Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z16gqDctAfJOaJhWEmXVJr7Bds4.roa
File: z16gqDctAfJOaJhWEmXVJr7Bds4.roa (raw, json)
Hash identifier: jtwC8CwKGqvhsTP0WficrRzuz/oLKTAxBsk0Q5msJvE=
Subject key identifier: CF:5E:A0:A8:37:2D:01:F2:4E:68:98:56:12:65:D5:26:BE:C1:76:CE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196EE0B759EC1A9C6495B31C23494B7BB70
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z16gqDctAfJOaJhWEmXVJr7Bds4.roa
Signing time: Tue 20 May 2025 14:14:10 +0000
ROA not before: Tue 20 May 2025 14:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:0b:75:9e:c1:a9:c6:49:5b:31:c2:34:94:b7:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 20 14:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5ea0a8372d01f24e6898561265d526bec176ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:e2:6d:ce:64:dc:96:14:68:e9:ed:96:5e:
71:77:48:42:77:95:b3:2b:c6:6e:c0:45:d1:5d:6f:
6e:f2:7b:e7:6b:81:b7:03:a8:6f:e9:72:be:c0:a9:
54:68:b7:a5:1b:93:f6:ed:1c:0c:01:88:81:6a:a3:
13:f5:d5:33:af:a8:b9:62:a8:8e:b9:7e:c4:3b:7a:
67:4d:e5:41:85:77:9e:52:a1:f2:d4:58:fe:86:51:
92:ea:80:b6:12:0a:b9:16:d0:0c:2d:71:10:98:c9:
1e:d4:48:55:88:ce:23:0b:04:c2:b8:be:e2:b3:a5:
4f:d5:23:70:4f:aa:1b:be:35:9a:e9:af:21:1b:62:
59:b7:3c:ee:3f:ff:d4:75:46:1d:b1:3b:b3:26:cb:
ad:c3:24:10:38:88:0d:0f:3c:b7:5f:b4:93:aa:e1:
f4:b1:eb:36:57:5a:b7:93:e3:c2:99:77:69:01:82:
b5:56:d5:86:d0:fe:d3:05:ea:06:6f:5d:88:cd:ca:
38:e6:1c:98:49:6b:66:c6:42:dd:3d:c3:a4:12:8a:
61:c3:ba:ad:c5:d5:b0:fd:31:1b:c5:6b:14:24:cf:
36:77:89:cb:42:7a:fa:71:5e:6c:18:4b:49:40:dd:
bc:60:44:c6:b9:c4:71:f1:87:15:fd:9f:9e:91:59:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5E:A0:A8:37:2D:01:F2:4E:68:98:56:12:65:D5:26:BE:C1:76:CE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z16gqDctAfJOaJhWEmXVJr7Bds4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
67:e4:2e:2f:ef:16:56:3c:da:b7:c3:df:08:c9:e5:fa:65:90:
8a:61:88:1d:55:f8:f8:fb:f7:e6:be:b0:97:e3:e5:4a:6f:82:
34:5c:06:7a:c2:af:f3:1f:ca:1e:3b:b3:10:fe:bc:75:4a:f9:
39:89:8c:bf:fc:bd:7e:33:22:55:ce:7a:bf:f2:4f:69:48:e4:
9f:30:35:ed:49:45:ea:31:a7:d1:3a:45:79:41:4c:aa:70:08:
0c:17:e7:96:9c:ae:1a:45:ee:95:c9:f8:20:ac:b3:98:77:83:
b5:d4:b1:d3:93:42:2c:26:5f:b1:bc:fc:4b:c5:a4:b6:f9:91:
5b:f1:ee:aa:aa:09:36:de:8a:05:83:86:09:04:d9:f6:23:d5:
2a:22:ad:28:60:87:9e:d0:43:9b:b4:fd:3d:ba:2c:2b:a8:1b:
a2:a0:7d:e7:95:c4:e7:5d:4d:e4:77:ef:af:7f:2c:0c:59:ec:
40:95:fd:b2:a3:0c:9c:88:35:b6:68:26:0b:85:fe:c9:6e:b5:
b3:d0:97:8f:de:9e:f0:e6:c3:53:ff:4d:c4:3c:bf:93:99:bc:
5b:92:90:4f:38:d1:00:5e:b5:3b:2b:91:18:00:d3:df:c4:da:
ac:03:ca:4a:65:10:03:3d:b8:14:fd:9c:a5:3e:94:73:eb:a4:
ac:5a:a5:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:05:05 2025 by rpki-client