Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z-fF7dGDIJsmOd3v-k8j9Ty6oQk.roa
File: z-fF7dGDIJsmOd3v-k8j9Ty6oQk.roa (raw, json)
Hash identifier: ir59NSqC53gK3NEt9b8swBktxRD66x67WmZcXSoo/H8=
Subject key identifier: CF:E7:C5:ED:D1:83:20:9B:26:39:DD:EF:FA:4F:23:F5:3C:BA:A1:09
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F7E1D5D501160F37EE4F8A8A538FCE44
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z-fF7dGDIJsmOd3v-k8j9Ty6oQk.roa
Signing time: Thu 22 May 2025 12:04:54 +0000
ROA not before: Thu 22 May 2025 12:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:196:f7e1:2659/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:e1:d5:d5:01:16:0f:37:ee:4f:8a:8a:53:8f:ce:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 12:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe7c5edd183209b2639ddeffa4f23f53cbaa109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:fd:ca:0d:df:37:07:5b:27:14:49:99:0e:
38:f6:35:93:f8:3d:70:70:df:ae:c9:7b:bf:fc:a8:
ce:d0:ab:88:f4:a8:9c:55:0c:a9:e4:cc:6c:1b:9a:
72:9e:66:1f:75:02:17:f8:09:40:a2:ec:2a:7a:7a:
cf:0e:c9:ec:65:9c:8e:41:93:07:a6:01:c2:6f:96:
fa:46:1c:da:b3:ac:70:32:a5:2a:5e:9e:d1:b1:0d:
19:95:ed:3e:d9:ea:50:9a:4b:a1:18:b0:8b:c0:24:
68:46:f3:d5:5d:90:e5:86:0a:3e:3f:23:13:5d:c5:
47:e6:78:89:c9:ea:46:73:ad:53:f3:90:45:7d:43:
8a:bc:9a:2b:5a:d5:99:a6:36:6f:2a:9f:3f:33:57:
9f:d9:49:f7:3f:09:c7:68:06:53:12:36:a8:53:d2:
9c:59:41:d7:14:f6:41:0b:2a:7a:c5:b0:3b:86:fa:
2e:9d:2c:b4:5f:26:a8:17:f6:d5:73:63:7e:ce:a1:
d9:25:55:3c:8e:69:80:47:35:3f:7f:23:71:15:cd:
07:15:a8:ef:57:7b:40:20:71:c2:66:e4:cc:f9:58:
52:7b:bc:d0:83:e7:ae:15:bc:5e:8c:41:1f:15:08:
c8:2d:1b:b8:8c:99:7e:f1:da:81:fc:5e:3d:da:92:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:C5:ED:D1:83:20:9B:26:39:DD:EF:FA:4F:23:F5:3C:BA:A1:09
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z-fF7dGDIJsmOd3v-k8j9Ty6oQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:196:f7e1:2659/128
Signature Algorithm: sha256WithRSAEncryption
90:57:6e:66:24:5e:0e:da:de:ad:75:85:a6:31:22:4f:17:3b:
bb:7b:6d:14:4a:a3:20:79:13:77:52:7a:22:d3:7f:90:7d:e3:
05:a0:b4:a0:9a:99:e3:5c:3c:20:3b:b3:d4:a5:63:9f:4f:32:
f8:cf:07:63:94:37:e0:3d:0f:44:69:00:a5:4a:77:a2:95:ba:
7f:a5:10:06:7b:6d:8a:41:51:f5:2a:b5:eb:76:df:8b:56:a3:
bb:32:d0:14:12:c4:13:4f:65:9b:03:e8:62:83:62:f4:3d:c5:
b8:3a:a5:cf:a7:f7:6a:63:79:fc:d9:73:0f:c7:68:4f:05:45:
4b:27:e3:aa:2c:3b:84:17:6e:cc:7f:ab:53:b7:6f:3a:2f:47:
af:0d:f2:f7:e6:8f:e0:b4:3d:8c:10:9e:37:7a:22:c5:f8:99:
1a:28:28:4e:c8:53:6f:fd:59:17:af:90:7d:ce:40:26:af:0f:
77:29:75:e5:13:fb:91:a8:19:a9:ab:57:6c:e5:98:0d:24:0c:
19:85:3f:37:42:91:e2:43:32:28:57:0d:31:32:b9:3c:a5:dd:
f9:50:54:5d:a6:cb:7d:f3:2b:9f:61:76:54:dc:15:2e:e0:de:
8a:b4:2f:50:40:26:48:bc:f4:1f:95:5c:0c:3d:ae:64:c9:7a:
d4:33:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:12:52 2025 by rpki-client