Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zgOs6d1FGFXzjD2k5ZybXKMuZ2o.roa
File: zgOs6d1FGFXzjD2k5ZybXKMuZ2o.roa (raw, json)
Hash identifier: kA4XEamYUXFU34bNl8NRCogI1B/pmy4MYKr3g6x5aHo=
Subject key identifier: CE:03:AC:E9:DD:45:18:55:F3:8C:3D:A4:E5:9C:9B:5C:A3:2E:67:6A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019663D2535B8671E857C4416FEF6C96B8A3
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zgOs6d1FGFXzjD2k5ZybXKMuZ2o.roa
Signing time: Wed 23 Apr 2025 18:04:10 +0000
ROA not before: Wed 23 Apr 2025 18:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:63d2:503c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:d2:53:5b:86:71:e8:57:c4:41:6f:ef:6c:96:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 23 18:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce03ace9dd451855f38c3da4e59c9b5ca32e676a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:28:ac:6e:e3:7a:e6:a9:4d:77:89:13:bc:
55:78:22:25:fe:79:eb:31:76:75:72:61:c6:42:dd:
37:7a:49:07:ff:54:44:d7:fa:14:bd:35:38:c3:ce:
71:52:41:e8:44:6e:bf:c8:40:9f:55:97:97:2b:86:
30:6d:3b:8d:2c:4f:50:3b:9b:ea:12:0a:6f:d7:07:
25:71:d4:32:c9:b3:3a:7a:7d:01:f9:81:07:c9:9c:
0f:7d:8b:ba:b6:f5:7b:45:dd:20:c4:2c:8d:08:78:
e4:41:1a:c1:24:96:56:cb:80:b0:da:e7:42:32:5d:
08:24:9b:69:d9:18:a7:4e:a0:ca:03:b5:ab:2e:d9:
0e:fb:8c:94:c7:b7:22:dd:a1:c4:db:ef:cf:ab:1e:
6c:89:61:ca:61:f4:65:f2:02:ce:43:07:38:27:76:
ae:fa:d6:7a:81:c8:3f:f6:c5:c5:b6:ff:71:47:f2:
5c:17:3b:f2:9c:f2:8b:59:e2:75:71:08:fd:fc:53:
53:3a:16:ea:9c:71:3f:91:39:7d:92:88:02:82:5c:
c7:cf:05:cc:de:0d:4a:bc:82:92:85:be:7a:c6:87:
f6:76:30:c5:b0:72:c9:6a:f7:c4:57:53:58:2a:c6:
3b:5b:6b:42:ea:8c:92:0f:10:4f:b3:9e:99:e2:b4:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:AC:E9:DD:45:18:55:F3:8C:3D:A4:E5:9C:9B:5C:A3:2E:67:6A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zgOs6d1FGFXzjD2k5ZybXKMuZ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:63d2:503c/128
Signature Algorithm: sha256WithRSAEncryption
29:d7:41:08:c2:49:52:79:54:28:53:bb:2d:d5:e4:ef:29:37:
94:97:a1:5e:2c:0d:f6:b0:c1:c2:f4:34:21:16:ec:29:ea:cc:
3a:8a:c9:c6:5c:75:d3:95:6c:a6:6b:db:78:89:7e:ef:a8:32:
2d:bd:f7:7c:51:df:62:03:10:86:34:fb:98:0a:18:00:07:e8:
85:4b:58:23:ab:ba:e8:cb:86:2f:d1:85:cd:c4:82:59:08:86:
2e:3d:f1:3b:f7:74:15:68:88:8b:7c:10:b7:d1:41:6e:0a:ff:
04:1d:f9:08:5d:82:a9:88:09:a8:34:7b:11:e3:44:fa:b6:43:
52:bc:fd:92:34:66:62:7d:0a:7a:71:d4:5a:62:dd:62:48:e9:
c0:70:1f:eb:12:66:81:61:35:02:8d:54:4b:92:64:be:a5:16:
30:0e:47:4e:28:14:9b:90:2e:28:06:6b:f8:a1:3a:eb:7d:72:
7a:d2:b3:9d:65:fc:9a:a1:c4:15:6d:b7:7d:b2:8b:23:e5:e5:
a5:d4:1e:d1:37:bc:1b:bd:5b:87:b6:79:b9:2f:a4:48:99:16:
97:4f:f7:38:eb:51:43:3a:d1:b8:5d:52:3a:77:4e:b5:71:ec:
39:b1:29:74:98:fd:f7:61:79:2f:24:92:10:6a:61:77:08:9a:
30:72:ff:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:59:15 2025 by rpki-client