Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/qfbBadUMRh0FP7S351XIiA3AgYE.roa
File: qfbBadUMRh0FP7S351XIiA3AgYE.roa (raw, json)
Hash identifier: Y0hWnfbegklcOcPR2H48GrKIg/hU1ViGTsiQST9aa6M=
Subject key identifier: A9:F6:C1:69:D5:0C:46:1D:05:3F:B4:B7:E7:55:C8:88:0D:C0:81:81
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019755DD55056B3268276316AB3C429D015D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/qfbBadUMRh0FP7S351XIiA3AgYE.roa
Signing time: Mon 09 Jun 2025 18:04:17 +0000
ROA not before: Mon 09 Jun 2025 18:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:55dd:19e1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:dd:55:05:6b:32:68:27:63:16:ab:3c:42:9d:01:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 9 18:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f6c169d50c461d053fb4b7e755c8880dc08181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:e1:95:61:6a:80:29:99:99:81:dc:19:bb:
6d:24:fc:d0:53:40:3e:35:43:da:59:ab:03:79:2a:
90:7a:8b:df:95:a8:32:e1:e9:b1:3a:49:e2:f5:63:
19:61:5b:ec:1c:9b:f5:0a:d0:c5:c9:f1:f4:8d:44:
32:3a:c0:76:f8:7c:5b:8e:04:4c:09:fa:6d:36:b5:
ec:a1:f3:3b:a3:16:c4:9c:3d:eb:8d:b4:20:b0:30:
24:bc:90:bf:11:a2:4a:25:cf:8e:6c:52:d1:05:b1:
e6:cc:9b:db:77:53:d1:a5:df:16:2e:b6:f4:6d:ac:
ed:a3:fe:e7:fe:bd:f9:a8:c3:e8:61:02:a6:03:d3:
1d:c7:f2:33:62:08:b7:69:b1:d7:90:83:7c:14:ef:
49:ae:f3:ae:0b:99:9d:e5:3b:c7:f6:84:59:81:8e:
c3:85:ba:d6:4c:52:fd:24:48:f3:3d:1a:78:74:3f:
1a:48:95:fd:79:6f:91:ec:36:61:cd:b7:43:37:25:
ba:db:37:5f:c3:09:84:35:a7:41:3f:ce:56:1b:25:
81:fe:e2:e6:7e:e2:a4:8f:e2:78:59:6e:44:c5:6c:
0c:bc:ad:c8:c9:c6:b1:db:5b:15:e4:54:b7:a0:aa:
89:31:30:75:cc:94:db:bb:88:50:a5:66:7b:ee:c7:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F6:C1:69:D5:0C:46:1D:05:3F:B4:B7:E7:55:C8:88:0D:C0:81:81
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/qfbBadUMRh0FP7S351XIiA3AgYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:55dd:19e1/128
Signature Algorithm: sha256WithRSAEncryption
14:23:35:80:e4:90:a7:7c:fd:a8:7e:8f:b4:21:aa:44:ad:08:
c5:95:cb:b1:b0:ff:d9:a6:5d:99:6b:67:0a:44:da:a3:0e:80:
93:5a:71:60:95:1b:de:48:27:9f:69:af:df:82:ef:4d:23:1e:
14:3b:cd:37:03:e2:f5:ba:a8:ad:e9:b0:df:a7:ac:80:9b:82:
cf:75:2a:46:8a:8c:f5:0b:16:b0:b6:4d:da:3a:45:2b:1d:2f:
23:cc:fb:cd:c4:bd:af:fa:1b:00:0f:81:2e:c6:b9:56:1b:05:
83:74:2b:04:21:2c:25:ec:16:1e:ed:6f:86:8a:17:e3:4c:0e:
a5:8d:3c:73:1a:b6:52:34:8c:1f:84:83:04:90:3c:c3:f8:05:
ad:80:7c:f6:c1:69:72:fb:7c:ec:df:df:2e:8a:1a:c2:a7:d8:
b2:c2:63:28:0a:10:67:d7:37:17:91:5b:33:cd:34:9f:f1:00:
76:37:46:dd:84:b2:81:25:0e:31:78:12:f0:19:7c:9e:44:b3:
6e:50:d2:cf:e8:c3:15:fd:7e:f2:d0:14:c3:58:69:04:34:5c:
44:33:d3:8c:c3:dc:a1:eb:02:39:c2:a1:3b:0a:7e:7d:ff:d2:
84:1e:be:07:a6:ac:28:b3:8a:60:4b:65:96:5c:0b:10:d9:0b:
01:f2:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:17:44 2025 by rpki-client