Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gUZOUI6yCLAZgT3QwoZPoc2tvC0.roa
File: gUZOUI6yCLAZgT3QwoZPoc2tvC0.roa (raw, json)
Hash identifier: g4BlE1i3uuIaaJ2KSRY2GO8PenZ/D7p3NCTbFQ3Ud4g=
Subject key identifier: 81:46:4E:50:8E:B2:08:B0:19:81:3D:D0:C2:86:4F:A1:CD:AD:BC:2D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197591D8BBE8E4F59A328A613BC1D785BA9
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gUZOUI6yCLAZgT3QwoZPoc2tvC0.roa
Signing time: Tue 10 Jun 2025 09:13:17 +0000
ROA not before: Tue 10 Jun 2025 09:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:1d:8b:be:8e:4f:59:a3:28:a6:13:bc:1d:78:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 09:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81464e508eb208b019813dd0c2864fa1cdadbc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:ef:e8:9c:c4:13:e8:e9:24:fc:08:5c:8f:
ac:73:fb:4e:b3:6e:a3:94:5a:a9:be:55:6c:3d:5d:
45:77:8d:28:9d:8c:bc:0c:29:c1:7a:d7:a3:ca:ee:
94:0d:9a:8a:f8:8b:ab:06:75:7f:89:d0:73:53:13:
75:d9:d5:25:87:dc:89:51:be:73:d0:41:16:6f:9d:
10:9f:35:7a:35:27:c8:c8:12:82:e0:24:68:88:c0:
75:3f:76:16:45:1c:93:d1:8f:68:b3:11:ab:b8:c0:
50:04:be:cf:27:4a:08:c6:d2:e3:09:c8:09:c6:f4:
ac:c6:1f:7b:01:81:ed:a4:6c:3f:60:0f:9b:40:08:
1a:e6:8a:21:15:51:32:8c:4d:8e:21:b0:69:fa:4d:
14:6f:b9:5e:d5:0d:a0:06:c3:a6:3c:6e:32:4d:84:
da:96:4c:b2:d7:1e:44:59:bb:27:1c:e4:40:ee:37:
60:be:05:64:57:b4:ca:5f:4e:f3:63:61:b4:9c:03:
96:85:7b:76:4b:0e:cf:46:37:e7:3d:2c:b0:fc:4e:
c7:a0:92:29:38:c6:64:67:0a:c6:f2:77:e0:ba:a7:
75:5f:7d:45:33:33:b8:82:44:a1:c3:d3:7e:e2:16:
0a:f2:66:02:35:12:02:42:6d:cf:70:97:3c:5f:02:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:4E:50:8E:B2:08:B0:19:81:3D:D0:C2:86:4F:A1:CD:AD:BC:2D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gUZOUI6yCLAZgT3QwoZPoc2tvC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
ad:72:7f:4b:6d:45:e8:ea:ec:d9:0e:49:e2:20:5b:fb:f6:01:
88:fb:66:52:80:47:ae:0e:52:a8:bc:b3:71:a5:34:c9:7f:1f:
21:17:0a:93:4b:48:ad:bb:c9:69:8c:07:cb:b4:c4:b5:b0:d2:
a8:35:2f:68:4b:4e:83:9d:de:a6:5f:ce:27:1a:6d:23:1b:0e:
5c:7a:8b:e0:a2:10:34:98:98:e5:80:a8:5c:c9:6d:4f:07:00:
f0:5a:f6:56:97:5b:07:c7:8f:9d:97:2f:bf:cc:09:90:df:4d:
72:6c:be:f1:ae:80:8e:b4:36:d2:69:3c:01:51:42:f1:02:18:
50:70:d2:db:1b:c7:9a:21:95:2e:38:a3:e5:98:6f:b8:ab:28:
34:14:f0:cf:50:77:0d:93:63:30:87:a7:be:f2:27:dd:75:e3:
b4:a2:87:1f:6f:15:cd:29:d7:76:32:1c:26:86:88:e5:39:fa:
96:c3:2a:85:84:88:fe:37:3d:0d:12:18:6e:c2:8e:fb:5a:de:
af:26:38:97:0f:58:13:31:3b:3f:11:69:53:7a:8f:2a:12:66:
2a:66:9b:c7:c5:27:ca:59:44:6b:7e:10:eb:be:f7:0e:31:e0:
ac:c8:9a:5a:66:20:8e:cd:30:bb:7b:ba:72:02:1c:49:22:c6:
c7:97:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:55 2025 by rpki-client