Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/oE2bdcwiV5ccCZm_5AoklwlLcqg.roa
File: oE2bdcwiV5ccCZm_5AoklwlLcqg.roa (raw, json)
Hash identifier: Cn10zJy+ibAg8HLPHrkL9rV4iQJRLTqtWWo8Bhps7AY=
Subject key identifier: A0:4D:9B:75:CC:22:57:97:1C:09:99:BF:E4:0A:24:97:09:4B:72:A8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196AC9110D6F9A58EBCCD223136D9506A39
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/oE2bdcwiV5ccCZm_5AoklwlLcqg.roa
Signing time: Wed 07 May 2025 21:05:10 +0000
ROA not before: Wed 07 May 2025 21:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ac90:34bd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:91:10:d6:f9:a5:8e:bc:cd:22:31:36:d9:50:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 7 21:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04d9b75cc2257971c0999bfe40a2497094b72a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:96:61:a2:03:7e:75:86:02:20:c8:57:46:
1d:c7:bb:83:80:e2:65:3b:63:36:c0:3b:87:7e:46:
0d:49:50:15:d8:0e:1d:16:04:a8:42:fb:ce:63:bb:
63:04:7b:e1:da:96:88:a5:af:fa:cf:2c:46:9b:40:
0c:4b:65:e6:93:ce:6f:14:86:be:d0:13:19:b8:dd:
0f:99:a4:0b:38:67:5f:ee:f3:3a:ce:79:07:15:35:
c1:8d:65:d6:6b:2e:b5:5a:24:3a:58:a8:58:b3:42:
a6:f4:ee:77:20:1c:a5:44:76:83:eb:9d:a5:c6:55:
42:5d:8a:31:3e:8c:52:54:ab:07:39:65:ad:9a:2a:
5a:3c:b6:59:18:ea:73:d3:72:71:6e:3f:46:91:49:
cd:e2:97:87:aa:f0:4b:e1:a1:db:8e:0e:88:00:f8:
38:db:1b:1c:50:d2:fa:e6:01:6c:67:4a:0f:d0:e2:
84:be:a5:59:a9:da:e0:65:0e:60:e1:79:62:9b:7b:
b7:09:0c:47:60:c5:d1:a7:72:5b:44:08:03:32:4e:
be:e2:6f:63:25:f4:16:94:f8:91:04:e6:f5:ad:b2:
17:44:89:89:9f:20:4c:40:47:0f:de:f5:84:d5:4d:
24:b3:77:55:3e:a1:94:4b:dc:fa:0c:84:a4:ce:ec:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:9B:75:CC:22:57:97:1C:09:99:BF:E4:0A:24:97:09:4B:72:A8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/oE2bdcwiV5ccCZm_5AoklwlLcqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ac90:34bd/128
Signature Algorithm: sha256WithRSAEncryption
37:78:6f:be:92:4f:d9:8e:66:27:80:eb:2b:67:ec:a2:28:6d:
b6:9d:4a:d4:a6:5f:19:ac:79:de:aa:66:29:ee:54:f8:44:bb:
ce:89:c4:e9:32:cc:80:e8:c8:ce:f5:40:59:07:1a:2a:ad:9c:
f3:bd:34:6d:e3:a5:d5:36:80:cb:f1:8f:f2:e3:d7:44:50:21:
cf:43:cc:ad:d1:cd:5f:89:e5:35:23:53:01:55:24:d9:a8:02:
98:ef:99:59:e0:1f:c2:13:e1:40:7c:f2:f5:2f:c3:a0:a0:b2:
02:a5:58:f2:ba:f6:96:ce:de:6d:e0:28:c2:89:e8:ba:66:1f:
88:be:82:23:a5:3f:b3:d1:ae:1e:5f:45:e7:86:1e:6e:36:69:
71:cc:31:54:21:b0:fa:87:74:9b:d2:90:73:0b:d1:2f:fe:03:
8a:3e:76:40:d5:f2:ad:e1:3c:3d:dd:5a:29:60:b1:fb:ba:df:
cc:d0:fe:b5:f3:3a:f7:1f:c5:ef:57:86:7a:46:07:19:d9:72:
44:6b:dd:63:64:0a:c2:3a:e7:33:2c:93:df:25:89:10:8c:7f:
bb:3f:8e:e4:a8:d9:d7:24:0b:ef:c8:6b:28:57:a4:4f:23:ee:
96:1a:62:c1:16:2b:4f:af:33:2b:f4:7e:7f:cb:76:86:05:54:
a5:52:a2:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:47:49 2025 by rpki-client