Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/k7Cb3givdEFFEJLjE6VJoS74r_A.roa
File: k7Cb3givdEFFEJLjE6VJoS74r_A.roa (raw, json)
Hash identifier: 1uCTZsgLM0pCvVN8G17ouC12/g3gOLgOhpegzSEkWcQ=
Subject key identifier: 93:B0:9B:DE:08:AF:74:41:45:10:92:E3:13:A5:49:A1:2E:F8:AF:F0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970201B1A2AEE0643F85A9A9D1599186D1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/k7Cb3givdEFFEJLjE6VJoS74r_A.roa
Signing time: Sat 24 May 2025 11:15:54 +0000
ROA not before: Sat 24 May 2025 11:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:02:01:b1:a2:ae:e0:64:3f:85:a9:a9:d1:59:91:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 11:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93b09bde08af7441451092e313a549a12ef8aff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:f9:2d:66:40:eb:16:07:a9:d3:65:50:22:
95:4a:fd:9a:5e:06:b8:3a:de:57:a4:fe:27:12:db:
bc:1c:13:19:cb:fa:2a:f7:ec:70:89:88:68:79:73:
1b:e2:81:dc:04:47:7b:63:1f:ea:07:ef:2d:28:2b:
47:a3:18:46:28:5b:2c:86:c4:0a:df:5b:50:00:5f:
93:66:63:09:ad:58:99:09:5c:69:59:09:4f:c3:52:
33:c6:18:f5:be:47:97:d9:0b:66:b9:7a:c0:6c:e2:
74:97:4c:11:1a:8e:06:d8:fa:53:97:58:e2:f2:5c:
23:e3:72:21:35:7a:cc:24:a4:be:4f:2e:9a:47:4a:
0e:ad:73:75:06:1b:47:82:f0:dd:98:dc:99:2f:1b:
a5:2c:cb:5f:4e:df:ac:c5:ec:8b:26:2c:1a:be:94:
74:f0:08:9c:d8:07:73:34:5f:0c:97:37:74:25:9f:
c9:3b:84:68:68:b8:e6:56:52:b2:ce:aa:91:bc:23:
4d:bf:04:c1:97:64:a0:32:0a:e1:2f:8e:8d:24:88:
1a:03:47:0d:0f:05:5a:2f:6b:c4:cb:23:50:7d:72:
47:ab:f8:98:e4:65:e8:29:32:1a:b2:d7:85:ed:68:
68:25:55:4e:6b:fa:72:3d:37:de:3d:d2:05:77:fb:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:9B:DE:08:AF:74:41:45:10:92:E3:13:A5:49:A1:2E:F8:AF:F0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/k7Cb3givdEFFEJLjE6VJoS74r_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
42:6c:d3:3e:ba:0a:39:4d:c0:d3:33:05:43:54:3c:3f:16:7c:
e3:ea:92:ce:e2:ca:0a:48:89:6b:71:6a:f9:4c:ea:cb:34:85:
e5:09:aa:51:0e:7b:fd:a7:82:d0:d8:90:a7:23:bc:11:7c:a7:
74:74:41:ac:80:ab:39:bb:aa:19:32:70:94:86:b3:34:85:16:
76:a5:a7:6b:0d:18:d1:92:b4:2d:53:70:b9:ef:a7:46:a8:c9:
0c:2e:eb:d0:13:98:76:a7:3b:43:98:53:87:09:af:1e:ae:f3:
7e:93:d8:93:e6:e9:27:a3:5f:dd:b6:96:9a:81:be:03:ae:ff:
14:6a:5f:6e:e8:40:a6:41:2f:8e:80:70:4a:14:43:6f:22:2a:
8f:08:a6:f0:f2:c1:27:c8:9e:15:50:44:f3:e7:00:69:5c:c7:
38:d0:6a:30:ce:0d:ba:28:0f:27:bb:47:a4:16:ba:81:2c:d5:
59:00:28:8f:2e:0f:e1:3a:ce:53:11:1a:02:86:2e:88:47:a7:
61:d6:f4:83:f2:05:df:a0:e2:44:3e:be:48:4a:78:70:7b:81:
65:4a:c3:da:ad:9b:28:a8:01:36:2f:71:70:6b:35:a2:3a:6f:
4f:58:86:51:48:58:41:be:bb:95:1b:bc:5c:77:ae:84:14:24:
d4:b7:97:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:05 2025 by rpki-client