Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uaCmUNLDJMbw-Vfw9CjbI9DDWxU.roa
File: uaCmUNLDJMbw-Vfw9CjbI9DDWxU.roa (raw, json)
Hash identifier: uIRp3lcAZWtSvFXUtNH5hiDc5NGNab0yHJqw4xuDP30=
Subject key identifier: B9:A0:A6:50:D2:C3:24:C6:F0:F9:57:F0:F4:28:DB:23:D0:C3:5B:15
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196A0F9D799AEF2BCF3F8810643352759D6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uaCmUNLDJMbw-Vfw9CjbI9DDWxU.roa
Signing time: Mon 05 May 2025 15:04:10 +0000
ROA not before: Mon 05 May 2025 15:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:a0f9:cf7b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f9:d7:99:ae:f2:bc:f3:f8:81:06:43:35:27:59:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 5 15:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9a0a650d2c324c6f0f957f0f428db23d0c35b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:2a:60:0c:33:27:69:0c:fd:0d:d0:3e:f8:
59:38:31:74:c7:c5:68:0a:36:ea:63:4d:64:94:7c:
2c:d5:0c:3f:25:73:54:1e:a7:4f:f5:9b:e8:0e:76:
2e:26:0b:40:da:85:b8:39:d6:0d:af:58:7e:b9:76:
16:ce:65:c5:3c:02:57:f1:c3:90:cc:5f:26:da:14:
ee:1d:1d:e7:e9:4d:d1:bb:40:8e:82:dc:9e:32:9c:
21:cc:62:de:74:ed:51:5d:90:65:83:b7:3d:ca:b0:
bc:91:23:48:9e:b6:b0:3b:7e:77:2d:b6:b2:50:9a:
66:03:44:3c:ae:99:54:fe:9e:8a:cf:b9:23:03:42:
ff:5e:b5:99:c2:5d:9b:ba:2a:03:f8:27:bf:a6:48:
e8:a7:a5:7b:91:f9:6c:9d:1e:23:8f:cd:6a:30:67:
07:83:79:7c:e1:7e:6c:b7:7a:9c:a6:f1:03:af:b7:
b1:fc:45:84:cd:95:22:ea:1a:10:f5:63:cb:0d:ea:
d8:43:5c:52:cb:3a:bb:63:1c:a6:b6:40:82:4d:10:
c9:44:74:4f:d4:59:df:6e:7f:72:b7:c1:71:bd:30:
d7:33:fe:21:d7:a7:bd:08:1e:fc:e0:55:7d:0c:f6:
ea:50:5a:65:38:43:d6:7e:95:5b:b6:fe:8e:6e:e2:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:A6:50:D2:C3:24:C6:F0:F9:57:F0:F4:28:DB:23:D0:C3:5B:15
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uaCmUNLDJMbw-Vfw9CjbI9DDWxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:a0f9:cf7b/128
Signature Algorithm: sha256WithRSAEncryption
1e:1f:f9:3f:08:35:ac:02:5b:72:11:99:8c:97:e3:74:0b:75:
f4:f1:5c:bc:7a:79:91:0a:40:37:e1:54:d6:bf:0a:b4:a9:84:
ba:72:7e:de:2a:94:76:91:e3:d9:19:99:2b:35:3f:a9:1c:60:
8a:3e:33:b3:c3:68:4e:2d:2a:92:31:1a:13:d1:f5:2f:b0:1c:
fd:c4:a2:c9:cc:93:05:09:e4:f1:1c:2a:1c:89:6c:ce:51:12:
ce:89:12:ef:d3:8e:b2:15:e1:77:c3:cb:c4:74:c3:18:97:77:
39:06:d5:c4:2b:d3:18:2c:90:57:77:d0:fd:a2:ba:7c:43:db:
6a:6b:c8:e8:c2:ab:49:a9:ad:7e:02:a1:dd:a2:56:d3:e0:e8:
35:b6:0e:ec:8b:9b:80:d9:5c:35:86:7d:d8:d5:1d:39:27:f7:
0e:28:d4:cd:e1:57:f3:da:26:58:0d:95:1c:cc:af:a1:e6:68:
a8:87:a6:98:1c:bb:af:9b:68:b0:de:48:45:87:c0:88:f7:3b:
f5:9f:ca:68:e4:f0:57:30:70:cc:18:40:a2:fe:11:a9:79:e5:
8b:7d:3d:20:58:82:1a:24:dd:3a:80:8a:6b:65:b2:26:2c:20:
e3:28:e7:04:25:b8:99:86:e6:5b:56:e4:4b:39:eb:5e:c3:e0:
8b:2b:0d:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:18 2025 by rpki-client