Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wO2ybF4dOKPz-mfmWtbncXwWjRk.roa
File: wO2ybF4dOKPz-mfmWtbncXwWjRk.roa (raw, json)
Hash identifier: tVi1ADUAB9D6DxVwk28dyiYKIKo8UvaPT6orQWu6Ygg=
Subject key identifier: C0:ED:B2:6C:5E:1D:38:A3:F3:FA:67:E6:5A:D6:E7:71:7C:16:8D:19
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01965E08163C1442C1D1B6B1E00E64CF46A5
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wO2ybF4dOKPz-mfmWtbncXwWjRk.roa
Signing time: Tue 22 Apr 2025 15:05:10 +0000
ROA not before: Tue 22 Apr 2025 15:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:5e07:3440/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:08:16:3c:14:42:c1:d1:b6:b1:e0:0e:64:cf:46:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 22 15:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0edb26c5e1d38a3f3fa67e65ad6e7717c168d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:4f:ad:f5:7b:bd:d6:92:f2:93:66:92:5e:
40:04:39:02:cf:1e:92:c7:e3:ae:0c:77:55:bb:1d:
3b:80:00:f1:79:a2:e9:ee:c2:7f:da:2d:e5:57:8f:
15:68:fa:f0:bb:81:77:d2:a8:b5:e6:51:1d:72:f5:
19:2a:98:5c:b1:15:41:c8:f3:6b:dd:59:3f:7c:84:
29:1e:e8:cf:48:6a:28:9e:d4:ae:90:6a:fe:22:41:
6f:76:2a:d1:0e:8c:df:6c:d3:4d:b4:3a:04:c5:b2:
8c:c4:0f:bf:86:b7:49:22:7b:7b:1e:3f:02:2d:68:
7b:2a:a6:a3:2c:cd:9c:39:e3:60:d7:0f:0a:71:56:
77:8a:1c:ba:14:4f:1f:3c:f6:3c:a5:d7:85:f2:80:
5a:5e:2f:e1:44:f0:9d:1d:ed:9f:9c:91:87:3c:45:
63:89:35:3a:9e:91:41:7c:ab:79:05:89:6d:83:f8:
70:d4:46:84:8a:ac:ec:8b:07:93:4c:47:46:fa:f4:
cd:7f:7f:7d:9b:3b:84:47:08:aa:15:9d:6b:ef:8e:
99:a6:39:8b:cc:53:6d:66:14:49:3c:a4:f4:b8:df:
c4:bf:4a:ab:77:a0:48:aa:65:05:e3:af:a8:ca:90:
39:b8:2a:81:d6:33:df:59:01:5a:f7:bd:ce:98:d6:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:B2:6C:5E:1D:38:A3:F3:FA:67:E6:5A:D6:E7:71:7C:16:8D:19
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wO2ybF4dOKPz-mfmWtbncXwWjRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:5e07:3440/128
Signature Algorithm: sha256WithRSAEncryption
0e:d0:15:05:96:e0:9b:3b:b5:3e:33:32:36:99:49:b6:99:29:
6d:6f:46:0d:a3:54:51:8e:63:12:1d:e6:ad:83:70:62:91:af:
c8:48:fa:e7:4f:60:04:72:8f:83:7b:2f:92:df:53:50:69:56:
d6:bc:33:6a:95:5e:fe:52:2d:a3:f9:d2:01:7e:52:51:1e:35:
5b:ca:fc:d3:b3:cf:1d:fe:7c:67:7f:bd:f6:fb:fe:b3:61:03:
f0:de:02:e4:f0:e0:55:a1:4f:32:fa:3a:f4:67:49:fa:57:29:
ae:65:f0:6a:8c:61:88:60:c5:25:e2:b6:f7:32:67:7a:e1:6d:
cc:c1:a9:99:e6:ae:b6:32:fb:90:b2:46:68:a9:36:2c:e1:cb:
6a:84:6e:3d:4f:5f:03:60:d1:5b:f6:7c:8e:f2:15:32:47:1a:
d9:f6:7c:9c:71:21:f0:54:c5:74:d7:45:40:f0:d7:36:36:b5:
ea:4e:03:73:f8:0e:68:2c:b3:b5:a8:e2:21:25:83:86:db:6e:
75:32:19:40:56:79:1e:4b:fe:b2:c1:0d:b6:47:41:ed:fc:6c:
64:1e:59:69:58:1c:26:3d:21:a9:02:8b:d9:49:4f:7d:36:09:
3b:d5:64:30:50:3c:6a:69:97:67:cf:c4:d0:ab:10:1f:ef:21:
fe:39:24:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:34:40 2025 by rpki-client