Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sxvuLvUVRGfixw5rkPlV0co9fQk.roa
File: sxvuLvUVRGfixw5rkPlV0co9fQk.roa (raw, json)
Hash identifier: 4yu3+am/dyhWQu1IkMafzXZQ7OVbFj/7VTC98JHFMVo=
Subject key identifier: B3:1B:EE:2E:F5:15:44:67:E2:C7:0E:6B:90:F9:55:D1:CA:3D:7D:09
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F9625B4DB544E1A1667A927F31749777
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sxvuLvUVRGfixw5rkPlV0co9fQk.roa
Signing time: Thu 22 May 2025 19:04:54 +0000
ROA not before: Thu 22 May 2025 19:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:196:f961:afc6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:62:5b:4d:b5:44:e1:a1:66:7a:92:7f:31:74:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 19:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b31bee2ef5154467e2c70e6b90f955d1ca3d7d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:c2:ee:62:da:25:b9:07:7b:33:d9:1f:9d:
2b:95:a9:ab:39:5c:ff:7a:aa:58:e1:7d:4a:15:4f:
0c:63:3a:cb:7d:87:01:7c:c4:7a:66:0e:ef:3c:59:
06:bf:52:e9:34:50:72:9e:f4:9c:5b:0c:63:33:7a:
9d:9f:24:54:40:a0:42:de:47:7f:3d:12:70:b6:c8:
07:80:8f:bf:c0:33:9b:36:c7:40:ac:74:f4:71:a2:
25:ce:5a:85:19:b5:35:47:b0:84:90:7c:fc:0a:0a:
19:19:f6:a6:b0:96:4b:be:17:da:23:1f:53:7c:36:
5f:9f:56:d1:fc:02:ae:11:de:75:14:f2:90:b1:21:
01:ba:d2:7d:e5:2c:b2:37:b7:62:8c:9c:4c:0c:20:
cf:cd:e3:b7:ec:31:92:49:73:e9:26:7b:74:50:34:
28:fd:5f:85:07:0f:18:11:6c:a7:dc:4e:1e:0b:5d:
d8:99:d5:d1:08:0f:78:53:f5:75:60:d8:92:1d:ba:
43:b5:21:1f:af:ec:e7:a0:c5:f6:57:b0:72:7e:df:
83:b5:6c:90:48:93:18:73:28:a2:2b:48:cd:29:56:
f3:30:df:69:33:e9:0d:28:12:80:0d:48:88:ea:11:
f0:9a:4b:03:4c:b2:c7:22:d4:81:08:23:05:dd:ae:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1B:EE:2E:F5:15:44:67:E2:C7:0E:6B:90:F9:55:D1:CA:3D:7D:09
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sxvuLvUVRGfixw5rkPlV0co9fQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:196:f961:afc6/128
Signature Algorithm: sha256WithRSAEncryption
3a:57:55:ae:8b:88:53:86:c1:36:a5:cb:13:1e:ae:74:cc:67:
ef:6f:bb:47:a4:64:9d:15:05:e9:e0:5a:01:2f:2b:22:c3:f2:
a2:bb:ea:db:63:be:b2:98:5c:3b:78:ca:50:a0:31:8d:c3:dd:
c6:27:e9:ae:74:36:a9:45:e6:d3:e4:e5:97:dd:52:1b:fe:12:
fc:b3:7b:bd:a3:71:0f:63:89:03:9f:08:c2:fa:5d:29:31:ac:
c8:9f:b8:56:b9:2f:f5:6c:64:85:6f:30:eb:28:c2:eb:67:2d:
f0:33:c0:b8:b0:62:3a:32:08:c7:47:90:f1:a1:f5:f3:fc:fe:
91:aa:65:bd:6c:9d:e4:bb:55:69:7a:11:d1:ad:82:8c:c1:a1:
cb:10:dd:c6:14:69:0d:4c:3f:c3:5f:66:43:f7:c3:7a:6a:b5:
98:62:e7:cf:18:7c:81:60:34:8d:c2:ca:7f:94:e5:76:f4:16:
e8:cf:56:eb:cc:7a:e5:f2:7b:c1:15:a6:cc:a4:1e:fe:8f:07:
69:57:57:d5:69:14:e2:c3:b4:45:1f:69:0a:bb:66:b4:d2:6d:
f1:44:be:7e:f4:6c:e8:07:1a:47:f4:3d:62:78:de:1e:8e:5d:
72:01:55:9b:3d:59:2d:36:9a:b9:33:92:f2:1a:a5:cd:51:7a:
3b:50:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:32:32 2025 by rpki-client