Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lzkQlgucaDf8LWIyFH9fwhf9C8E.roa
File: lzkQlgucaDf8LWIyFH9fwhf9C8E.roa (raw, json)
Hash identifier: ZZtdMZq+lpgK7mnk9pI8Mh64O87avGoRso2FSRR4Ck4=
Subject key identifier: 97:39:10:96:0B:9C:68:37:FC:2D:62:32:14:7F:5F:C2:17:FD:0B:C1
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974897CEFD04DD09A393A5EE764F0A437B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lzkQlgucaDf8LWIyFH9fwhf9C8E.roa
Signing time: Sat 07 Jun 2025 04:13:17 +0000
ROA not before: Sat 07 Jun 2025 04:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:97:ce:fd:04:dd:09:a3:93:a5:ee:76:4f:0a:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 7 04:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=973910960b9c6837fc2d6232147f5fc217fd0bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e1:91:44:92:e7:09:59:be:5c:09:0c:d3:26:
a6:9a:ba:e7:96:f3:59:2e:28:40:5f:4d:90:de:4f:
8b:62:6c:e3:f3:3a:11:90:8e:cc:df:c1:28:f5:49:
9a:b4:38:f2:3a:b9:0b:d4:cb:23:27:61:66:25:d8:
a9:4c:03:a2:a9:2b:67:c5:a2:58:83:b9:f2:7e:d5:
31:4a:a3:d7:e8:86:2e:20:25:93:1e:04:c6:98:04:
28:59:07:05:1f:64:53:36:89:05:0d:87:3b:13:14:
a6:82:ef:58:1d:9a:3f:b8:db:c0:0d:f0:dc:9b:ac:
ae:66:8a:5c:9e:3a:1e:be:90:42:2a:21:fb:95:51:
ab:2f:72:5c:e2:e0:09:c8:8b:f9:b0:50:24:59:27:
a7:88:be:fe:b5:55:89:e9:91:cc:ea:c1:0f:8e:a6:
69:01:6e:6a:c3:ac:0b:60:95:4d:a4:ab:05:bb:0b:
47:a4:ac:4d:06:33:92:48:90:e1:86:e6:81:4a:6b:
06:a9:87:f5:8d:51:6d:37:c2:ca:7a:46:e4:9b:8f:
af:e7:52:84:99:00:a9:0b:dc:07:83:18:de:a8:08:
fe:e6:8e:07:ed:48:33:1a:f2:c7:19:c8:41:e7:22:
72:d4:77:c4:b6:54:6f:ab:3c:41:4f:5a:d5:a4:4d:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:10:96:0B:9C:68:37:FC:2D:62:32:14:7F:5F:C2:17:FD:0B:C1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lzkQlgucaDf8LWIyFH9fwhf9C8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
24:a7:af:51:9c:d1:3e:fc:03:45:99:9a:92:7d:6f:91:14:d3:
31:49:6f:39:b8:74:06:ef:8d:f9:5d:79:d1:05:bb:78:6c:40:
34:15:86:47:b9:f0:ac:60:91:58:c7:57:dd:60:72:54:c3:f2:
79:69:c2:a5:10:93:4b:0e:ad:38:09:43:eb:78:df:97:b4:51:
fc:f8:da:ac:ea:cf:ee:ec:f1:01:f5:a0:3c:d3:30:c9:ca:f2:
61:17:7c:04:71:4c:15:95:b5:dd:35:e8:88:46:28:4c:fb:bc:
2a:1e:72:7a:94:5d:4e:d0:62:a9:10:54:62:bd:bd:23:b7:bd:
88:e6:00:97:99:ef:59:42:03:9b:a7:8a:da:c4:40:98:8d:74:
4c:47:99:70:a4:25:43:cc:ca:11:8e:81:e2:24:c3:57:de:09:
78:d4:c9:9d:6e:ce:4e:5b:da:53:eb:17:6a:c1:d5:03:1b:07:
3e:e6:36:c6:fa:fe:74:b5:c7:c3:71:32:81:63:80:fc:33:32:
af:2a:c1:64:39:36:3e:5b:b3:83:18:32:49:cb:d9:3a:2c:4c:
88:15:6f:fe:71:68:b8:8b:ff:54:68:86:a7:a1:87:01:f7:1b:
ca:4a:98:13:a6:81:f4:a3:10:85:6d:e4:13:27:f1:e3:46:67:
ea:2b:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:58:35 2025 by rpki-client