Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/xRfK3vltACFQ_3BGjW-j0SJT3gc.roa
File: xRfK3vltACFQ_3BGjW-j0SJT3gc.roa (raw, json)
Hash identifier: u1XWNYTkFVaEPVsOHzd48pSMZy/cSDpwvoass6R7mPo=
Subject key identifier: C5:17:CA:DE:F9:6D:00:21:50:FF:70:46:8D:6F:A3:D1:22:53:DE:07
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196E010A8D9BE06026CE558D64A02DDE38D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/xRfK3vltACFQ_3BGjW-j0SJT3gc.roa
Signing time: Sat 17 May 2025 21:05:10 +0000
ROA not before: Sat 17 May 2025 21:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:e00f:ccb2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:10:a8:d9:be:06:02:6c:e5:58:d6:4a:02:dd:e3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 17 21:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c517cadef96d002150ff70468d6fa3d12253de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:ea:b5:f9:c9:5b:93:85:8b:12:0b:8c:ee:
b8:61:7b:51:bd:07:17:43:af:ad:8d:ba:b3:51:7e:
96:00:22:e3:5c:5a:e2:e9:9a:b5:4f:46:1e:92:1b:
62:9c:30:18:bb:7d:bc:54:00:12:97:f8:ae:f7:12:
e7:0d:9f:62:32:e1:3d:7d:0b:34:02:b2:24:7b:e0:
13:19:62:83:56:f1:0f:63:da:37:bd:d7:27:04:7d:
7d:95:b8:3b:66:1a:c3:17:94:d4:9c:4e:88:00:1e:
32:9e:89:f4:08:9d:c6:ea:ea:dc:7e:46:d9:74:54:
8f:2a:a6:80:b4:72:92:3e:ea:7a:2c:6f:b8:c7:3e:
a5:48:0c:d7:ac:65:1f:95:09:15:dd:36:24:ca:47:
65:f9:f6:dc:42:34:d4:c1:2d:93:ca:34:12:08:dc:
17:c0:e8:9e:71:e4:93:13:99:53:9f:67:ef:b1:c6:
26:e7:2c:f8:ee:5d:58:a9:d4:0e:22:63:55:03:17:
c6:66:40:93:7a:7f:c5:0b:c5:37:5e:46:11:aa:5d:
5e:00:0f:4e:82:0d:33:bd:06:77:d7:76:44:7e:81:
78:ce:5f:83:ec:e7:ea:74:80:2f:f2:ce:e4:b7:71:
f5:75:17:d1:f2:0b:2e:f0:d9:13:05:c0:5b:df:ac:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:CA:DE:F9:6D:00:21:50:FF:70:46:8D:6F:A3:D1:22:53:DE:07
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/xRfK3vltACFQ_3BGjW-j0SJT3gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:e00f:ccb2/128
Signature Algorithm: sha256WithRSAEncryption
6f:b5:ba:ea:11:92:f8:1b:05:05:1b:ef:80:1b:bf:7b:d2:63:
7b:b9:a9:08:26:ce:e4:3b:9e:3c:8c:84:d0:48:e9:3c:2b:bb:
81:dc:36:28:80:df:c0:ae:18:c2:a2:c3:eb:fe:d1:46:72:a3:
9e:47:c7:be:0f:c0:72:97:84:29:49:c4:9d:46:35:c1:f5:0c:
19:72:a1:05:2d:5b:b8:c1:55:21:fa:11:b6:7c:38:56:07:6f:
f4:ae:b4:b2:6a:28:5f:b8:51:66:73:5c:c8:3a:b3:e2:a6:93:
4d:0a:17:72:92:ac:5c:a3:23:59:6e:45:cb:0b:00:ee:7c:28:
94:71:2e:49:ab:1b:1f:9e:49:af:9a:12:70:0b:e5:9b:6c:df:
f8:16:d3:77:1a:fa:d2:9a:f6:84:c2:08:18:e4:70:1b:70:bd:
92:38:22:86:8b:7d:2d:13:46:fc:96:0a:7b:92:55:0c:62:2d:
b4:a3:f1:03:77:c1:c7:d6:7a:d8:83:bc:b8:96:a0:46:ad:95:
04:84:31:21:8f:25:70:95:12:bf:8d:81:7d:db:e4:31:c9:65:
72:e1:b3:09:48:d9:24:e2:76:5d:4c:d4:f8:c7:4d:c3:eb:ae:
7b:58:42:63:0c:ac:c0:a4:d4:6d:d9:e3:10:2e:57:e6:e0:07:
9f:ac:fe:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:40:01 2025 by rpki-client