:BD:86:B3:2B:5F:34:4D:67:10:6B:40:B4:F2:A8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/fVxCNqP7vYazK180TWcQa0C08qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:6c67:b23a/128
Signature Algorithm: sha256WithRSAEncryption
59:f8:d5:e6:15:76:34:85:e6:e0:53:aa:ae:6f:97:e7:42:79:
d4:75:e4:42:51:d7:1e:25:dd:a0:00:a7:56:af:29:f4:f8:ac:
b6:23:19:d7:21:84:52:86:74:5e:c4:ef:c9:c8:b9:40:16:90:
7f:ec:f8:20:42:c9:83:ef:78:ed:b3:80:7e:f4:bc:bf:73:d9:
1d:9c:a8:39:5a:d7:c4:ad:a8:eb:cf:9e:19:63:46:62:34:b9:
2d:5c:aa:39:08:69:59:3d:64:27:02:0c:b4:b0:b8:55:34:a3:
83:cb:96:3c:1e:0c:d4:99:1f:c2:37:23:d3:ad:46:4f:27:44:
05:56:f9:de:80:76:c8:e8:c6:45:a6:9e:7a:21:a0:15:10:7a:
5c:3d:70:ce:4f:88:5d:41:7d:e1:45:54:6a:a7:ee:98:d1:65:
52:96:03:95:4a:e1:f3:b5:cd:0a:1e:64:ed:73:3d:db:2a:cf:
e4:c4:5b:e8:e7:eb:9c:4c:c1:39:ae:0f:a7:a1:c0:85:35:fc:
9a:b8:76:69:d2:5f:ea:93:35:12:c0:f9:a0:59:37:10:85:3a:
bb:55:97:25:ca:b8:f2:9a:44:2d:5e:24:f8:2a:4a:5d:37:00:
c5:c9:0b:47:99:a3:0f:39:4f:8a:47:b8:74:88:a5:31:d6:34:
58:f0:b6:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:23:41 2025 by rpki-client