Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/H3OgthfmC2SfGx6pA6n1PichaIU.roa
File: H3OgthfmC2SfGx6pA6n1PichaIU.roa (raw, json)
Hash identifier: CDj3o7jKZf4i6IqwQlWz6tWeK95gCp0mg4hpstn5XyA=
Subject key identifier: 1F:73:A0:B6:17:E6:0B:64:9F:1B:1E:A9:03:A9:F5:3E:27:21:68:85
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E24074A581498D5964E506599709EF44
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/H3OgthfmC2SfGx6pA6n1PichaIU.roa
Signing time: Sat 29 Mar 2025 14:13:49 +0000
ROA not before: Sat 29 Mar 2025 14:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e2:40:74:a5:81:49:8d:59:64:e5:06:59:97:09:ef:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 14:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f73a0b617e60b649f1b1ea903a9f53e27216885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:5b:af:c6:5e:c1:80:ed:e4:87:0b:36:56:
cf:e0:8d:1e:95:fa:34:cf:48:97:5f:d0:0f:9b:67:
9f:54:0f:2b:c9:5c:ca:84:e3:6d:13:3d:5a:25:7d:
12:c2:68:6c:da:a1:5f:cb:58:40:c4:a3:4e:99:98:
ab:0b:a2:ff:75:25:a4:10:f2:40:1e:ae:da:d8:f6:
bc:6b:c3:87:e9:a9:cc:ad:51:05:d2:8b:0b:d2:3a:
4f:17:2c:ab:34:57:7d:b7:c6:5c:6a:a0:cd:7e:9f:
fc:d6:f9:24:18:99:6b:25:98:80:57:47:55:1c:af:
3a:d9:24:ac:97:4a:fe:14:2f:19:31:3e:23:5d:f8:
3d:cc:b8:39:fb:8b:51:c3:2c:49:fc:7c:94:83:38:
3e:01:82:25:03:e5:bc:e3:43:2a:6c:be:9d:32:4d:
47:4d:58:67:a9:15:17:35:94:d2:66:8c:bd:61:23:
35:ca:7f:32:df:5c:10:9b:c5:60:c7:fb:f6:94:de:
97:b8:2d:36:6b:4e:6a:29:b5:cb:61:e7:84:12:f7:
81:4f:31:50:d3:54:7c:07:3b:c1:0b:6d:8f:a6:15:
35:7b:73:fa:84:75:67:28:3c:d4:0a:57:04:5f:f9:
0e:68:6d:2c:4f:10:b5:c0:5d:93:8f:67:01:45:01:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:73:A0:B6:17:E6:0B:64:9F:1B:1E:A9:03:A9:F5:3E:27:21:68:85
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/H3OgthfmC2SfGx6pA6n1PichaIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
5d:12:1c:b5:9a:85:1b:b2:7a:dc:25:e5:ae:fb:c5:c2:df:9a:
60:96:4a:68:cf:f6:d3:f4:c2:71:6c:ca:28:d0:73:de:95:ee:
84:f7:b8:82:cf:ca:ab:32:93:01:5d:9a:c7:4b:8c:7a:29:ce:
ed:5a:89:02:d9:b8:3e:bd:2c:0e:d9:21:b2:b2:ca:27:e3:21:
51:28:d1:47:e0:f6:0a:87:47:73:d3:1d:59:3e:d4:2d:c0:a1:
43:c3:a5:d2:af:7f:16:90:b7:0f:27:f3:72:5d:82:8e:3a:8b:
cf:2e:de:8b:1f:e0:ff:41:11:28:63:c2:2e:51:7c:39:a5:51:
64:8e:73:21:f0:20:7b:31:a4:90:30:47:8c:b1:09:c0:90:df:
a8:22:cc:24:17:0c:01:2d:a8:56:07:2f:bd:b5:78:61:18:7f:
7f:51:0c:eb:bd:87:87:be:a5:c8:e6:8f:c4:af:56:f2:66:7f:
18:43:94:ac:a1:df:47:96:7d:5b:46:17:39:3f:15:f6:23:7e:
09:07:34:0a:56:99:a0:07:a7:13:6d:09:10:ba:9a:9f:d3:ed:
1e:e0:e1:a1:46:5e:3e:28:68:65:a1:24:22:a4:a7:4e:1d:ad:
2f:7b:2f:08:81:83:27:c3:f9:6f:44:4b:7a:36:6e:0e:34:bd:
09:9b:9b:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:06:22 2025 by rpki-client