Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uuVmyu6-ADh8_J9PYDmoUa8mCug.roa
File: uuVmyu6-ADh8_J9PYDmoUa8mCug.roa (raw, json)
Hash identifier: iyFsIjW270+QNbBGQ/2IaAzC9MqCWml3LJ5XIuyGPTE=
Subject key identifier: BA:E5:66:CA:EE:BE:00:38:7C:FC:9F:4F:60:39:A8:51:AF:26:0A:E8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019647B73268200B37C12643773D8B31A41A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uuVmyu6-ADh8_J9PYDmoUa8mCug.roa
Signing time: Fri 18 Apr 2025 07:05:10 +0000
ROA not before: Fri 18 Apr 2025 07:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:47b6:a4dd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b7:32:68:20:0b:37:c1:26:43:77:3d:8b:31:a4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 18 07:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bae566caeebe00387cfc9f4f6039a851af260ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:6c:89:f0:31:df:82:32:0d:1b:27:55:f3:
f8:9d:d0:8c:23:7e:47:cc:26:1e:51:f7:50:d4:cb:
49:50:89:04:67:0b:5c:b4:2e:e9:de:d3:df:40:16:
c2:92:c2:ed:f6:29:42:ea:83:97:1f:d8:26:54:35:
30:5f:31:5f:69:9b:a2:fc:ad:09:7f:79:69:bb:b8:
10:c1:23:63:03:ca:fc:62:4d:89:85:62:12:58:48:
45:be:a4:7b:56:50:3a:6e:7c:7f:d8:df:c9:01:46:
a8:6c:a9:1a:d3:1c:cd:6b:f2:b4:20:09:8e:c9:45:
f7:d7:82:af:e0:0a:1f:0b:64:a3:19:1a:67:09:72:
ab:5a:c1:bb:18:87:21:6c:6b:e6:86:99:34:fb:e6:
ce:6c:fe:4e:b0:e3:f4:61:d0:79:66:1f:8b:33:dc:
c7:1e:15:61:66:cc:59:1f:8d:73:5e:e8:8e:13:05:
f3:f5:5c:5b:63:e3:51:05:d9:f0:cf:be:34:d3:fc:
57:8d:8d:f7:9b:97:91:0d:45:f2:e8:90:b8:37:e5:
43:4d:7c:aa:e5:61:78:f5:c6:fe:6c:c4:86:7b:d9:
9d:e7:83:37:13:b7:e8:2a:86:f3:8b:46:a8:53:f4:
af:8c:16:66:73:5c:8e:67:1c:76:2d:2c:03:6f:3b:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:66:CA:EE:BE:00:38:7C:FC:9F:4F:60:39:A8:51:AF:26:0A:E8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/uuVmyu6-ADh8_J9PYDmoUa8mCug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:47b6:a4dd/128
Signature Algorithm: sha256WithRSAEncryption
75:99:4f:4f:0b:43:df:8f:50:a6:ac:3b:d9:a7:e2:51:c7:85:
a5:ff:ae:1e:59:1d:3b:ae:97:fc:30:c8:1c:bb:6d:ad:11:3f:
bf:09:2c:23:a7:5c:0c:17:fe:7a:74:92:ac:c1:ef:ab:1a:58:
01:2b:f0:53:82:4c:47:97:7a:12:32:eb:f0:45:6e:4f:14:05:
50:3c:0e:08:d6:7e:88:9c:e0:20:54:a1:50:d8:e3:63:7c:33:
2d:2c:29:33:3b:21:0f:7d:d6:57:24:68:38:3c:3e:50:4e:2b:
8b:8b:70:85:8d:5b:f8:f8:05:fe:a0:dd:0a:d7:f8:95:c5:1e:
b6:3d:41:42:70:62:ca:4c:ae:77:a4:b2:d1:30:bb:36:8d:ed:
8a:64:01:fb:22:a6:ed:f8:2c:16:1b:57:fd:53:9c:2a:13:16:
fa:94:12:00:ff:26:de:24:bc:f7:4e:9c:1e:ce:81:f4:fb:75:
46:7a:69:3b:64:c9:00:83:c6:76:e3:5d:b3:62:10:61:de:6e:
20:21:70:fd:5b:7f:06:dd:57:8e:5f:3f:d8:08:14:6e:57:0b:
12:59:04:8e:55:59:f5:02:10:3f:85:c4:f2:85:d1:ec:0b:7a:
50:58:9f:84:ce:21:90:90:62:f8:a0:ea:4c:54:30:e6:be:fa:
74:48:27:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:11:40 2025 by rpki-client