Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/5S99rijxWIuoDK5Lmo0qubVfI_A.roa
File: 5S99rijxWIuoDK5Lmo0qubVfI_A.roa (raw, json)
Hash identifier: puN7feEmHeEU9gBtGGL4qbAL4csCygr4ruELLFtvtT4=
Subject key identifier: E5:2F:7D:AE:28:F1:58:8B:A8:0C:AE:4B:9A:8D:2A:B9:B5:5F:23:F0
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195DDF7A70DAB75C43D309F38492BF3AD44
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/5S99rijxWIuoDK5Lmo0qubVfI_A.roa
Signing time: Fri 28 Mar 2025 18:15:49 +0000
ROA not before: Fri 28 Mar 2025 18:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:f7:a7:0d:ab:75:c4:3d:30:9f:38:49:2b:f3:ad:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 28 18:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e52f7dae28f1588ba80cae4b9a8d2ab9b55f23f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:3c:f0:f5:a9:47:41:19:20:30:4b:7e:f5:
22:c6:f7:34:a5:19:2e:fa:83:7f:6a:bb:a7:5d:b2:
29:69:12:ec:07:16:3c:0b:ce:31:27:5c:d8:ef:85:
bb:e9:b9:ab:06:37:56:06:1c:56:a7:30:2c:d6:40:
2e:e9:47:19:43:41:07:5f:d7:d6:81:71:65:5e:f3:
f9:81:05:ea:ef:46:a7:3b:8a:92:b3:b1:1e:19:a2:
96:96:31:86:24:03:6a:42:df:32:ea:a7:03:11:72:
a5:4b:a5:de:42:ba:8d:01:07:6c:5a:80:79:f8:23:
18:3d:b4:0b:24:61:c0:0d:99:c2:9a:70:54:43:82:
26:b5:1c:31:c1:70:d1:ff:1d:2a:73:bb:56:9f:7f:
51:77:77:88:db:2d:1c:a7:87:90:8c:86:29:3c:cf:
a1:69:a6:1a:df:2d:9e:0f:d1:54:da:a3:ae:4c:e6:
b9:66:60:0d:ec:51:80:29:ab:67:57:dc:6d:a2:c9:
a8:86:e3:92:37:a6:42:52:a6:dd:ff:78:5d:d5:c6:
f9:89:1a:48:90:01:cf:e4:9f:b7:c1:43:6a:30:d3:
4f:b3:c8:47:56:98:0d:09:70:dc:d1:96:70:fa:e6:
bb:0a:50:82:9c:92:8b:8f:aa:fd:ad:37:b9:e1:f2:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:7D:AE:28:F1:58:8B:A8:0C:AE:4B:9A:8D:2A:B9:B5:5F:23:F0
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/5S99rijxWIuoDK5Lmo0qubVfI_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
18:5c:1c:d6:cc:c6:44:f0:54:41:ba:30:ea:4e:d8:d1:96:d6:
3b:8d:a4:f1:2c:13:e6:d1:8a:82:f4:04:90:40:79:bd:3a:ff:
df:56:c1:55:a0:55:2e:cf:b2:43:82:36:d8:60:06:ff:34:51:
51:8e:a9:ad:08:75:e1:4b:31:fd:38:07:0f:a9:4c:4d:b4:5a:
9b:db:cd:ef:c4:d4:61:b9:08:be:dd:6a:86:a2:17:e5:da:55:
c5:94:ad:a2:05:11:a7:70:bc:b7:7c:6d:5b:48:f1:d4:53:5e:
aa:6b:b9:c6:0f:88:c7:ee:cf:92:3e:ad:3e:8a:4f:bf:b2:1a:
e0:55:48:52:a8:84:89:27:1d:ac:4a:8c:6b:7c:d8:33:60:3e:
9f:90:bd:d5:ee:b1:01:46:a5:84:93:8a:4e:d7:51:c7:75:fe:
89:ff:97:a2:21:43:0c:b4:9e:e9:91:60:81:c3:f6:61:62:99:
58:ca:23:0a:60:33:b5:df:34:df:22:63:41:78:0d:89:f8:7e:
70:01:7f:71:d4:21:c4:bb:19:d0:6b:17:42:76:c5:ce:d5:ef:
d8:19:dd:c2:3e:e2:0f:4e:85:a1:30:9d:96:e8:0e:82:33:ff:
b4:91:75:c8:78:f6:c9:b7:78:80:b8:4f:04:04:27:5c:01:f3:
7f:bd:99:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:20:09 2025 by rpki-client