Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0EC3hfeKMmfpb3Dwy1IkEr3-JMQ.roa
File: 0EC3hfeKMmfpb3Dwy1IkEr3-JMQ.roa (raw, json)
Hash identifier: 8uYxX45pLzgNiucoeqLhCyLSF8BgwePa5GlHn9+6aw0=
Subject key identifier: D0:40:B7:85:F7:8A:32:67:E9:6F:70:F0:CB:52:24:12:BD:FE:24:C4
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F821A6F6A4D2A9A69A8C525CED6F46C5
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0EC3hfeKMmfpb3Dwy1IkEr3-JMQ.roa
Signing time: Wed 02 Apr 2025 20:11:49 +0000
ROA not before: Wed 02 Apr 2025 20:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:21:a6:f6:a4:d2:a9:a6:9a:8c:52:5c:ed:6f:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 20:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d040b785f78a3267e96f70f0cb522412bdfe24c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:b0:e6:2d:a3:33:30:13:94:d8:cc:30:9d:
40:49:2f:86:76:07:2b:fc:b7:68:de:3d:d5:f3:48:
95:1e:06:f5:3b:95:d8:a8:ee:a6:12:48:7d:b0:67:
ee:0e:17:5c:9d:ae:80:37:e1:b9:6a:f5:6c:1b:e4:
f6:58:79:4d:a5:20:c3:37:99:0f:55:29:46:ba:9a:
7e:27:3c:6c:03:ec:66:9f:f5:77:d6:03:5b:89:5b:
fb:f0:b1:56:0e:23:8a:6c:c0:00:a7:a4:cd:79:36:
52:8d:08:e8:88:27:95:fd:11:fa:72:40:3f:22:55:
47:e2:7d:08:66:bc:a0:cf:24:99:da:27:53:14:55:
4d:3b:26:53:ee:57:62:55:4d:2f:dc:d7:63:2e:94:
4e:59:29:0b:b9:9d:97:60:99:55:ad:a5:f5:b9:83:
ea:a1:9c:f6:f4:e4:15:f0:a5:16:02:b7:3e:fc:57:
b0:37:28:47:68:16:f9:96:ce:fa:57:97:1e:9c:02:
3a:e5:ae:14:65:6b:86:9a:d3:cb:51:d3:e4:d0:03:
b5:3b:62:82:fb:c6:f1:e1:7a:32:68:e2:e8:84:9e:
8f:46:bf:04:2f:69:cc:82:ed:9c:c5:5e:6c:e9:99:
b7:26:bf:4c:75:29:f1:87:e7:7e:25:bd:18:95:b1:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:B7:85:F7:8A:32:67:E9:6F:70:F0:CB:52:24:12:BD:FE:24:C4
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0EC3hfeKMmfpb3Dwy1IkEr3-JMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
04:b1:0d:7c:b6:1b:98:a3:a0:4d:9a:8a:b1:a4:83:07:0f:93:
1d:dd:13:a2:d2:14:9e:f8:ec:bb:04:f6:18:91:fa:05:a2:fc:
10:d8:61:31:21:f5:2d:0f:ed:40:25:91:d3:ab:79:04:a8:51:
a2:69:68:3d:5e:8a:2f:1a:e9:b1:b7:50:94:70:aa:40:e2:e6:
d4:38:a5:c7:84:34:75:01:8b:57:d6:76:ff:8e:64:93:6e:00:
76:39:06:aa:48:41:b3:0e:d1:28:bd:f5:94:0c:d9:5f:45:e8:
a3:97:3a:e2:f8:33:df:72:ad:b3:fb:53:95:66:cf:1c:c7:bd:
53:c4:50:00:aa:96:ee:42:d4:9b:42:00:71:89:98:f6:01:d9:
fd:bd:97:8a:88:92:01:1a:43:94:f7:75:39:96:de:d0:11:ab:
68:56:3e:5c:f9:fa:82:2b:ea:68:a8:10:ea:c6:d4:67:3d:5c:
d4:ca:b2:1c:8c:12:7a:1d:a9:f8:8a:a5:f2:3c:9c:a2:fd:4c:
99:41:f7:88:a8:4a:f2:6c:73:f4:5b:67:86:ab:4c:4c:24:9d:
10:9d:e3:26:47:40:59:d1:ff:4d:d9:a8:2e:b9:8f:1d:b6:6e:
27:3b:f1:58:a2:29:f2:65:19:10:81:47:2b:ec:63:64:69:d9:
3b:6e:58:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:33 2025 by rpki-client