Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/t9g8P5MAnZnCY372IyKf-mOqU3Q.roa
File: t9g8P5MAnZnCY372IyKf-mOqU3Q.roa (raw, json)
Hash identifier: DUDIAEppBmYYNIJOBudNV+C6TbvcTP4ox5u3fYM/jso=
Subject key identifier: B7:D8:3C:3F:93:00:9D:99:C2:63:7E:F6:23:22:9F:FA:63:AA:53:74
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973DDD399B4A1F815C9D442C9129F66456
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/t9g8P5MAnZnCY372IyKf-mOqU3Q.roa
Signing time: Thu 05 Jun 2025 02:13:17 +0000
ROA not before: Thu 05 Jun 2025 02:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3d:dd:39:9b:4a:1f:81:5c:9d:44:2c:91:29:f6:64:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 02:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d83c3f93009d99c2637ef623229ffa63aa5374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:20:f7:3a:36:86:5f:7b:6a:73:9f:92:19:
14:d7:bf:45:0d:c8:4e:57:7e:43:8d:14:b6:5a:7e:
35:77:62:a2:90:9c:6c:23:69:79:4e:1b:3f:6f:33:
7a:5c:47:1b:b2:86:b3:7f:50:c4:b7:f7:ad:c1:82:
51:ba:eb:de:ac:71:de:29:d3:77:78:c3:e3:cf:77:
a4:f9:b0:56:d2:86:ec:63:2c:66:d0:80:b9:68:2a:
bc:19:9a:22:72:4d:93:aa:38:84:e2:ad:c3:3e:1b:
5a:57:84:22:79:29:64:29:c5:2f:b9:cd:5d:69:2c:
5d:e5:70:13:33:78:72:d8:e8:c3:00:b9:3f:94:42:
e9:fa:6c:91:ea:ce:c7:0f:c7:bc:f9:8d:b8:99:31:
46:41:82:1a:ea:39:6e:ee:d8:11:cd:07:7f:47:2e:
f7:eb:37:9d:24:c0:43:96:7b:7f:41:7b:99:b5:74:
59:9a:46:1a:64:48:fb:8f:70:a9:fb:81:c5:ea:4a:
90:32:b8:9a:a7:74:a0:ba:d4:49:64:b0:26:42:ba:
c0:c3:5c:31:c3:33:c4:fd:6a:28:f4:41:c7:7f:d6:
d3:a1:73:db:ea:65:8f:76:27:49:80:12:41:f2:46:
1d:1e:65:5d:06:8b:05:55:7d:65:5e:78:1a:1d:5d:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:3C:3F:93:00:9D:99:C2:63:7E:F6:23:22:9F:FA:63:AA:53:74
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/t9g8P5MAnZnCY372IyKf-mOqU3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
44:c3:25:a9:74:8b:76:48:43:c7:10:40:25:c2:6d:fd:77:e5:
db:29:d2:cb:52:73:c6:be:95:5f:52:39:bf:0a:cb:a3:84:c3:
56:58:1c:8a:79:b1:e8:e9:00:a3:9c:e9:d1:b0:fd:2d:ec:75:
18:dc:ba:9a:fa:41:23:d2:f4:ff:b1:9f:f1:3c:9c:77:33:50:
5c:3f:f8:52:55:e0:ec:ca:6e:0e:9c:6c:c3:76:74:d3:89:d8:
56:90:ae:0d:4a:6a:03:6a:ad:10:f8:10:fc:d2:01:71:6c:73:
01:b0:3e:de:a0:64:11:d6:da:24:ba:3b:e9:1c:d5:29:40:49:
13:2f:f6:b1:af:a3:7d:24:a5:d8:52:ba:e6:61:50:34:5e:57:
17:7c:6b:f7:2f:5d:87:74:61:9a:5f:fe:75:6c:1e:ec:6e:58:
e2:80:02:bc:86:5c:92:d6:5a:46:9e:75:19:1d:b6:23:67:2a:
78:f9:12:c6:cc:b4:54:6f:b2:52:3c:fb:ec:fc:f5:d2:15:a2:
79:62:42:19:8f:62:5b:6d:62:0c:08:65:1a:8f:4a:28:73:3e:
55:5d:cb:69:ed:d1:67:dc:a3:b3:58:df:d5:be:80:0d:9c:81:
0b:1b:be:20:1c:b1:31:d4:88:7c:7e:f9:83:6f:3d:7a:8a:bb:
39:6c:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:35 2025 by rpki-client