Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/l54TL0s3CK_iI8SgTVqSldMeiyQ.roa
File: l54TL0s3CK_iI8SgTVqSldMeiyQ.roa (raw, json)
Hash identifier: V5hFmeLqitj7aXLOrud52m6F0Ub6YGSN5z/S0uKZsoI=
Subject key identifier: 97:9E:13:2F:4B:37:08:AF:E2:23:C4:A0:4D:5A:92:95:D3:1E:8B:24
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197372F053F675AB9B5BEF96AA618E3B890
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/l54TL0s3CK_iI8SgTVqSldMeiyQ.roa
Signing time: Tue 03 Jun 2025 19:05:17 +0000
ROA not before: Tue 03 Jun 2025 19:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:372e:4110/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:2f:05:3f:67:5a:b9:b5:be:f9:6a:a6:18:e3:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 3 19:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=979e132f4b3708afe223c4a04d5a9295d31e8b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:53:49:da:52:37:05:d3:ef:61:53:c7:4a:
4e:ae:20:fa:f9:db:ae:7d:d2:d8:78:ef:2a:07:8a:
19:ef:fc:de:90:a3:d1:ec:83:8c:b7:86:d9:fa:6c:
8f:0e:f6:79:0d:fd:46:5f:ee:4d:96:aa:75:57:cc:
63:93:e4:84:14:65:13:71:7b:5b:f8:1f:a5:c5:0f:
eb:d4:f7:a3:80:c3:08:40:ae:33:19:19:17:94:1a:
98:6b:b0:52:bc:c8:98:d8:31:b9:c0:12:04:63:97:
29:69:ec:03:0c:1d:b5:bb:e5:b3:aa:f8:e7:8c:03:
82:b3:64:03:0c:fd:57:84:d6:87:2a:d0:56:0b:34:
74:25:62:20:1b:45:44:6b:22:2f:ec:8d:c9:10:10:
2c:cf:09:98:02:44:2b:c0:78:fc:60:80:b2:6a:71:
4d:7c:23:a4:bf:78:dc:0d:8e:7c:03:7d:06:ac:12:
4f:78:d6:42:8e:4b:c1:dc:8e:45:a0:bc:0e:8e:91:
85:08:d7:b2:84:0c:78:d0:60:2a:7c:21:23:06:a0:
a1:ed:d1:b0:60:e6:32:08:e6:57:73:74:38:67:41:
36:68:d3:48:d7:ee:ce:f1:be:63:41:4f:83:03:48:
9d:aa:76:6d:dc:20:84:cd:6f:1a:df:7a:ba:1b:a9:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:13:2F:4B:37:08:AF:E2:23:C4:A0:4D:5A:92:95:D3:1E:8B:24
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/l54TL0s3CK_iI8SgTVqSldMeiyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:372e:4110/128
Signature Algorithm: sha256WithRSAEncryption
61:d7:00:26:12:6f:bf:7f:b9:33:60:0c:1e:96:07:ab:e9:88:
47:a6:aa:a3:48:a7:41:96:68:2b:e7:eb:a7:a3:3d:81:43:76:
15:91:89:97:53:3f:ba:8e:4e:19:b2:b2:56:3f:3e:81:91:1a:
1a:3a:e9:f1:39:31:cb:32:08:f2:12:c4:0d:e5:86:48:06:93:
0d:33:ec:5f:79:18:6d:00:04:10:ce:59:f6:1f:22:01:aa:e1:
84:78:17:9b:1f:33:fb:b4:eb:80:2d:22:85:b2:79:5c:03:b1:
cd:12:0f:a4:54:36:d7:d4:c6:33:28:f1:18:1f:15:9c:88:87:
0f:38:e4:ae:09:4e:de:4d:c3:3c:1c:20:2d:0f:4b:63:0f:f0:
81:3e:19:0a:90:c1:f7:db:26:97:a4:1b:9f:90:6d:7c:19:95:
09:04:e4:80:90:b0:0a:56:43:07:dc:93:01:8a:cb:0a:ec:85:
c9:37:52:01:c3:50:36:7a:ea:57:d7:60:6f:a1:42:50:13:9c:
c7:89:fc:b1:57:6e:9b:79:6e:81:56:98:4e:3a:48:94:fd:d1:
b7:b3:e7:78:51:c1:1f:66:c5:94:66:c3:4e:b5:6e:c7:2f:a7:
21:13:4e:5d:49:0d:03:da:11:e2:12:99:d0:5e:1b:f0:16:0c:
94:98:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:59:50 2025 by rpki-client