Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/g-zse2FYGvDZ5DiTCZ6Md1QdQY8.roa
File: g-zse2FYGvDZ5DiTCZ6Md1QdQY8.roa (raw, json)
Hash identifier: GTy1geDiYTFX3JBAxS4OmMEqCCLw2lHvgxPAhOtfSxc=
Subject key identifier: 83:EC:EC:7B:61:58:1A:F0:D9:E4:38:93:09:9E:8C:77:54:1D:41:8F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196A6C5E9A4076B4F3DD8CF15BC8430521D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/g-zse2FYGvDZ5DiTCZ6Md1QdQY8.roa
Signing time: Tue 06 May 2025 18:05:10 +0000
ROA not before: Tue 06 May 2025 18:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:a6c5:23a6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c5:e9:a4:07:6b:4f:3d:d8:cf:15:bc:84:30:52:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 6 18:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83ecec7b61581af0d9e43893099e8c77541d418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:12:dc:2e:b0:35:a1:81:a2:08:07:17:1a:
f5:1a:11:ba:1b:86:8c:5a:45:6d:44:ea:21:c0:99:
f6:db:93:d7:15:91:11:44:f4:d4:c1:84:a1:3a:e8:
be:ee:25:35:1a:7a:e3:70:02:95:e3:6f:d5:d1:de:
74:28:28:58:fd:d9:ce:46:e7:c9:1f:f2:cd:aa:09:
e8:31:10:19:2b:f6:17:c8:5a:42:ba:a6:9e:56:b4:
63:e5:68:96:d5:97:88:93:f2:20:15:5a:7e:87:14:
e8:fe:3c:5f:db:15:2a:ec:b8:c7:fa:b8:61:7d:7f:
ed:83:16:7a:c1:10:7f:d7:51:bf:9c:84:8d:0d:08:
6e:f6:51:90:78:4e:b9:72:f0:2b:12:b0:b8:f6:37:
55:c9:85:49:a4:a3:69:d3:82:d7:f8:a7:0b:1f:c0:
2a:97:74:44:11:a9:87:08:f8:f5:3d:15:1d:a5:c2:
5d:2a:d5:21:14:a7:41:63:58:b0:5b:62:e8:70:b7:
3f:ea:70:e9:0a:53:73:4e:4b:96:5b:df:f6:44:64:
dc:9d:54:5d:20:4f:30:bc:85:2b:fc:f4:cf:0d:7e:
bd:b3:6e:a7:3d:4d:90:e3:69:c0:05:8e:c2:a1:ef:
93:94:53:6e:45:78:6f:cc:4c:39:c5:1d:2c:54:88:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EC:EC:7B:61:58:1A:F0:D9:E4:38:93:09:9E:8C:77:54:1D:41:8F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/g-zse2FYGvDZ5DiTCZ6Md1QdQY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:a6c5:23a6/128
Signature Algorithm: sha256WithRSAEncryption
65:5e:89:3b:2c:01:d2:86:12:a6:b8:ca:77:c6:bb:aa:30:1e:
27:9e:9e:21:79:32:97:40:d7:1f:92:ca:29:6f:0e:93:96:cb:
2d:32:15:cc:90:90:cb:74:2d:d4:ae:3a:7e:f9:3b:55:19:2e:
b5:01:d7:08:43:23:d4:9a:26:a3:e0:20:b3:49:23:6c:23:cb:
4d:32:c1:66:1e:c2:f4:20:2b:88:4d:a1:c5:57:d4:1a:b8:2c:
86:fc:0a:32:c2:a8:5a:5d:3f:b2:3d:e6:cc:8b:56:c8:37:06:
1b:a4:8d:94:4d:a4:a9:eb:1b:50:ef:90:29:3b:7e:e4:2b:fd:
84:05:97:a0:13:30:2b:ee:fc:07:f1:5e:43:7e:37:b0:ad:09:
11:13:9e:17:d8:37:b3:59:89:96:2c:3a:6c:5d:eb:58:36:14:
0c:b4:98:01:ff:3c:c0:b3:82:16:58:01:6c:37:49:d6:c2:02:
60:f1:d5:17:3d:5d:f7:bb:58:86:d6:80:69:68:df:44:fb:b6:
a3:33:a5:13:33:fa:78:e5:87:ef:f0:22:f8:7b:81:64:c3:7a:
d4:ae:60:7d:c5:58:2e:3d:bd:e5:58:c6:29:74:5d:fa:09:79:
53:8f:d2:fd:42:d9:38:18:60:14:5a:de:59:d6:e2:23:2f:f5:
43:2a:e5:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:04 2025 by rpki-client