Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/79QShFEB43fBB6gxLc1hk6fSWbc.roa
File: 79QShFEB43fBB6gxLc1hk6fSWbc.roa (raw, json)
Hash identifier: p4hClYULd9rI14XijEI6QBwfUFAVZ5dcYn23jyf2oo0=
Subject key identifier: EF:D4:12:84:51:01:E3:77:C1:07:A8:31:2D:CD:61:93:A7:D2:59:B7
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EF5574C6CD4CAE78718E0977693E74AC
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/79QShFEB43fBB6gxLc1hk6fSWbc.roa
Signing time: Tue 01 Apr 2025 03:11:49 +0000
ROA not before: Tue 01 Apr 2025 03:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ef:55:74:c6:cd:4c:ae:78:71:8e:09:77:69:3e:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 03:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efd412845101e377c107a8312dcd6193a7d259b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:04:b1:fc:0b:c9:bd:61:1d:9c:86:cf:ed:
d8:9d:42:65:22:6c:2e:95:81:30:b9:c9:bd:cf:a2:
70:e9:ab:e8:a2:75:f7:8f:de:98:e9:16:b3:07:48:
58:47:48:2f:e9:bb:4c:1c:ec:91:80:e2:59:9a:b2:
e1:b3:58:b7:96:db:94:33:f8:3d:9f:fa:e0:aa:61:
e1:5d:07:d8:87:6e:9b:ac:55:df:ae:ba:39:16:ab:
b9:8f:0a:ed:9f:66:67:fd:91:ed:4f:14:d4:a0:1a:
3d:5b:46:e7:98:71:d7:b8:8e:b6:08:79:64:89:b8:
a0:d6:b2:fb:1d:92:8e:e8:e5:1c:c0:7b:16:d9:77:
d3:5d:46:78:ef:57:ec:b5:c8:85:e6:a4:18:64:e1:
a2:93:b6:bd:88:96:21:d3:ef:a6:c6:6a:fb:2e:e0:
00:19:c1:73:13:89:e5:4d:a0:a6:ea:a8:81:89:d8:
09:80:af:da:ad:fe:4d:7f:a3:e1:34:cf:aa:a1:84:
80:3c:09:a6:83:84:b4:50:d1:91:88:a9:7c:7b:2b:
ef:50:3c:c0:95:79:bf:3e:e7:b0:80:20:08:9d:2a:
a9:f5:bc:0a:ce:f5:67:3d:c9:03:96:20:0b:b0:08:
df:91:29:33:e1:7f:49:66:52:e7:ca:ef:4d:b1:1c:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:12:84:51:01:E3:77:C1:07:A8:31:2D:CD:61:93:A7:D2:59:B7
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/79QShFEB43fBB6gxLc1hk6fSWbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
47:ca:ec:2b:57:95:26:20:40:4b:0e:ca:28:63:1f:9b:ad:a0:
fb:c6:0a:9e:a5:d7:4e:ba:a9:7e:8e:19:d3:a4:4a:03:f4:e1:
36:19:05:e8:87:bf:6b:1a:03:be:b3:68:06:db:97:53:ce:88:
68:2f:86:09:19:13:f3:7b:85:78:ff:84:f9:72:6e:01:bd:5a:
91:2e:d5:08:39:32:af:fb:02:ed:44:52:7c:ea:a3:af:ca:0c:
8d:87:26:9a:cc:25:a1:e5:27:34:24:72:78:a1:bf:19:5b:4a:
b7:55:48:b8:5f:0b:1f:8b:7e:ff:25:2a:ae:07:97:1a:82:6e:
8c:63:6d:57:24:5b:2a:ad:de:56:18:f2:7b:c4:a3:2b:4c:dd:
e5:7e:f8:db:ff:f6:de:2c:77:c5:9d:34:b9:c3:f5:25:37:bc:
f6:07:97:e3:aa:93:b1:a8:47:a5:6a:ed:04:c0:d0:bb:19:92:
d7:0d:a6:16:74:3b:01:22:f7:32:1a:b7:26:63:c8:48:da:9e:
d1:02:1a:83:92:47:2e:94:b5:23:73:f6:61:a5:6a:89:0c:f9:
a6:74:52:a0:32:70:13:bc:4d:b8:2f:72:a6:02:56:69:9c:17:
c4:b4:16:26:ba:79:d7:5c:79:8d:eb:c9:12:a9:8d:85:73:0d:
1e:bb:18:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:15 2025 by rpki-client