Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vQOhQJX0WmXlw2-AzZwfZQesm14.roa
File: vQOhQJX0WmXlw2-AzZwfZQesm14.roa (raw, json)
Hash identifier: nwBOZbjMT7/Bt+5tSX5kaxW/3l0rcyE2/5MwnKLJXzo=
Subject key identifier: BD:03:A1:40:95:F4:5A:65:E5:C3:6F:80:CD:9C:1F:65:07:AC:9B:5E
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01961B82B1A33A8C861AB84B53CB2FE0103D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vQOhQJX0WmXlw2-AzZwfZQesm14.roa
Signing time: Wed 09 Apr 2025 17:04:31 +0000
ROA not before: Wed 09 Apr 2025 17:04:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:1b82:4a11/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:82:b1:a3:3a:8c:86:1a:b8:4b:53:cb:2f:e0:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 9 17:04:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd03a14095f45a65e5c36f80cd9c1f6507ac9b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:04:41:5a:4d:59:3b:7b:30:24:d7:33:71:
76:06:be:00:d2:5b:75:db:3a:d0:12:83:f7:50:ff:
2c:3c:b9:e4:81:4e:f4:95:13:6d:02:42:22:ed:6a:
6c:08:1d:8b:d6:65:7b:9d:1c:2b:10:bf:8b:0a:ea:
90:d2:86:de:90:5b:3b:68:70:ba:f9:0a:38:66:b3:
26:2b:0e:fe:26:3a:f1:81:15:a6:14:27:0e:73:ee:
33:d7:d9:de:ef:32:83:9b:2b:bb:21:5b:3f:94:b3:
fc:b9:3f:e5:e5:7f:90:6e:50:48:43:9c:77:d9:68:
27:65:0c:66:a1:fa:07:f4:ee:ff:34:7b:c2:b0:eb:
17:a6:fb:2f:74:47:d6:a1:a7:ba:c9:0d:94:27:d5:
d0:78:da:74:d4:61:9d:f6:d9:a0:8f:18:97:5e:3f:
fe:ea:e2:4b:7f:e1:da:cb:7a:b0:c9:5e:00:b4:3e:
02:39:a3:d3:a2:c1:0c:b4:66:a6:d4:2b:7d:46:c2:
a8:d7:f4:99:ab:af:69:14:48:2e:5c:59:7c:88:8b:
bb:0e:9a:73:b6:37:78:99:9c:d8:44:f1:2f:0c:96:
05:f2:89:9e:23:8d:5d:89:91:23:42:72:3a:75:ee:
7f:a6:e7:fd:79:64:92:d5:a8:31:17:a5:09:c4:64:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:03:A1:40:95:F4:5A:65:E5:C3:6F:80:CD:9C:1F:65:07:AC:9B:5E
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vQOhQJX0WmXlw2-AzZwfZQesm14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:1b82:4a11/128
Signature Algorithm: sha256WithRSAEncryption
6b:ff:c4:a9:91:73:1a:7f:54:d2:83:1f:6f:f9:b3:c7:0a:7c:
86:63:bd:5c:15:af:18:1a:35:39:06:9c:d9:ad:da:24:84:46:
c6:2e:e5:c0:a4:a5:40:89:04:a5:3c:ca:8c:61:b8:9e:da:f1:
5d:0f:ab:06:f3:44:62:2e:66:cd:c2:1c:40:52:52:2f:8f:1e:
4e:f8:7b:01:a4:8f:7d:f9:33:a5:eb:11:6f:f6:46:8f:a0:b3:
49:7e:68:d4:fc:56:b1:41:7a:ee:58:35:f5:50:1f:07:5f:90:
58:ff:aa:f9:04:8a:d6:38:73:d6:a2:90:ff:a3:63:5e:ac:c7:
95:19:cd:0a:c6:de:0a:e7:04:63:cc:1f:3f:3d:f7:3a:a4:33:
1a:ef:5e:f7:e4:32:9c:09:6d:1e:e0:f6:c6:7c:c7:7a:04:a7:
34:34:74:9c:1a:ed:c5:09:e5:a1:7a:4f:fc:bf:8d:a9:4a:51:
62:2f:25:61:e4:8b:c7:a5:16:97:d7:66:12:74:1e:bf:ff:18:
f9:53:10:ec:ab:e6:3b:81:13:ae:13:cd:8e:be:6d:3b:16:88:
94:db:63:c4:b1:0d:01:aa:d4:bc:49:9b:1a:33:de:0f:34:ce:
8a:3b:f9:b0:69:93:dc:d0:c1:d6:84:ce:c2:97:69:8c:61:e6:
f2:40:33:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:45 2025 by rpki-client