Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/veUrYTnvri87VnxdFmpSpetmBRo.roa
File: veUrYTnvri87VnxdFmpSpetmBRo.roa (raw, json)
Hash identifier: LgZ/N3u2h5ECEGaPQ/YlDOnVPBbPBlYjRayhWMreS3o=
Subject key identifier: BD:E5:2B:61:39:EF:AE:2F:3B:56:7C:5D:16:6A:52:A5:EB:66:05:1A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01961625666B2DD7D27685AAC473A9A4B5D4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/veUrYTnvri87VnxdFmpSpetmBRo.roa
Signing time: Tue 08 Apr 2025 16:04:31 +0000
ROA not before: Tue 08 Apr 2025 16:04:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:1625:191c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:25:66:6b:2d:d7:d2:76:85:aa:c4:73:a9:a4:b5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 8 16:04:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde52b6139efae2f3b567c5d166a52a5eb66051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:e0:0c:ee:7c:fc:03:04:c5:c7:32:a6:c0:
da:4b:90:19:b6:1a:1e:be:40:0c:f5:ad:53:04:39:
8c:11:70:41:22:83:35:3f:48:10:cb:b8:1b:fd:d0:
be:ee:81:4d:44:f7:8b:08:d7:65:9b:a7:ab:91:e7:
96:4a:55:70:df:cc:7d:0c:41:b9:de:d3:f4:70:63:
42:f3:3f:dd:c9:4c:48:80:b1:81:34:c7:64:4c:5b:
77:ce:70:16:c8:85:60:8b:d8:a1:20:f8:d6:67:51:
f4:5a:4b:36:75:d4:31:ac:55:c7:17:35:8c:b0:a0:
1f:d7:c6:b9:3a:67:85:2d:87:21:80:1a:d3:e5:ab:
54:a0:0d:d6:13:dc:4a:13:f6:d2:7d:bd:87:3e:0d:
0f:69:53:30:66:b9:37:1b:21:5a:72:b0:dd:aa:15:
de:70:c4:25:53:5a:d8:61:66:f4:7d:24:ac:55:4d:
20:68:13:73:b3:80:02:46:71:e4:0e:0f:7a:c7:fd:
9b:cb:8b:b4:e5:65:3f:3d:7c:3d:43:df:8a:0c:69:
bd:bb:0d:cc:81:fd:a5:ea:a1:29:6e:5f:0b:11:47:
12:86:49:0f:b8:c7:ae:7c:8e:4c:0c:32:f9:90:bd:
68:4e:97:3a:7e:54:37:d7:cf:2c:3f:af:61:3a:c2:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:2B:61:39:EF:AE:2F:3B:56:7C:5D:16:6A:52:A5:EB:66:05:1A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/veUrYTnvri87VnxdFmpSpetmBRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:1625:191c/128
Signature Algorithm: sha256WithRSAEncryption
6f:eb:49:93:d5:a4:d3:18:bb:8e:21:e2:5b:7e:dd:11:c1:95:
e3:67:46:c0:d6:97:ba:9d:6e:1f:7e:77:39:db:96:af:2d:13:
2c:b7:59:90:2f:7c:45:1d:32:f0:ab:6b:cf:32:fe:1e:19:40:
17:98:2f:eb:53:ce:b3:16:aa:f2:f9:c3:ba:79:03:23:af:54:
8f:1f:ae:f3:1d:75:0e:c0:e8:27:70:ca:9e:6b:75:0a:12:cc:
e0:73:00:d5:88:e9:84:49:a0:04:e7:53:15:56:f9:28:64:84:
9d:71:92:41:79:96:04:df:ca:b1:c2:dc:3e:74:30:81:4a:39:
e2:ff:27:2d:cb:65:a7:54:24:55:c3:23:6a:8b:af:10:8c:19:
b8:97:78:fb:28:63:5b:f3:39:b9:2d:f6:a8:b3:77:d7:de:26:
0d:f5:b8:40:08:ae:41:fe:f1:34:78:5f:d7:cb:06:d8:42:f2:
b6:65:9a:8f:0e:e9:29:a0:d2:5a:14:8e:89:69:cf:34:dd:d2:
1f:d2:76:3e:ee:66:f1:0b:86:a6:0d:d5:6e:62:f8:e9:9e:93:
e9:5c:c8:ae:c0:37:b7:90:42:81:27:80:63:62:b5:0a:6c:b5:
9a:fb:57:9c:a4:4f:a8:0a:9c:ab:e4:2b:ee:d8:f4:69:2e:ad:
1b:ad:f0:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:45:50 2025 by rpki-client