Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/65KREwbsJvopA-o2GyYlI_WGpa4.roa
File: 65KREwbsJvopA-o2GyYlI_WGpa4.roa (raw, json)
Hash identifier: 2xF7328OctTWd4f5PWHElIa1VVUDrnkZRVUDoeOd6VY=
Subject key identifier: EB:92:91:13:06:EC:26:FA:29:03:EA:36:1B:26:25:23:F5:86:A5:AE
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F3DAAEB9AB3D8BE0A522F178EA8EEE8F
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/65KREwbsJvopA-o2GyYlI_WGpa4.roa
Signing time: Wed 02 Apr 2025 00:15:49 +0000
ROA not before: Wed 02 Apr 2025 00:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f3:da:ae:b9:ab:3d:8b:e0:a5:22:f1:78:ea:8e:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 00:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb92911306ec26fa2903ea361b262523f586a5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:50:e5:d5:69:77:d2:9a:91:4e:78:fe:92:
f1:02:14:db:24:70:e1:02:8d:29:3e:d2:d8:a0:2c:
c6:38:86:48:4d:0a:e8:21:ef:8c:14:6c:1a:ba:75:
9f:d6:bd:3d:8e:c7:ce:a1:2b:df:3c:07:a9:de:ca:
25:6c:e3:7f:18:b8:89:d5:08:02:2a:99:3f:c5:c0:
6c:af:d5:88:08:7c:9f:07:b9:90:4b:ba:06:d2:ad:
4a:96:e4:07:d1:7c:58:26:d3:dd:e5:ce:0a:0a:69:
7a:d1:89:40:f4:93:7b:02:9c:14:69:a4:fb:02:d6:
f8:c4:fd:bb:25:a7:c5:c4:e0:09:12:15:05:73:4d:
e2:a6:eb:76:57:60:b5:18:d9:90:12:fd:4c:39:d2:
02:04:c6:f0:7a:e6:c1:13:cc:81:f5:e6:0e:9d:40:
f0:4e:6a:76:21:80:c0:c9:2c:62:d6:34:d3:00:41:
a4:6a:d9:11:5f:4f:95:f7:58:28:cc:d3:7a:7d:14:
3c:d9:20:58:cd:b4:71:d2:e2:45:91:db:2f:f6:f6:
a6:98:cb:ba:42:80:8a:29:16:c5:22:3b:2e:c8:21:
8f:d9:98:75:ec:df:3f:a1:78:45:95:9c:39:db:02:
bf:3a:0d:7b:57:4a:77:2c:76:85:b1:d0:18:ff:46:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:91:13:06:EC:26:FA:29:03:EA:36:1B:26:25:23:F5:86:A5:AE
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/65KREwbsJvopA-o2GyYlI_WGpa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
56:7e:ba:8c:41:93:eb:19:96:84:ba:df:d5:4a:ff:6f:8f:09:
23:92:c6:64:16:fe:d2:ca:14:d5:f1:0b:3f:33:30:99:9c:7e:
37:53:f8:f2:a5:35:73:89:c9:dd:18:be:35:56:4e:77:10:72:
f9:be:96:d7:73:3d:5e:b0:40:aa:b7:24:0f:09:2a:42:23:42:
30:9e:65:0e:1a:88:8c:0a:7f:92:a2:62:e8:bc:5f:cd:34:8b:
5c:9d:77:e3:29:de:15:f6:16:85:56:83:28:50:1a:ee:fb:cc:
c6:4b:fb:04:06:1d:5b:9e:4c:ac:8c:5c:55:0c:ce:57:16:70:
5f:ee:82:06:a7:4f:cf:de:d1:e7:9f:80:b2:a7:00:63:a7:14:
cf:a4:6c:27:c1:54:90:fe:38:f9:6d:54:cb:85:ec:79:cd:68:
05:dd:17:7a:09:74:05:15:07:60:aa:1b:78:6b:eb:1f:3e:08:
f0:cf:b5:b0:be:1f:2c:a8:c8:f5:25:c6:ca:4c:7d:92:89:f7:
e4:49:a5:ce:41:5e:ac:dc:13:1f:9d:d8:fd:75:9b:e3:01:6a:
4e:5d:b0:81:2a:8a:b1:81:e7:db:c3:dc:59:f1:fc:e2:5a:13:
e3:02:a1:10:86:66:6f:95:1f:50:20:fe:e6:c3:a7:f5:e8:f7:
0a:48:6a:72
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXz2q65qz2L4KUi8Xjqju6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAyMDAxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjkyOTExMzA2ZWMyNmZhMjkwM2VhMzYxYjI2MjUyM2Y1ODZhNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+FQ5dVpd9KakU54/pLxAhTbJHDh
Ao0pPtLYoCzGOIZITQroIe+MFGwaunWf1r09jsfOoSvfPAep3solbON/GLiJ1QgC
Kpk/xcBsr9WICHyfB7mQS7oG0q1KluQH0XxYJtPd5c4KCml60YlA9JN7ApwUaaT7
Atb4xP27JafFxOAJEhUFc03iput2V2C1GNmQEv1MOdICBMbweubBE8yB9eYOnUDw
Tmp2IYDAySxi1jTTAEGkatkRX0+V91gozNN6fRQ82SBYzbRx0uJFkdsv9vammMu6
QoCKKRbFIjsuyCGP2Zh17N8/oXhFlZw52wK/Og17V0p3LHaFsdAY/0YXNQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOuSkRMG7Cb6KQPqNhsmJSP1hqWuMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvNjVLUkV3YnNKdm9wQS1vMkd5WWxJX1dHcGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAVn66jEGT6xmWhLrf1Ur/b48J
I5LGZBb+0soU1fELPzMwmZx+N1P48qU1c4nJ3Ri+NVZOdxBy+b6W13M9XrBAqrck
DwkqQiNCMJ5lDhqIjAp/kqJi6LxfzTSLXJ134yneFfYWhVaDKFAa7vvMxkv7BAYd
W55MrIxcVQzOVxZwX+6CBqdPz97R55+AsqcAY6cUz6RsJ8FUkP44+W1Uy4Xsec1o
Bd0Xegl0BRUHYKobeGvrHz4I8M+1sL4fLKjI9SXGykx9kon35EmlzkFerNwTH53Y
/XWb4wFqTl2wgSqKsYHn28PcWfH84loT4wKhEIZmb5UfUCD+5sOn9ej3Ckhqcg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:38:15 2025 by rpki-client