Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kobVx4V_mTxZxYrlY5ot6-81WFg.roa
File: kobVx4V_mTxZxYrlY5ot6-81WFg.roa (raw, json)
Hash identifier: R32PpWYjH9PmvdaBpZIpN4rta5+dG+M91VnsthLx/Zo=
Subject key identifier: 92:86:D5:C7:85:7F:99:3C:59:C5:8A:E5:63:9A:2D:EB:EF:35:58:58
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975A32F2B52115DA31C9DF0A36973B24E6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kobVx4V_mTxZxYrlY5ot6-81WFg.roa
Signing time: Tue 10 Jun 2025 14:16:17 +0000
ROA not before: Tue 10 Jun 2025 14:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:32:f2:b5:21:15:da:31:c9:df:0a:36:97:3b:24:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 10 14:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9286d5c7857f993c59c58ae5639a2debef355858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:20:10:55:2a:ba:17:87:80:ec:eb:46:cb:
3d:18:c9:d6:44:e6:7b:a4:9e:3d:d7:5f:3b:96:38:
1a:e7:28:15:42:1a:3f:17:7d:74:04:de:b6:66:7b:
69:7e:23:d7:12:b3:d4:5e:17:9f:82:4f:d9:cd:81:
c2:5a:d5:a6:69:97:6a:19:24:f8:30:02:5f:04:af:
c9:7c:c3:95:4a:98:93:aa:e7:07:27:6c:36:4e:e9:
10:73:fe:70:c9:90:2b:e3:6d:d0:74:6f:62:2e:2d:
ff:27:d5:8c:81:82:3b:d6:a4:bc:52:85:d5:8e:2d:
be:43:9b:24:ff:27:78:58:47:75:91:ab:66:a4:af:
0b:3a:60:b3:68:c7:29:15:2d:6a:af:4a:29:ef:ef:
e5:52:95:ea:4b:e0:42:38:2b:35:aa:e4:02:67:be:
dd:4f:d4:4e:bc:43:eb:34:0a:b3:24:3e:b0:78:88:
e5:f7:84:32:19:1c:61:5f:8c:d8:27:eb:e1:7b:6b:
83:b1:a4:b5:32:8e:fd:9a:a2:ef:cc:ba:05:cc:97:
89:a3:a9:7c:6b:d6:2f:c4:41:11:22:75:92:82:39:
a6:8a:29:c4:b4:b7:c0:99:e4:cb:8f:d7:9c:a8:2f:
ad:f9:f2:43:47:48:9e:a2:f9:f6:8f:8c:22:6a:3f:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:D5:C7:85:7F:99:3C:59:C5:8A:E5:63:9A:2D:EB:EF:35:58:58
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kobVx4V_mTxZxYrlY5ot6-81WFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
1e:b7:cf:e5:7d:95:31:9b:1f:ae:24:bf:3c:60:9f:38:94:7f:
d8:af:69:c5:28:a3:57:9f:24:fa:27:7d:8a:cf:b6:25:42:8d:
41:40:7b:77:01:89:5a:46:b7:7d:d3:a3:63:9b:85:d6:f6:44:
23:d1:cf:6a:32:99:01:7a:09:b1:91:a5:7b:1e:a1:2a:9c:7a:
98:41:93:63:ea:58:0d:01:05:17:19:ea:bc:89:19:f8:5c:ab:
31:e6:d7:6f:7a:80:1d:03:29:7d:a3:cf:fe:ad:bf:3f:ac:60:
0c:ff:54:f5:42:ee:82:f7:35:46:33:84:73:67:8b:35:a9:78:
22:83:41:22:47:3f:4c:de:af:a3:c6:56:53:31:9f:d4:e1:9c:
d1:6e:fc:e6:89:5e:52:e0:f9:1e:b0:4f:3e:b4:5a:63:f8:42:
9c:d6:bf:40:b6:5e:56:43:4f:7d:a5:cf:36:3a:e7:98:b6:9d:
74:2a:bc:eb:8a:f8:8f:df:35:ff:56:05:12:72:ef:30:75:8d:
6f:54:38:4d:05:61:c1:aa:4e:76:21:13:46:9c:88:c2:a7:3e:
96:17:02:e4:7f:4b:5d:06:b8:ac:29:7c:4f:19:d2:cd:d5:b7:
b3:87:85:8a:78:55:3b:8e:5b:8c:e4:d7:d7:a2:77:0e:55:34:
bd:ff:d1:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZdaMvK1IRXaMcnfCjaXOyTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjEwMTQxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mjg2ZDVjNzg1N2Y5OTNjNTljNThhZTU2MzlhMmRlYmVmMzU1ODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAQgEFUquheHgOzrRss9GMnWROZ7
pJ491187ljga5ygVQho/F310BN62ZntpfiPXErPUXhefgk/ZzYHCWtWmaZdqGST4
MAJfBK/JfMOVSpiTqucHJ2w2TukQc/5wyZAr423QdG9iLi3/J9WMgYI71qS8UoXV
ji2+Q5sk/yd4WEd1katmpK8LOmCzaMcpFS1qr0op7+/lUpXqS+BCOCs1quQCZ77d
T9ROvEPrNAqzJD6weIjl94QyGRxhX4zYJ+vhe2uDsaS1Mo79mqLvzLoFzJeJo6l8
a9YvxEERInWSgjmmiinEtLfAmeTLj9ecqC+t+fJDR0ieovn2j4wiaj/OpQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFJKG1ceFf5k8WcWK5WOaLevvNVhYMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEva29iVng0Vl9tVHhaeFlybFk1b3Q2LTgxV0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAHrfP5X2VMZsf
riS/PGCfOJR/2K9pxSijV58k+id9is+2JUKNQUB7dwGJWka3fdOjY5uF1vZEI9HP
ajKZAXoJsZGlex6hKpx6mEGTY+pYDQEFFxnqvIkZ+FyrMebXb3qAHQMpfaPP/q2/
P6xgDP9U9ULugvc1RjOEc2eLNal4IoNBIkc/TN6vo8ZWUzGf1OGc0W785oleUuD5
HrBPPrRaY/hCnNa/QLZeVkNPfaXPNjrnmLaddCq864r4j981/1YFEnLvMHWNb1Q4
TQVhwapOdiETRpyIwqc+lhcC5H9LXQa4rCl8TxnSzdW3s4eFinhVO45bjOTX16J3
DlU0vf/RAQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:44:48 2025 by rpki-client