Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/6P6LUn4BMhgLMcZiiY-2z_YUhOA.roa
File: 6P6LUn4BMhgLMcZiiY-2z_YUhOA.roa (raw, json)
Hash identifier: zE0GR5b1z9PXHkoa9WPQyOtIPUrms7ZcuBXH2Zd1emo=
Subject key identifier: E8:FE:8B:52:7E:01:32:18:0B:31:C6:62:89:8F:B6:CF:F6:14:84:E0
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195BABCCD50A6B4A800CE843225E0959608
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/6P6LUn4BMhgLMcZiiY-2z_YUhOA.roa
Signing time: Fri 21 Mar 2025 22:04:50 +0000
ROA not before: Fri 21 Mar 2025 22:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:babc:39ac/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ba:bc:cd:50:a6:b4:a8:00:ce:84:32:25:e0:95:96:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 21 22:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8fe8b527e0132180b31c662898fb6cff61484e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:13:fc:0d:f6:a7:40:e6:da:87:c9:87:c6:
0e:c6:a1:6f:ca:4d:e5:8b:c8:a6:15:86:ec:5a:b4:
54:a8:72:1a:87:23:0f:02:c9:51:59:bc:c1:3f:6d:
32:35:3d:7d:dd:b1:96:f3:d3:b2:7b:9a:16:19:28:
25:64:0c:9f:51:2a:28:b2:2b:38:ca:d3:d9:f7:69:
ba:cb:2c:75:3c:db:8e:53:ed:a6:12:e1:2e:d9:65:
db:f1:37:a4:03:b4:58:2f:f8:72:8b:92:89:89:3c:
68:1c:49:ac:c9:0c:3d:73:86:03:67:e7:3c:1b:6f:
1c:e3:87:60:18:20:38:95:8e:38:23:6a:33:75:7e:
29:51:9a:85:a7:a4:2b:cd:11:fe:1f:2b:24:a7:81:
97:28:47:b0:43:1e:2a:28:d2:ba:7c:5b:06:25:fb:
db:e8:70:9f:b9:b1:3c:bc:f8:51:5e:40:96:a5:d9:
a8:ee:e8:d5:b6:09:cb:3b:12:c8:7e:de:0a:bf:c2:
ad:cb:2d:94:2f:87:09:24:cc:64:3a:e6:d9:60:c6:
59:93:f1:f2:3f:df:4f:75:23:d9:91:b3:df:ae:b5:
41:0f:1d:34:f2:c9:4e:d6:98:c6:39:dc:c2:ba:22:
0c:15:7b:b5:9a:50:9b:2c:af:9a:be:3f:e2:1d:68:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:8B:52:7E:01:32:18:0B:31:C6:62:89:8F:B6:CF:F6:14:84:E0
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/6P6LUn4BMhgLMcZiiY-2z_YUhOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:babc:39ac/128
Signature Algorithm: sha256WithRSAEncryption
6c:58:68:27:69:da:33:81:ea:da:de:29:8f:66:c4:c3:68:1f:
b8:ee:53:ca:d3:e5:86:2f:df:cc:55:9b:5e:1a:dd:c8:fb:60:
00:39:1a:5e:ab:29:d9:76:29:41:d4:9f:05:7c:5b:bc:ea:cd:
f2:bf:b3:e4:e9:39:7c:4f:41:50:44:72:73:89:2b:0e:00:8f:
3c:a5:53:cc:02:e3:49:98:4d:91:a0:af:60:42:0c:36:d4:b2:
06:62:7b:35:1c:0c:d0:2f:7d:f8:e8:08:83:03:58:52:1d:30:
e5:d3:6b:17:33:97:9e:6c:28:38:f5:0b:d5:ce:57:b0:69:6d:
f3:d2:1d:c1:27:22:af:f8:9e:3f:a7:5b:4a:79:b2:80:6c:2b:
38:84:44:63:72:f4:a8:f5:7f:f8:12:e3:3b:90:be:88:2c:09:
82:f5:ba:4b:24:85:2b:49:79:9f:94:88:a2:c4:0f:56:cf:cc:
0e:ba:ef:96:31:e3:37:f0:f5:98:0f:81:d9:76:2c:7d:c6:f3:
36:1b:e3:94:cd:80:8d:3b:6d:b0:58:d9:32:27:88:12:49:db:
97:49:48:cb:f4:e1:61:57:80:94:d0:e5:2c:6d:14:60:70:c3:
62:99:77:3f:3f:c4:3c:49:cf:4d:b5:d5:91:43:e0:3d:f7:81:
3a:97:5f:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:29 2025 by rpki-client