Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/t6lmVut49dlDaWkTUExtyVZ_0EI.roa
File: t6lmVut49dlDaWkTUExtyVZ_0EI.roa (raw, json)
Hash identifier: ugkpZvaIsQUlEMqbvJsDk5j18pE2fAFnn1WM+Wwxrk0=
Subject key identifier: B7:A9:66:56:EB:78:F5:D9:43:69:69:13:50:4C:6D:C9:56:7F:D0:42
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196489203FB31A08B1DE4DF736EBB6AA4DD
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/t6lmVut49dlDaWkTUExtyVZ_0EI.roa
Signing time: Fri 18 Apr 2025 11:04:10 +0000
ROA not before: Fri 18 Apr 2025 11:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:4891:e480/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:92:03:fb:31:a0:8b:1d:e4:df:73:6e:bb:6a:a4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 18 11:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7a96656eb78f5d943696913504c6dc9567fd042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:78:24:6d:35:4c:6b:ca:65:6a:9a:9b:96:
e0:3a:cb:98:b6:dd:28:5f:4f:7f:50:23:2a:66:9c:
ed:18:46:ff:bb:e0:67:bb:b4:34:e5:52:10:00:cc:
5d:d1:9c:9b:37:15:de:f7:38:06:ce:65:c6:92:f5:
3d:86:19:89:ae:c0:eb:00:73:fc:e2:50:4a:c3:32:
5e:c2:f3:c8:48:9f:04:a0:51:c7:99:38:ed:d9:a3:
dc:70:7a:a3:2d:e0:e3:ba:5a:f4:80:bd:02:fd:2f:
49:1f:4a:54:86:84:f7:ed:27:a7:34:8d:cb:3e:94:
0c:20:d8:f9:80:6b:67:1b:2a:dc:fb:ab:0c:0a:78:
40:d6:dc:f4:9f:65:3d:ca:bd:5c:4c:5e:42:2f:61:
75:23:a7:d3:0a:ea:22:d9:f2:f5:a3:cc:0e:a3:2b:
18:b0:dd:d3:0c:0f:c8:52:55:b0:a9:73:c9:91:3a:
b3:54:35:90:3f:99:dc:33:f4:df:10:e6:00:e2:19:
12:3f:9f:7b:8d:5a:77:d2:19:cb:89:a5:c5:b2:be:
5f:64:e6:41:d9:c8:8e:fa:31:18:f4:1f:12:f9:41:
27:dd:0d:4e:e4:1d:7b:83:dc:a0:a4:a3:22:10:d0:
f3:48:bd:a9:13:2d:61:66:b2:86:01:2a:e7:73:f3:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:66:56:EB:78:F5:D9:43:69:69:13:50:4C:6D:C9:56:7F:D0:42
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/t6lmVut49dlDaWkTUExtyVZ_0EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:4891:e480/128
Signature Algorithm: sha256WithRSAEncryption
24:b4:39:54:12:57:93:44:24:d0:9e:db:19:cf:b0:e9:ba:f8:
cf:c4:da:2a:73:bb:32:1d:be:71:95:30:f8:6c:eb:08:d4:b9:
0d:8a:e1:fa:38:cf:22:4c:cb:7d:0d:e8:6d:25:e6:44:99:18:
3b:93:71:b9:2e:d5:42:6c:aa:0d:e2:b8:8d:71:2a:2a:3b:f9:
d6:92:af:ad:ab:29:9c:3c:1c:4b:1f:9a:b0:e3:55:9f:44:8f:
05:01:8e:db:1b:3b:ae:6e:6a:90:41:42:04:b7:55:8b:80:65:
43:c6:6b:d4:0d:5a:7c:7f:f8:b9:40:17:a2:c7:e6:0f:2f:37:
67:3f:64:f9:52:f8:aa:e2:e6:31:55:4b:c0:8f:02:e7:39:99:
1e:96:d9:15:4c:ef:47:40:f7:92:8d:33:f8:ae:06:d7:20:1e:
13:92:d1:43:08:c5:6f:13:d6:b8:38:81:c7:5e:ab:61:12:b3:
f6:d2:35:4a:06:0d:a8:3c:72:8b:b3:36:a8:4c:b9:f0:26:0e:
e4:3e:e8:18:60:7f:c6:d6:ad:09:81:c8:ba:2b:9d:e0:74:33:
61:b9:02:3b:98:0f:c1:1d:24:a2:65:34:db:da:bc:b9:0f:42:
3d:54:1c:5a:f7:b2:8f:b8:25:93:be:a2:0f:86:b8:9b:97:e3:
99:dd:2b:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:02 2025 by rpki-client