Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0hFjkUPfG3EtV7QwSAlsJMRn28I.roa
File: 0hFjkUPfG3EtV7QwSAlsJMRn28I.roa (raw, json)
Hash identifier: oavJB3WQZ66TCKS7T/dRUrHU5yI60eyeO719OQnigUk=
Subject key identifier: D2:11:63:91:43:DF:1B:71:2D:57:B4:30:48:09:6C:24:C4:67:DB:C2
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195FFA6172FB5B79226AEC34911840AA113
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0hFjkUPfG3EtV7QwSAlsJMRn28I.roa
Signing time: Fri 04 Apr 2025 07:13:49 +0000
ROA not before: Fri 04 Apr 2025 07:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:a6:17:2f:b5:b7:92:26:ae:c3:49:11:84:0a:a1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 4 07:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d211639143df1b712d57b43048096c24c467dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:04:92:c5:d3:d1:54:54:e5:cc:5e:e2:49:
d9:d1:fd:9c:60:93:f3:cb:a7:4d:01:f2:fa:f3:50:
17:b6:c5:91:eb:7d:9c:76:70:b2:25:4d:84:65:fb:
2c:25:04:ad:05:c3:8a:b8:4b:7e:19:6c:4a:b0:bc:
b9:06:60:61:18:7e:ef:59:96:6b:a3:ac:06:86:ce:
3a:ba:5b:14:be:a4:de:35:82:eb:ea:56:89:e3:7f:
b6:2f:81:22:33:ac:cc:c6:3e:f9:a2:1a:3e:84:6d:
5d:a5:fd:15:88:3b:c9:eb:9e:54:8c:ff:07:8b:03:
5d:ad:93:2a:73:f5:f4:63:88:77:33:e1:6e:f9:d1:
9e:83:28:8b:f7:ff:82:83:06:59:b4:47:b8:d9:80:
8a:5a:18:35:b3:e0:a3:a1:cb:6c:3a:c4:fa:00:a2:
9a:ad:d6:5b:68:ed:e9:77:b8:15:d9:9b:f5:06:31:
5e:ca:45:09:d1:d3:83:ea:18:eb:2f:12:cc:d7:7f:
f8:1c:9e:fb:02:e6:45:ca:9f:0a:2b:a4:c1:30:92:
13:b8:f1:a7:de:ec:a3:98:01:58:97:e8:aa:22:26:
b2:3d:ce:38:74:5b:89:52:e7:44:c5:41:df:e0:ba:
8c:a1:00:b6:d8:7f:e9:40:08:6e:0a:67:42:4b:92:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:11:63:91:43:DF:1B:71:2D:57:B4:30:48:09:6C:24:C4:67:DB:C2
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/0hFjkUPfG3EtV7QwSAlsJMRn28I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
1a:c9:4b:a9:a2:b7:fe:fb:0c:86:fd:9e:46:9f:9d:25:ca:e7:
a6:8b:b8:f2:3f:2e:c8:bc:82:17:f9:63:6d:b6:ba:5d:de:f3:
b7:40:d9:bb:35:db:cc:68:a2:98:c3:e9:7d:9d:71:db:93:70:
1f:b1:a9:b1:d8:b2:be:7e:5c:c7:01:2f:c1:9c:7d:07:b8:57:
35:4e:7f:4d:fd:f5:5f:58:e0:b9:54:d5:f0:19:f7:5b:b4:da:
20:61:e8:21:b7:0a:a6:dd:7a:cb:b7:07:4f:78:53:41:44:5f:
9c:1d:45:e5:06:4f:f3:4d:43:eb:39:61:00:0a:9b:fc:18:f0:
4b:83:4f:7b:c9:e3:85:07:9d:b2:cf:58:07:3c:f3:b4:a9:9c:
24:01:4a:63:bb:21:a4:b5:b3:d9:7b:6f:31:5e:dd:3e:b3:61:
73:c1:06:ca:5d:47:81:38:87:7e:1e:e0:ba:ee:7e:23:b0:db:
51:a3:75:e3:8b:da:aa:15:52:a4:0c:74:1e:6c:ea:08:c1:8e:
97:4d:72:4e:b4:5f:9f:f6:fe:76:6d:50:73:0d:1a:3b:8e:f4:
d8:43:b5:3d:36:b8:5c:c1:69:f6:9d:37:03:4a:46:4b:86:ef:
c1:ef:1e:57:c2:cf:5c:25:69:42:46:6e:85:d4:75:5a:64:96:
99:73:d6:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:14:42 2025 by rpki-client