Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GSmPiHpnl3R6VNPaYAqM-pgQ5ck.roa
File: GSmPiHpnl3R6VNPaYAqM-pgQ5ck.roa (raw, json)
Hash identifier: R5t1N4LCtudft5TzFgudup0ppx5lgdIQiDgU3TlShKw=
Subject key identifier: 19:29:8F:88:7A:67:97:74:7A:54:D3:DA:60:0A:8C:FA:98:10:E5:C9
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F25854567E1802DD7C5BD30E59616658
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GSmPiHpnl3R6VNPaYAqM-pgQ5ck.roa
Signing time: Tue 01 Apr 2025 17:13:49 +0000
ROA not before: Tue 01 Apr 2025 17:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:58:54:56:7e:18:02:dd:7c:5b:d3:0e:59:61:66:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 17:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19298f887a6797747a54d3da600a8cfa9810e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:05:b3:57:cb:a1:18:db:a1:c0:85:28:a9:
c5:f1:a3:fc:0d:74:74:24:83:75:50:d2:bf:8c:12:
d5:3f:53:69:d7:12:d8:d4:a7:a9:96:74:00:a9:3b:
c1:a8:60:8f:04:34:08:ee:49:44:dd:c9:2a:b4:7e:
2a:c2:3b:c8:36:10:ca:bc:a2:1e:65:a4:76:f0:6a:
3d:14:79:69:f5:d7:fb:18:e7:68:9c:fe:0a:47:65:
6a:28:06:0e:8f:c3:b3:e8:f5:ec:df:c6:e7:86:a2:
bd:29:4b:43:0e:f2:44:20:fb:79:89:e4:f9:b1:69:
5e:49:fa:86:ed:a7:7b:99:ef:c2:f8:08:0b:e9:13:
ad:b5:3c:c9:ec:53:79:89:d6:21:c3:5f:b3:07:63:
26:fb:b9:b5:8e:eb:0f:66:3e:0f:6e:61:cb:f5:89:
cf:1c:dd:05:22:15:57:3c:92:68:3e:fd:71:86:53:
9a:0e:64:32:87:aa:15:0c:74:7b:74:3d:a3:a7:5c:
f6:48:ac:c7:b4:ed:d4:dd:ef:a8:e6:2a:02:88:2f:
3f:75:06:9f:c5:ac:ef:94:93:e7:2d:1a:94:de:e2:
cd:d3:cf:d7:0a:b9:a9:a6:b3:bd:03:65:8a:99:32:
8a:b0:19:db:5e:16:85:31:97:47:c1:df:43:0e:51:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:8F:88:7A:67:97:74:7A:54:D3:DA:60:0A:8C:FA:98:10:E5:C9
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/GSmPiHpnl3R6VNPaYAqM-pgQ5ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
80:a9:e8:50:17:7b:25:f8:3b:62:de:27:45:fc:bb:d1:c1:fe:
a6:dd:ff:a0:da:23:89:f7:c5:36:20:2d:40:fa:1b:c3:4c:f3:
1f:28:4a:eb:e9:90:85:68:19:e0:f8:57:94:6f:98:4d:c2:7d:
c3:6c:a4:f7:ec:a5:da:20:36:22:62:e1:1d:69:9b:d5:ee:e5:
3f:fb:82:ed:e9:f6:73:e4:af:e2:4b:f5:89:8f:fc:52:92:98:
81:12:a0:c4:59:c7:66:fb:19:aa:13:5b:1c:79:62:50:69:d2:
80:09:aa:a8:8a:71:0b:b8:f1:28:c4:11:80:5a:c0:32:ce:bc:
2b:4d:2b:34:90:86:bc:8e:f1:5f:22:db:01:da:11:46:90:2a:
34:32:f5:f8:bc:70:73:0d:b2:7b:72:fc:80:8c:99:48:e3:19:
20:76:9b:25:75:f8:55:79:02:1b:24:85:4d:49:21:08:1c:ce:
c9:d4:6d:8c:98:87:70:bc:93:e3:cd:f9:72:7d:1c:6a:5b:ae:
3b:21:7f:78:28:f5:33:ee:e0:ec:51:35:f9:c4:85:48:7a:02:
fc:1c:43:c0:36:2f:6e:7a:80:72:ef:c8:b9:ec:0b:71:ab:f7:
c1:e4:f7:57:1f:4f:1e:36:f2:e5:eb:9e:e9:f0:f5:ac:94:16:
6e:c5:54:39
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXyWFRWfhgC3Xxb0w5ZYWZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAxMTcxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTI5OGY4ODdhNjc5Nzc0N2E1NGQzZGE2MDBhOGNmYTk4MTBlNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kUFs1fLoRjbocCFKKnF8aP8DXR0
JIN1UNK/jBLVP1Np1xLY1KeplnQAqTvBqGCPBDQI7klE3ckqtH4qwjvINhDKvKIe
ZaR28Go9FHlp9df7GOdonP4KR2VqKAYOj8Oz6PXs38bnhqK9KUtDDvJEIPt5ieT5
sWleSfqG7ad7me/C+AgL6ROttTzJ7FN5idYhw1+zB2Mm+7m1jusPZj4PbmHL9YnP
HN0FIhVXPJJoPv1xhlOaDmQyh6oVDHR7dD2jp1z2SKzHtO3U3e+o5ioCiC8/dQaf
xazvlJPnLRqU3uLN08/XCrmpprO9A2WKmTKKsBnbXhaFMZdHwd9DDlH7ewIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBkpj4h6Z5d0elTT2mAKjPqYEOXJMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvR1NtUGlIcG5sM1I2Vk5QYVlBcU0tcGdRNWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAgKnoUBd7Jfg7Yt4nRfy70cH+
pt3/oNojiffFNiAtQPobw0zzHyhK6+mQhWgZ4PhXlG+YTcJ9w2yk9+yl2iA2ImLh
HWmb1e7lP/uC7en2c+Sv4kv1iY/8UpKYgRKgxFnHZvsZqhNbHHliUGnSgAmqqIpx
C7jxKMQRgFrAMs68K00rNJCGvI7xXyLbAdoRRpAqNDL1+Lxwcw2ye3L8gIyZSOMZ
IHabJXX4VXkCGySFTUkhCBzOydRtjJiHcLyT4835cn0caluuOyF/eCj1M+7g7FE1
+cSFSHoC/BxDwDYvbnqAcu/IuewLcav3weT3Vx9PHjby5eue6fD1rJQWbsVUOQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:10 2025 by rpki-client