Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mILkUmvfUL62ESx-IvqDEuP2rKo.roa
File: mILkUmvfUL62ESx-IvqDEuP2rKo.roa (raw, json)
Hash identifier: ELWpr3j0l+LStY5Poj5xuocjXMWPOHguRvb0owcGUFo=
Subject key identifier: 98:82:E4:52:6B:DF:50:BE:B6:11:2C:7E:22:FA:83:12:E3:F6:AC:AA
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973210E6E5205BF976EE2557254B5E7C7B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mILkUmvfUL62ESx-IvqDEuP2rKo.roa
Signing time: Mon 02 Jun 2025 19:14:17 +0000
ROA not before: Mon 02 Jun 2025 19:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:10:e6:e5:20:5b:f9:76:ee:25:57:25:4b:5e:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 19:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9882e4526bdf50beb6112c7e22fa8312e3f6acaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:fb:cd:aa:46:ba:c5:ba:f1:b2:13:2a:5a:
f4:c4:5d:cb:a1:c1:2c:68:90:83:a2:60:63:c2:3e:
f9:fa:2e:ed:8b:d4:10:6d:c8:5a:13:30:52:79:68:
ca:cf:bb:a1:08:b2:eb:49:15:3f:26:15:8b:3b:cd:
91:00:3b:2e:02:ab:b2:c4:a3:a2:93:34:bd:80:50:
81:5d:9b:ef:35:e6:4b:03:bc:6b:67:9e:46:50:25:
d5:19:51:bd:ba:41:5d:86:d7:58:03:e3:2f:e3:f6:
86:1c:a7:4d:4b:06:90:de:71:2d:26:89:ad:c1:c8:
07:e7:e8:8b:e5:99:ba:33:f6:85:80:40:26:cc:93:
e3:6d:ee:70:7f:c6:97:b9:10:d3:ae:76:c5:7d:81:
44:7d:d9:67:59:3a:f0:c4:9c:10:64:d0:2f:76:0d:
77:36:25:92:05:e2:68:f2:73:47:4a:9b:46:7a:75:
e8:0b:dd:61:f2:36:9c:18:7b:5e:4c:47:32:48:b1:
c6:d6:b3:92:61:5a:50:50:3e:b2:26:5d:47:d6:c0:
19:d1:46:03:2e:3d:62:d3:a8:72:f5:25:93:cb:c7:
e4:bc:e8:38:27:16:64:1b:3c:9a:54:aa:16:08:de:
0d:f6:8d:25:bd:8c:13:ae:50:d9:5f:c7:df:6b:e7:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:E4:52:6B:DF:50:BE:B6:11:2C:7E:22:FA:83:12:E3:F6:AC:AA
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mILkUmvfUL62ESx-IvqDEuP2rKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
5c:9b:25:7d:42:50:47:d7:1e:ea:c6:10:27:32:a4:25:78:c8:
66:03:df:75:f5:41:e4:c6:24:10:8a:f8:94:06:62:01:d1:16:
e5:bb:76:b3:7f:41:d9:57:31:11:f8:1d:06:c2:49:4c:45:b0:
83:41:4b:b5:35:1c:86:87:e2:63:04:90:1c:ef:a8:39:76:8d:
bc:03:b5:2d:a2:00:3e:2e:72:74:af:cb:af:e8:ac:28:ce:07:
87:3f:db:b0:ea:06:4e:d7:7d:75:bc:38:48:cf:cb:85:68:f2:
0c:a9:c5:83:df:a2:7c:c8:42:59:71:68:74:b9:3e:1c:00:b2:
4b:29:80:1f:6d:23:f7:dc:5a:1e:98:d6:b9:9d:83:73:67:4b:
87:d6:cf:63:89:7f:c1:2d:ed:71:c0:f7:a6:d4:40:17:e3:6c:
7f:e7:52:8d:5a:6b:fa:8c:b9:40:3b:26:4a:65:0d:9e:34:1b:
07:8e:f0:e8:73:69:7d:7f:ed:28:02:63:f3:13:ef:e4:df:45:
45:2b:58:56:1e:b5:81:f2:3f:c4:c1:38:7f:6c:97:62:37:13:
a8:21:61:71:26:be:93:44:04:a1:b4:56:90:5d:b0:5d:7b:65:
23:ac:c7:5f:fd:e7:ce:3b:3b:ee:dd:83:87:86:10:0b:f8:9f:
a6:6e:0a:2b
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZcyEOblIFv5du4lVyVLXnx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjAyMTkxNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODgyZTQ1MjZiZGY1MGJlYjYxMTJjN2UyMmZhODMxMmUzZjZhY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuf7zapGusW68bITKlr0xF3LocEs
aJCDomBjwj75+i7ti9QQbchaEzBSeWjKz7uhCLLrSRU/JhWLO82RADsuAquyxKOi
kzS9gFCBXZvvNeZLA7xrZ55GUCXVGVG9ukFdhtdYA+Mv4/aGHKdNSwaQ3nEtJomt
wcgH5+iL5Zm6M/aFgEAmzJPjbe5wf8aXuRDTrnbFfYFEfdlnWTrwxJwQZNAvdg13
NiWSBeJo8nNHSptGenXoC91h8jacGHteTEcySLHG1rOSYVpQUD6yJl1H1sAZ0UYD
Lj1i06hy9SWTy8fkvOg4JxZkGzyaVKoWCN4N9o0lvYwTrlDZX8ffa+dKEQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFJiC5FJr31C+thEsfiL6gxLj9qyqMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvbUlMa1VtdmZVTDYyRVN4LUl2cURFdVAycktvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAAjA5AxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
MA0GCSqGSIb3DQEBCwUAA4IBAQBcmyV9QlBH1x7qxhAnMqQleMhmA9919UHkxiQQ
iviUBmIB0Rblu3azf0HZVzER+B0GwklMRbCDQUu1NRyGh+JjBJAc76g5do28A7Ut
ogA+LnJ0r8uv6KwozgeHP9uw6gZO1311vDhIz8uFaPIMqcWD36J8yEJZcWh0uT4c
ALJLKYAfbSP33FoemNa5nYNzZ0uH1s9jiX/BLe1xwPem1EAX42x/51KNWmv6jLlA
OyZKZQ2eNBsHjvDoc2l9f+0oAmPzE+/k30VFK1hWHrWB8j/EwTh/bJdiNxOoIWFx
Jr6TRAShtFaQXbBde2UjrMdf/efOOzvu3YOHhhAL+J+mbgor
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:46:33 2025 by rpki-client