Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/O9kjdHoUsefRZQ212CvZ284mXow.roa
File: O9kjdHoUsefRZQ212CvZ284mXow.roa (raw, json)
Hash identifier: f0kBfya4jcQTYda1qp8eNRIqhJt/yQnZwrHE3XXsedw=
Subject key identifier: 3B:D9:23:74:7A:14:B1:E7:D1:65:0D:B5:D8:2B:D9:DB:CE:26:5E:8C
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EC555366A65187E8E4BE305DCAC749EA
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/O9kjdHoUsefRZQ212CvZ284mXow.roa
Signing time: Mon 31 Mar 2025 13:12:49 +0000
ROA not before: Mon 31 Mar 2025 13:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:55:53:66:a6:51:87:e8:e4:be:30:5d:ca:c7:49:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 13:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bd923747a14b1e7d1650db5d82bd9dbce265e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:c7:fa:fe:40:a9:5e:8e:0f:85:0e:68:64:
d2:30:9a:8b:01:a8:32:08:74:d6:5c:1a:a8:5b:b0:
9a:37:5e:63:10:fe:94:3f:76:99:0e:44:01:d0:4d:
46:49:b3:aa:11:f7:84:70:c5:eb:a6:11:6b:76:23:
f2:da:21:64:2e:00:eb:3c:35:f2:ad:f8:b7:69:10:
d5:95:43:02:95:8e:6b:e9:6c:59:9a:7f:11:93:31:
7d:b2:92:8c:3e:ee:5b:d3:0c:ae:d1:a2:d7:f8:85:
10:dd:07:1d:a7:aa:65:60:79:b3:4e:78:72:88:66:
54:eb:ec:15:3a:27:78:b5:a8:f7:05:92:e2:6a:8d:
af:41:f1:f1:f2:b5:47:c2:64:2b:7c:75:13:63:ea:
1a:37:e4:2a:5c:16:fa:c3:21:80:a2:73:d4:9c:21:
1a:e8:fb:d5:5b:36:62:67:6d:85:d2:51:49:f3:71:
6c:b9:9d:9e:d8:a2:a3:85:94:99:9c:1d:35:b0:78:
66:55:a0:68:f4:8e:c6:ec:e8:1e:ae:ae:9c:2c:03:
07:d6:2e:e5:d8:6d:58:2f:6d:e1:3e:a6:9a:af:e0:
71:ab:dd:d8:60:b8:e9:90:cc:bd:2a:ac:c1:f3:0c:
1f:5b:b8:95:9b:40:13:8c:8a:d2:85:d5:c4:02:62:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:23:74:7A:14:B1:E7:D1:65:0D:B5:D8:2B:D9:DB:CE:26:5E:8C
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/O9kjdHoUsefRZQ212CvZ284mXow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
1e:0a:7a:e3:1f:2a:99:23:0d:10:b0:93:6b:79:e0:cd:29:64:
4b:b1:1d:c9:e8:11:50:8c:f9:8a:c9:e4:03:67:fe:83:86:ae:
48:20:3f:ca:fc:6d:3d:02:64:d5:40:32:5f:b4:94:fc:77:27:
a5:3b:23:bc:e9:51:87:9a:d4:8c:cd:1c:74:ed:3e:c9:d9:65:
6e:c3:cc:44:5d:22:49:94:74:72:b2:76:e5:1e:ea:80:d2:81:
c2:75:7a:0a:4a:09:31:e9:24:c0:41:f5:8c:05:5d:54:98:f8:
66:a3:17:97:ae:a1:ab:32:58:b0:7a:c3:3c:0b:6a:28:3c:93:
56:f9:82:df:b1:a9:79:70:6f:26:28:2c:32:be:29:10:88:3c:
a5:78:5f:13:c4:db:f6:4d:1e:ba:f5:92:33:b7:4a:6c:13:6f:
c7:f0:77:67:e6:e8:97:4d:43:f5:40:26:97:70:3b:60:73:8b:
3f:94:25:b4:a1:86:20:8d:f9:cf:89:48:6e:ac:a6:4e:ce:54:
90:dd:7e:40:7f:32:68:18:34:ce:2c:ed:30:ae:05:75:fa:ce:
20:b3:89:c8:49:6e:10:d2:44:7a:dc:46:df:25:3f:f6:4f:36:
5e:a1:15:28:f6:9d:36:8c:e2:33:fb:e5:26:31:a2:e3:67:f9:
97:4b:cb:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:52:51 2025 by rpki-client