Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/HhkToPfYvGlROVyWkhwbgx2UoC4.roa
File: HhkToPfYvGlROVyWkhwbgx2UoC4.roa (raw, json)
Hash identifier: pfd0OS1Bi1NADtLSkZDQ1WJdlMp1amxtHL+fBaNuXMo=
Subject key identifier: 1E:19:13:A0:F7:D8:BC:69:51:39:5C:96:92:1C:1B:83:1D:94:A0:2E
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0196004B1CB38832B0E870313C31FC6B83B3
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/HhkToPfYvGlROVyWkhwbgx2UoC4.roa
Signing time: Fri 04 Apr 2025 10:14:04 +0000
ROA not before: Fri 04 Apr 2025 10:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:4b:1c:b3:88:32:b0:e8:70:31:3c:31:fc:6b:83:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 4 10:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e1913a0f7d8bc6951395c96921c1b831d94a02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:ed:b5:09:9e:b9:29:78:d2:34:88:76:fc:
1b:64:b2:17:b5:74:bb:1d:59:a6:ff:6c:17:ff:f2:
ec:13:67:ae:cc:1e:e9:de:fd:98:52:46:a4:8e:01:
6f:70:66:a9:a1:5c:86:42:87:17:b1:31:a3:7c:e8:
ce:d0:7f:db:b0:38:12:ad:04:67:6e:86:95:45:5e:
6d:78:f6:cf:8e:86:cc:df:3d:56:1f:ce:0b:be:56:
b7:b1:48:e0:e1:e5:54:fc:a1:7d:96:c8:79:2a:ac:
4e:dd:27:86:63:04:5c:50:16:d4:c7:71:79:17:aa:
45:ca:22:cd:2d:96:ae:8a:7e:3f:a5:06:02:98:d5:
f8:87:a1:fe:73:69:b4:82:55:7b:d6:1a:53:ec:d2:
c8:71:2b:ac:d8:ef:03:29:fd:a0:75:db:89:47:b3:
f7:81:cc:81:af:cf:5e:90:c5:09:eb:20:0f:3b:5c:
35:fb:39:e5:1b:6e:53:eb:ff:c6:5f:c8:21:33:7a:
d4:95:ac:ef:de:8d:e5:75:d7:ba:84:fa:2b:46:28:
7c:e8:c7:76:ea:a0:f6:8e:1a:14:18:b4:e8:88:39:
c6:92:12:b7:df:90:cc:3a:bb:b9:d6:70:1c:4a:92:
8f:0b:db:53:83:3b:9b:51:b0:47:7d:1d:d9:83:09:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:13:A0:F7:D8:BC:69:51:39:5C:96:92:1C:1B:83:1D:94:A0:2E
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/HhkToPfYvGlROVyWkhwbgx2UoC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
59:2f:4a:f3:d8:d4:0c:b5:7c:f8:7b:7f:94:45:66:2b:16:33:
54:b4:dc:8a:b5:c8:cd:ab:02:d7:e6:db:9f:df:b1:54:81:16:
1c:5c:ba:63:32:0d:62:a0:51:f1:3a:0b:41:73:f7:74:87:88:
72:7a:ab:66:1d:c9:3b:f7:99:94:eb:8a:e9:dc:f7:6e:99:18:
95:d0:ce:a2:11:88:ca:d4:2d:f3:a9:f9:9b:a1:5f:bc:c3:fa:
66:c0:82:ce:a6:1c:34:be:e3:a7:3d:31:2a:14:24:bb:09:b1:
7c:ac:0b:e9:7d:40:b8:2f:fe:39:b0:ee:02:5a:b5:73:1e:d5:
23:ce:66:e7:aa:33:03:4b:ef:0b:cd:79:88:dd:1c:0f:54:89:
81:ec:da:33:eb:f5:0f:99:59:49:54:0b:d5:c1:eb:95:4d:02:
22:e3:1b:f1:09:f2:f0:12:db:0a:c4:4e:51:b5:a4:a5:04:2a:
6f:1c:d6:c5:46:1b:57:14:19:df:c7:54:fe:bc:17:b8:98:51:
18:5e:52:a0:b4:73:93:dc:d7:16:f7:46:53:1c:dd:2a:5f:b3:
bb:69:da:1d:6d:a5:0b:7d:f9:cb:e8:70:a3:7e:40:11:6b:f2:
16:bc:88:7f:f5:19:5d:18:41:7b:22:d5:51:d8:93:e4:ca:ee:
42:3b:ea:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:27:27 2025 by rpki-client