Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/PFgna913CDktUx49oI7rkKI9Rdc.roa
File: PFgna913CDktUx49oI7rkKI9Rdc.roa (raw, json)
Hash identifier: mnBc75neIv0nvI1SgvmDthPkcGAn8IztDj+IuwcwaLM=
Subject key identifier: 3C:58:27:6B:DD:77:08:39:2D:53:1E:3D:A0:8E:EB:90:A2:3D:45:D7
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195BDBDD6C61030C4EAF33B7F3076039086
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/PFgna913CDktUx49oI7rkKI9Rdc.roa
Signing time: Sat 22 Mar 2025 12:04:49 +0000
ROA not before: Sat 22 Mar 2025 12:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:bdbd:1169/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bd:bd:d6:c6:10:30:c4:ea:f3:3b:7f:30:76:03:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 22 12:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c58276bdd7708392d531e3da08eeb90a23d45d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:69:43:20:9a:bd:d4:8c:6e:28:ce:fc:29:
74:ae:d8:fd:5d:be:54:3a:12:46:c3:d0:62:d9:5d:
38:a2:d5:14:c5:5d:0a:b4:73:45:0c:ba:03:fe:54:
cd:d7:96:0b:e3:9f:e1:ff:9b:f9:be:47:41:0c:56:
b5:9b:b6:99:bd:b0:a5:21:fe:98:17:49:fd:17:f3:
d4:e0:5b:89:94:67:4c:77:b6:cc:26:9b:35:44:6a:
7d:46:e0:82:49:15:c2:ef:7a:e0:04:48:71:29:78:
0a:a2:a9:57:6a:bc:0f:7b:b0:5c:04:be:5d:92:98:
bb:9f:42:6e:6b:a0:63:f9:ed:46:b7:60:8c:4e:22:
54:68:52:14:e4:55:c5:4f:e7:b5:36:48:5c:b5:56:
26:a0:f8:ef:f5:d2:f2:e8:34:ea:89:f9:a8:c0:8d:
e7:20:08:87:f0:ac:c7:9a:39:b1:17:96:4b:cf:59:
49:81:26:9f:b0:f2:11:66:7b:b2:ad:fe:1a:6d:99:
4e:1d:c0:69:d9:7b:a1:63:3e:25:2d:ce:90:90:ee:
af:85:48:c9:cd:d0:9f:12:4d:71:f6:2e:59:90:5f:
a7:72:46:d8:77:68:b6:b7:6e:d5:24:2a:4e:01:7d:
19:75:a9:b9:11:bf:5c:b9:d1:d5:e2:2c:b3:af:a4:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:58:27:6B:DD:77:08:39:2D:53:1E:3D:A0:8E:EB:90:A2:3D:45:D7
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/PFgna913CDktUx49oI7rkKI9Rdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:bdbd:1169/128
Signature Algorithm: sha256WithRSAEncryption
71:2c:27:15:db:b4:55:14:79:24:75:a3:29:15:c8:ee:7a:3c:
8f:71:56:b1:6c:a6:65:80:aa:b8:12:83:2d:94:85:16:89:6a:
27:2e:a9:22:03:59:ad:9b:80:79:5c:19:1e:41:34:0e:e5:ef:
f1:71:67:1b:c3:70:34:07:a3:75:38:b9:fc:30:d2:32:95:ef:
41:a6:52:e7:76:f2:b0:9d:9f:b0:3a:60:fd:18:e4:ed:a5:c9:
bc:73:5e:60:e3:d7:6f:f1:66:bd:0a:d0:9b:23:05:16:3a:1e:
36:9c:09:1d:7c:05:22:07:60:ed:75:f9:ff:29:46:e2:c5:9d:
2f:93:b8:b6:4d:b0:b8:8d:65:e4:95:f2:df:ac:5a:5b:df:65:
27:68:10:b5:3c:ac:30:5e:29:23:74:ae:78:92:99:e6:ca:16:
55:e6:6c:c6:54:e5:ec:ae:52:a5:94:be:99:8b:bb:d9:5f:ff:
aa:09:4b:74:a6:02:b2:62:39:a4:d6:c2:b0:64:d7:0e:04:ac:
ee:95:49:fd:d7:26:7e:68:17:0b:a6:ad:d3:ef:83:7c:c4:37:
e5:21:f9:41:fb:75:99:78:d4:cd:76:14:9c:2d:07:35:f7:91:
d8:1e:92:20:d2:09:00:15:0a:5d:2e:98:8b:20:6f:e6:70:81:
5d:83:2f:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:16:49 2025 by rpki-client