Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mYPYqznXNwTZ8lRLGpYr8gQvizc.roa
File: mYPYqznXNwTZ8lRLGpYr8gQvizc.roa (raw, json)
Hash identifier: QykO7ck5ypCAv9LiGEhvlmEXGTY4YHU8scTA6gUs/TM=
Subject key identifier: 99:83:D8:AB:39:D7:37:04:D9:F2:54:4B:1A:96:2B:F2:04:2F:8B:37
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019703136F7BEF621D492EB78C273E5E0DC9
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mYPYqznXNwTZ8lRLGpYr8gQvizc.roa
Signing time: Sat 24 May 2025 16:14:54 +0000
ROA not before: Sat 24 May 2025 16:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:03:13:6f:7b:ef:62:1d:49:2e:b7:8c:27:3e:5e:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 16:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9983d8ab39d73704d9f2544b1a962bf2042f8b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:df:bc:3e:3e:d3:ed:2b:8e:b9:31:d0:48:
4f:e8:66:47:86:3f:fb:d8:14:fa:a1:54:bb:05:91:
52:21:d0:b2:b9:83:e6:67:74:12:af:d2:1f:0c:7b:
ed:22:9e:0b:2c:80:7f:f5:34:f4:e8:f5:37:b0:31:
c5:e4:6d:7a:f4:84:27:ee:f7:4f:99:21:2f:cd:d7:
5c:d0:52:9e:1a:e3:d1:99:74:95:b4:29:d6:4d:b0:
4d:c2:ce:41:89:dc:df:88:11:c5:8b:f4:4c:30:93:
51:b1:47:0f:08:f6:5d:6a:86:74:f3:1f:30:1b:97:
11:8a:3b:40:1e:cc:ed:31:7a:c7:97:07:93:a4:1a:
11:e1:d2:7e:96:a6:c2:a0:0b:ce:5e:67:ba:fe:df:
e7:09:8b:20:9b:42:99:f2:cb:f0:73:84:5b:77:76:
87:38:c0:eb:99:31:f1:d5:6f:28:b4:49:e8:83:a9:
ee:00:65:3f:9c:80:a7:e1:53:ac:53:dd:19:14:1a:
b0:9b:88:c8:00:47:4a:b4:15:5b:45:3a:c1:88:56:
9d:74:ce:64:d7:fe:32:e6:3d:4e:cd:bb:17:78:56:
ce:e6:2b:50:2c:3f:14:1c:45:7b:e5:7a:58:18:3f:
02:09:a6:28:2c:cb:a8:40:7e:62:50:3f:06:57:67:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:D8:AB:39:D7:37:04:D9:F2:54:4B:1A:96:2B:F2:04:2F:8B:37
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mYPYqznXNwTZ8lRLGpYr8gQvizc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
4e:f5:7b:2a:a1:c4:73:da:11:57:2f:e8:03:49:37:09:b0:a9:
03:49:39:96:f8:5a:a2:a5:c3:1f:bf:f6:ab:cf:54:1e:66:4f:
8d:cd:68:fe:91:72:fe:d1:78:b9:24:2a:de:5d:b3:30:e1:c1:
a2:08:a8:b1:1d:1d:bd:d7:4a:8e:66:3d:e7:64:d2:6f:38:5f:
40:e4:86:5b:85:98:28:1d:4c:b4:e6:04:5f:58:15:6d:69:fc:
87:64:fc:d3:99:87:e2:a5:6e:4f:b6:6e:b4:9e:87:3c:fc:54:
be:06:9f:61:6d:c5:50:1a:4a:2e:2f:dc:8e:24:f6:4d:de:86:
9a:85:87:20:2c:8a:77:65:74:70:4c:fe:1c:2c:f2:bd:64:35:
74:e1:97:a6:0c:bb:63:55:fc:84:7a:a5:98:1c:c4:d4:9a:96:
99:87:da:19:92:7f:c4:6a:9d:40:38:ef:23:de:6e:46:61:09:
36:2e:b5:5b:29:75:03:9f:f3:83:80:e4:65:de:92:a5:98:85:
62:3e:3e:da:26:21:2f:e9:86:cf:63:a4:50:3a:86:dd:82:ae:
a0:e5:11:8c:e7:da:3a:8c:15:0c:cf:d3:92:cb:4e:09:51:e7:
4a:55:8c:fa:cb:77:e7:20:6a:72:23:ab:e2:4f:83:1b:d8:c5:
02:e7:ab:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:56 2025 by rpki-client