Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/8My4MSgBWhk4MhT1Ebn8LcZHdpg.roa
File: 8My4MSgBWhk4MhT1Ebn8LcZHdpg.roa (raw, json)
Hash identifier: 3M3bR8BvxEy6jsaR0PsViivJPBmWpmgRP/Ncvenpvpg=
Subject key identifier: F0:CC:B8:31:28:01:5A:19:38:32:14:F5:11:B9:FC:2D:C6:47:76:98
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E49BC9FF72ABEA1E8712A00B3CBDCA78
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/8My4MSgBWhk4MhT1Ebn8LcZHdpg.roa
Signing time: Sun 30 Mar 2025 01:12:49 +0000
ROA not before: Sun 30 Mar 2025 01:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e4:9b:c9:ff:72:ab:ea:1e:87:12:a0:0b:3c:bd:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 01:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ccb83128015a19383214f511b9fc2dc6477698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:f8:ff:6d:ea:bd:46:9d:1b:01:31:e0:a1:
2f:b6:17:3a:b1:6f:01:6d:90:9d:83:f1:c4:17:5a:
d0:4a:81:4f:78:13:3f:1c:90:6b:cc:c6:55:05:7c:
0a:d6:8c:75:a1:2e:9b:f5:d9:48:28:af:c5:68:b8:
e0:c9:f5:b5:c2:e1:64:1a:9f:c4:15:bf:c5:7e:df:
5a:9e:13:01:60:4b:49:ba:c1:73:2e:df:45:90:ac:
e2:48:e9:8a:0b:80:e4:dd:cf:23:8b:5c:7c:7f:ea:
95:9f:d6:79:76:ae:92:9e:2c:73:9d:52:06:e4:6a:
44:d3:84:f5:21:c8:bb:96:91:a6:93:69:6e:db:e9:
5a:45:1f:9e:dc:7d:a7:2f:2d:9c:59:08:f6:70:4a:
be:4e:cf:17:ae:0f:6a:b8:c7:79:32:a1:46:de:9f:
84:79:cd:b8:61:23:9b:12:5d:ea:ba:f8:4b:5a:6a:
89:38:1b:e9:d3:b2:89:7b:1c:0b:ec:d7:55:b5:af:
df:9f:7d:2d:32:7f:6e:7a:b4:bb:b0:9d:ea:05:02:
c8:e0:97:4f:45:26:d0:e5:12:ff:51:92:d9:79:ab:
ac:a8:40:4a:bb:c6:2f:b6:c8:40:d0:7f:33:42:f5:
e2:b0:b4:a9:cd:86:73:8a:20:f3:ba:2d:fd:81:a4:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CC:B8:31:28:01:5A:19:38:32:14:F5:11:B9:FC:2D:C6:47:76:98
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/8My4MSgBWhk4MhT1Ebn8LcZHdpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
2e:03:5b:ee:8b:bb:92:c9:3e:56:02:c5:e4:56:6a:45:3a:60:
11:7a:3f:85:23:1e:3f:d8:57:f5:4e:23:e1:39:3f:59:8c:2e:
a8:95:83:92:ba:15:08:35:df:99:52:23:c0:2c:57:79:8d:cb:
39:1b:34:87:8b:ee:d1:5d:da:e8:fb:84:ee:99:52:37:70:a9:
5a:fe:f0:d7:a6:08:5a:66:ba:af:65:62:e8:1a:f4:4e:b5:89:
63:b4:f6:03:b0:27:5e:f0:40:df:fa:4d:72:94:58:12:39:9d:
08:6d:ac:8f:be:10:b8:a5:37:66:35:91:eb:1d:20:16:59:0b:
51:1a:b6:f3:0b:f6:97:a7:52:5f:dd:2f:93:5f:91:82:e0:38:
a6:5d:70:83:9b:99:ef:51:05:b9:18:fe:44:93:e6:4c:1d:26:
b0:3f:37:af:1c:aa:65:25:ca:ab:7f:b3:73:f7:24:fd:c1:31:
f6:61:d3:b3:c5:7c:88:d6:ca:fa:d2:e7:9d:23:48:57:bb:63:
2b:c8:fa:a2:eb:64:9b:f8:c2:bf:11:55:b3:fd:33:ae:41:7d:
51:fa:fb:01:e6:e5:a6:2e:e6:f4:9e:8a:5f:fa:3a:eb:50:d3:
88:af:b5:2a:e3:2a:2f:ad:6d:4d:65:2e:69:2a:ac:aa:8b:32:
50:fc:e8:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:04 2025 by rpki-client