Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iDZDb0gP92831MVpLILa_PW7ru8.roa
File: iDZDb0gP92831MVpLILa_PW7ru8.roa (raw, json)
Hash identifier: byE+zyAWGHAncqxdoALJ82LtM3Hq/GIBJf+VCQcuvUU=
Subject key identifier: 88:36:43:6F:48:0F:F7:6F:37:D4:C5:69:2C:82:DA:FC:F5:BB:AE:EF
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970D9541BD09345347342729CD4812B6B1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iDZDb0gP92831MVpLILa_PW7ru8.roa
Signing time: Mon 26 May 2025 17:12:54 +0000
ROA not before: Mon 26 May 2025 17:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:95:41:bd:09:34:53:47:34:27:29:cd:48:12:b6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 17:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8836436f480ff76f37d4c5692c82dafcf5bbaeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:49:d3:9d:2b:98:0d:3d:2f:54:2f:ed:61:
44:71:d2:6c:e3:60:b2:b0:21:4f:23:9a:00:8c:89:
97:f6:d6:6f:19:19:31:01:ae:cd:83:ad:2a:b0:7e:
ca:f2:01:90:7f:b1:a3:3e:06:1b:bc:c4:b8:09:36:
e4:41:9c:8b:3d:ec:7a:8f:cb:6b:93:c6:09:6d:57:
92:fa:97:0e:e1:77:6e:9e:b4:f6:e3:eb:c8:6e:42:
b1:e5:1a:28:aa:8f:be:dc:6d:17:eb:c0:df:66:d8:
79:43:6c:98:7e:91:f1:1f:e5:81:f7:c3:49:2d:65:
b0:68:1c:50:20:ce:6e:49:9c:02:d9:3b:0f:eb:89:
41:e8:dc:a4:73:9a:52:21:06:d3:74:f9:9b:98:60:
35:1a:a5:46:4f:45:1a:ea:89:39:a5:ef:8c:ab:a3:
d3:b3:b8:32:24:47:52:f9:cd:7c:69:3d:01:69:d6:
5b:23:af:b1:8e:d4:06:ca:7f:53:cf:f2:09:7d:aa:
ca:e5:35:c6:fa:8f:67:7c:a6:e5:e9:b5:00:f5:ad:
6e:28:5b:d1:13:97:68:5d:37:e4:24:9e:81:80:d7:
e8:bb:5a:e0:5b:ed:28:47:73:17:19:5e:21:62:c0:
af:a1:d5:da:30:f4:4f:1f:f0:1c:ce:78:ed:a7:18:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:43:6F:48:0F:F7:6F:37:D4:C5:69:2C:82:DA:FC:F5:BB:AE:EF
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iDZDb0gP92831MVpLILa_PW7ru8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
ac:c9:ee:b9:25:6d:87:2b:ee:c2:71:b8:88:23:97:5c:54:de:
27:4b:2c:2d:85:79:d6:36:f6:c5:fb:dd:07:9c:af:5b:2d:50:
da:bf:1e:fc:5f:53:e5:fd:a5:35:2e:6f:e6:eb:cc:05:62:3e:
20:2d:05:6e:a1:4d:91:89:bf:69:48:1a:48:0c:24:33:91:da:
ef:64:e1:94:ae:ea:6b:48:44:b0:7e:61:b5:c3:d0:35:0d:86:
6a:cb:ca:44:f0:35:b1:e4:c8:86:79:d0:92:6b:e3:60:43:4e:
d0:1b:fe:63:c6:df:39:7d:53:da:a1:09:ae:86:0a:d9:6f:dd:
15:77:96:1a:60:27:68:59:25:32:cb:e4:33:f0:11:f6:09:98:
e0:86:76:74:da:b9:36:67:84:5b:ee:06:6b:cb:af:2e:a2:13:
22:a2:46:57:18:cd:5e:9f:e3:f0:cc:1b:a0:58:bf:19:96:ac:
c4:92:a2:1b:13:75:37:87:29:5a:cf:9d:89:b0:71:5b:b0:87:
9e:c8:5d:86:85:0e:de:af:22:6c:6f:71:9d:09:f4:cc:13:90:
23:69:db:0d:5b:d7:9c:fc:4b:8b:d8:32:e3:4d:b6:52:af:0c:
78:b4:fc:1a:57:ac:58:95:54:19:5e:39:3e:d7:81:71:9d:ef:
04:47:de:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:05:36 2025 by rpki-client