Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Mn-5psjPSJqvm8zeQqA5Z5PfaQQ.roa
File: Mn-5psjPSJqvm8zeQqA5Z5PfaQQ.roa (raw, json)
Hash identifier: N56U6YjkiiozRQX2XEq7EqLZXjYWMHj4+/ryIkW2nKg=
Subject key identifier: 32:7F:B9:A6:C8:CF:48:9A:AF:9B:CC:DE:42:A0:39:67:93:DF:69:04
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EF1F70403204E287EF5E910D9D44B24E
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Mn-5psjPSJqvm8zeQqA5Z5PfaQQ.roa
Signing time: Tue 01 Apr 2025 02:12:49 +0000
ROA not before: Tue 01 Apr 2025 02:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ef:1f:70:40:32:04:e2:87:ef:5e:91:0d:9d:44:b2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 02:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=327fb9a6c8cf489aaf9bccde42a0396793df6904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:c7:b4:0b:7f:81:76:82:04:dd:9a:e6:33:
37:5d:d5:fe:95:1d:34:3c:25:c3:92:0b:41:37:85:
cf:bd:1b:85:4a:0e:0b:57:bc:df:6b:64:fe:6f:8d:
8b:a6:47:9b:96:59:f9:6c:73:c6:64:06:42:63:af:
95:6b:3c:22:d7:04:2c:cb:ca:45:bb:dc:55:97:55:
20:fb:b0:c6:c2:59:8e:8e:c3:e9:8e:e2:21:92:69:
4f:c0:ec:9d:9a:1f:1c:dd:4f:8c:5c:22:37:cb:5f:
03:98:bc:01:48:b8:9c:89:74:0d:6a:63:f6:25:6e:
1d:cc:36:45:02:69:7d:e6:41:3f:65:25:96:ac:0f:
46:0d:dc:75:17:23:70:81:95:9c:f6:d6:20:01:32:
aa:ae:e1:a8:d9:47:79:72:42:9b:8f:d9:6e:71:35:
49:59:0a:9d:35:17:54:be:2e:fd:3e:2a:3e:33:81:
b6:cb:ca:67:b1:5f:57:b1:1b:dd:28:ca:52:05:5d:
c1:9a:72:1b:91:ce:bc:e4:6e:03:ae:23:3c:8a:bd:
c4:11:97:f8:b1:28:55:e9:98:31:68:2b:36:a9:67:
13:8d:b7:50:05:2c:1f:37:18:a1:75:1e:87:2f:74:
35:97:b3:2f:af:15:33:ba:32:d6:d6:ce:f8:32:fe:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:B9:A6:C8:CF:48:9A:AF:9B:CC:DE:42:A0:39:67:93:DF:69:04
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Mn-5psjPSJqvm8zeQqA5Z5PfaQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
08:36:c1:41:d8:83:46:ab:40:bf:e3:60:43:23:00:70:67:50:
e1:38:2f:18:e2:48:77:c3:e4:87:b1:bf:a5:4b:60:c9:9a:73:
82:94:79:0e:ee:c6:8c:94:70:e1:94:82:e2:b3:54:e7:96:a4:
45:d5:52:0d:ef:7d:9c:2d:8d:8d:6c:d0:fc:ae:1b:dd:c7:e2:
31:24:39:5e:42:5d:fa:95:ce:35:ad:fe:91:49:8d:17:33:7a:
0f:bc:cc:89:3e:44:b1:61:27:41:39:72:ca:6a:d7:10:67:f3:
72:20:7f:2a:e4:86:83:4b:fb:05:5e:75:37:52:63:fe:15:4f:
f2:f9:df:9f:0b:e9:79:e9:59:69:2c:99:fd:d0:cb:53:98:95:
fd:61:64:d3:68:6f:25:96:d3:75:a5:b9:70:b1:24:1f:73:83:
ac:b7:d4:c5:5d:c8:ea:78:b0:60:81:f7:94:39:9e:be:2e:e9:
04:27:eb:79:ec:e8:24:d0:f8:bf:61:fb:48:97:d7:ce:60:c6:
d0:3b:48:39:71:f0:ca:3c:31:77:15:51:66:2c:c0:df:cf:bf:
70:ba:be:31:c5:51:a0:ee:53:1d:21:73:ea:e2:5b:01:79:5f:
e7:b8:74:15:02:2a:9c:7d:62:a5:88:84:83:a6:1e:de:13:12:
7f:86:97:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:12:46 2025 by rpki-client