Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0azVxNuBYWeLO_ndXsdEnh87gfA.roa
File: 0azVxNuBYWeLO_ndXsdEnh87gfA.roa (raw, json)
Hash identifier: uKtBClz0KnNFb1zKw+F3XREqZSM4QLWfczgIL0qrsxY=
Subject key identifier: D1:AC:D5:C4:DB:81:61:67:8B:3B:F9:DD:5E:C7:44:9E:1F:3B:81:F0
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F712A779FADB13D57791A120563F000B
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0azVxNuBYWeLO_ndXsdEnh87gfA.roa
Signing time: Wed 02 Apr 2025 15:15:49 +0000
ROA not before: Wed 02 Apr 2025 15:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:12:a7:79:fa:db:13:d5:77:91:a1:20:56:3f:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 15:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1acd5c4db8161678b3bf9dd5ec7449e1f3b81f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:ab:cd:dd:af:02:83:61:5b:7f:2c:bb:8a:
c0:ed:11:2e:84:43:ee:7f:90:0f:f5:36:a3:af:ab:
5d:a8:c0:32:2c:7f:9c:b6:0e:2d:8a:fc:ad:cf:38:
06:12:98:37:49:54:e5:b8:d4:64:73:7a:43:b7:ac:
41:e3:fe:ec:44:87:a1:b2:2b:98:72:46:e1:45:1e:
00:fd:3c:82:73:7f:ae:64:11:f6:37:8d:68:5a:55:
5b:1b:06:0a:29:70:56:f6:f8:40:6e:09:e0:e0:6d:
71:7b:e6:91:be:3f:96:ab:36:2a:59:c5:40:89:95:
e3:2b:36:6c:1b:86:c5:df:5d:32:ec:e1:e9:79:83:
c9:e3:3b:3a:cc:04:a3:eb:ef:3a:05:e2:37:9d:c2:
74:87:d5:da:36:d2:c6:90:5e:a9:2d:d8:91:1c:08:
2f:15:2b:83:5e:8d:4c:ea:9b:1b:fe:90:75:10:c8:
01:6f:3e:c7:a6:e4:4e:b2:09:9a:fb:08:61:b4:00:
68:bf:54:25:f1:f6:71:9a:81:83:43:a3:86:b9:4a:
5c:72:b9:24:d7:6f:be:fb:53:19:df:4f:cf:56:36:
25:91:0f:b1:3e:43:92:64:2a:b7:13:b7:9c:a1:1a:
be:af:77:a1:34:5c:76:fa:08:a0:0f:1e:42:47:56:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:D5:C4:DB:81:61:67:8B:3B:F9:DD:5E:C7:44:9E:1F:3B:81:F0
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0azVxNuBYWeLO_ndXsdEnh87gfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
54:f8:38:68:eb:80:bd:31:e8:51:13:1a:60:23:43:68:8c:8a:
e4:2b:93:27:9c:0c:bf:8b:51:4f:c3:0b:ec:63:e5:6a:1e:17:
75:25:ee:5c:09:88:1d:28:81:f7:79:9f:37:5f:57:b1:e2:fa:
d7:0b:1e:59:92:57:98:ee:93:80:ee:d3:39:78:72:82:21:94:
ea:36:d1:1f:53:98:e5:3a:d5:80:e0:2c:b2:c3:fa:7e:e4:1a:
d6:6f:4c:03:6d:a1:bd:29:dd:5f:a3:06:5a:75:07:c3:25:93:
71:e5:af:e8:3d:6f:cd:e6:3a:85:b1:e4:56:25:2b:91:00:06:
43:82:cb:c1:52:34:67:b1:e8:79:e7:d8:63:7b:12:f0:c3:4c:
f3:e4:1c:68:b0:b7:52:29:8c:59:2c:22:8e:bb:93:bc:a1:5f:
ce:60:cb:65:bf:b8:ed:0d:6e:36:bf:8f:38:6e:d1:3f:e7:f8:
38:44:81:f3:ce:00:5f:03:db:3c:79:44:19:91:51:6d:32:51:
70:c5:e0:d2:db:66:39:16:1a:b3:f3:bb:47:82:6e:26:42:c9:
77:00:42:2a:37:18:1a:7e:44:93:9e:80:6a:78:a2:29:29:51:
28:3a:7a:9d:91:66:eb:9a:43:97:71:ea:1b:70:60:9b:d8:f6:
3d:dc:85:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:18:13 2025 by rpki-client