Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/IqiF8ZdL-B_bK4uKBW2LgRWYYhc.roa
File: IqiF8ZdL-B_bK4uKBW2LgRWYYhc.roa (raw, json)
Hash identifier: PkvqcV4WK6pA5KMGRWU0na2Zgcj1J7V3AsIEoDNBjjc=
Subject key identifier: 22:A8:85:F1:97:4B:F8:1F:DB:2B:8B:8A:05:6D:8B:81:15:98:62:17
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E3F9BDF97251C4F7CDD6A1118A964399
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/IqiF8ZdL-B_bK4uKBW2LgRWYYhc.roa
Signing time: Sat 29 Mar 2025 22:15:49 +0000
ROA not before: Sat 29 Mar 2025 22:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e3:f9:bd:f9:72:51:c4:f7:cd:d6:a1:11:8a:96:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 29 22:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22a885f1974bf81fdb2b8b8a056d8b8115986217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:e4:06:75:1e:d2:c4:52:78:62:ef:c5:4f:
9d:35:44:43:18:52:3e:9a:16:3c:01:0b:76:e7:7e:
81:86:df:00:66:53:31:78:f5:b1:fc:a6:85:09:b1:
a1:f8:d4:9f:12:49:a7:78:04:5b:55:d0:e3:9e:8a:
de:a5:b0:c2:ff:a0:cc:65:35:68:da:fe:bf:01:70:
6b:a0:04:38:65:da:f2:cc:30:32:70:9c:7d:ba:cc:
8f:bc:5a:8a:11:19:ec:71:93:24:a2:53:0a:a2:d1:
f7:32:dd:85:de:9e:26:ef:ae:cf:b6:77:66:fa:1c:
7a:fd:7f:4a:bb:5a:96:82:94:1d:27:3e:7d:9c:ae:
46:52:fe:b5:80:25:24:d3:45:94:1d:6c:57:c3:25:
ec:9a:58:48:aa:4a:c1:97:25:b2:8a:d2:4e:aa:dd:
c7:59:00:49:6f:e9:ee:d7:1b:c1:2f:a5:00:d0:49:
54:9d:ce:ef:ce:40:27:e1:22:93:c5:8f:19:9b:23:
9e:71:dd:98:4b:fc:74:8b:01:5a:31:73:b5:27:d0:
58:af:98:f0:30:b2:43:33:bc:ba:98:db:2e:c6:65:
fa:f6:da:05:ef:9c:e9:a9:dc:70:29:b0:34:d2:0d:
81:5a:cf:1e:11:0c:a7:f4:8d:c4:0a:1d:f6:07:6b:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:85:F1:97:4B:F8:1F:DB:2B:8B:8A:05:6D:8B:81:15:98:62:17
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/IqiF8ZdL-B_bK4uKBW2LgRWYYhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
6f:d2:49:85:f3:bf:7b:53:22:c1:3f:cf:9f:e4:28:a8:ea:47:
f2:1d:fa:ea:f6:d4:a2:26:8c:3d:bc:26:e2:b1:9e:1b:ce:2c:
a3:e9:4b:d1:7d:51:cc:e6:ff:6e:01:35:73:5d:57:34:a0:05:
54:30:8c:dc:14:c1:7c:8f:84:c2:66:2d:4e:8b:ac:ec:da:78:
b6:33:f7:58:e7:14:e5:3d:cc:a5:c2:9f:0a:b5:d4:0a:ca:60:
cd:25:dd:41:6b:28:0b:c3:39:a1:f8:9b:d5:c1:3b:92:b3:61:
72:64:f9:f9:7b:6a:ee:44:36:6f:bf:87:e0:08:f3:c4:9b:93:
8a:20:e2:f0:6f:3f:3d:65:a6:86:fc:a4:87:94:10:02:74:e0:
78:98:55:fa:d9:cd:77:4b:0d:75:27:d5:a6:92:a0:76:f2:0a:
4f:03:80:6f:dc:35:98:e7:99:59:97:36:10:7a:7d:b4:73:71:
35:d2:52:80:13:12:72:bf:54:6b:de:e7:08:50:27:91:d5:0b:
24:b4:a8:d7:5a:fd:11:e1:2d:0e:89:23:7a:96:e6:d0:96:de:
b6:a5:8f:4a:59:7b:f1:6c:ed:7d:48:13:0a:18:7e:30:03:82:
7d:b3:2d:c1:6d:a2:1a:4c:52:61:35:44:b7:6a:64:c1:b7:40:
d2:c2:b2:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:00:18 2025 by rpki-client