Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Q_4SP8hP47sBsK_BIrCWnGrt_fI.roa
File: Q_4SP8hP47sBsK_BIrCWnGrt_fI.roa (raw, json)
Hash identifier: ix3nQJcykbU440e3EpjVCPPvdPOM/NO9QLiw5I4Obf0=
Subject key identifier: 43:FE:12:3F:C8:4F:E3:BB:01:B0:AF:C1:22:B0:96:9C:6A:ED:FD:F2
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195ECFDC8A35B3814DF4ED1920114188979
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Q_4SP8hP47sBsK_BIrCWnGrt_fI.roa
Signing time: Mon 31 Mar 2025 16:16:49 +0000
ROA not before: Mon 31 Mar 2025 16:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:fd:c8:a3:5b:38:14:df:4e:d1:92:01:14:18:89:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 16:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43fe123fc84fe3bb01b0afc122b0969c6aedfdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:72:e3:0f:f9:c4:20:fd:ac:90:7d:a9:e7:
e1:26:89:8c:0e:f2:84:e0:ea:7c:77:5f:c2:4a:72:
bd:1a:9d:c0:cf:e8:10:84:23:a8:fb:9b:db:9c:bf:
84:a8:6f:3c:89:c7:3b:1f:60:30:3a:b8:c6:3d:c0:
13:71:3a:52:7a:b9:60:e3:83:67:71:2b:59:ff:54:
b0:0c:b8:4a:06:23:50:9b:30:86:c5:20:08:9a:9f:
31:85:96:2c:d4:3f:9d:49:9f:9a:14:b7:de:01:2c:
3f:29:7d:c3:77:f7:5f:e2:fe:76:e6:93:ab:08:4e:
1e:70:ed:a0:5a:f8:bb:11:c6:29:e1:f6:12:c0:75:
c5:0c:df:8b:d1:b2:2d:52:f4:c5:bb:7c:3c:55:e9:
c2:4d:45:5d:d9:32:d2:c2:81:f1:72:e4:62:86:c6:
4a:b5:0f:7e:7e:a6:29:7d:e5:af:ce:f5:4f:5a:6d:
18:b3:9c:b2:ce:17:19:9b:4c:22:de:ab:f0:7b:8e:
d1:66:42:9b:28:b6:58:e4:8b:cf:a7:c2:74:1f:78:
65:8a:e6:53:b0:55:42:24:47:59:1a:ad:f5:67:fe:
3f:97:ea:be:c2:c0:4e:47:2f:06:2f:a9:5b:c6:df:
f0:97:11:30:bf:cb:6a:3a:ff:f6:11:09:43:19:79:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:12:3F:C8:4F:E3:BB:01:B0:AF:C1:22:B0:96:9C:6A:ED:FD:F2
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Q_4SP8hP47sBsK_BIrCWnGrt_fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
96:35:52:23:ae:cb:71:24:b1:12:81:3b:c1:22:23:b5:88:e7:
59:ef:8a:3d:3f:87:5f:37:7a:62:1b:11:6b:c6:28:ec:56:23:
ec:fc:9e:8b:d7:1d:01:21:5d:fe:31:bf:29:de:7b:ea:a8:73:
f1:0c:12:05:17:95:28:fa:58:d0:0d:52:f3:97:3d:16:96:75:
9c:9b:4f:27:df:ad:48:9a:e5:de:9f:1e:31:cb:6c:68:47:49:
dc:4f:42:e7:fc:89:06:25:11:5a:5d:24:68:71:9c:b5:6e:25:
63:c4:d5:f2:97:8a:d6:18:2a:c9:bf:2a:65:62:e8:5d:d8:e6:
9a:60:bf:dd:da:e4:f2:a9:64:21:9c:35:46:47:10:01:14:46:
88:4b:fe:52:2c:f4:e4:3a:e4:2c:ad:14:82:e0:e8:57:ac:55:
1e:a2:e5:0e:ef:58:9e:8c:21:02:0f:a1:2a:06:a3:6f:9f:60:
7f:d6:81:24:46:16:47:dc:1b:f8:97:93:55:f4:d7:1a:eb:b8:
39:9d:01:82:5e:76:79:d2:75:8c:87:75:96:cf:4b:fc:88:0b:
a3:26:16:dd:71:84:95:f0:57:6c:60:fa:45:33:b9:49:f6:a3:
c6:70:31:15:8e:58:a4:82:1a:16:9e:24:c1:43:3a:2e:54:fe:
fc:df:8f:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:38 2025 by rpki-client