Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RX1Jq0wsFZA8ZGsgZC8TzBaH0nA.roa
File: RX1Jq0wsFZA8ZGsgZC8TzBaH0nA.roa (raw, json)
Hash identifier: jjI2jzqkr1BbcPI3dCUCEfmohJR/GwuoN/5RJkMr+JI=
Subject key identifier: 45:7D:49:AB:4C:2C:15:90:3C:64:6B:20:64:2F:13:CC:16:87:D2:70
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F4EC6CEE459661FC07EA217F5FE38C54
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RX1Jq0wsFZA8ZGsgZC8TzBaH0nA.roa
Signing time: Wed 02 Apr 2025 05:14:49 +0000
ROA not before: Wed 02 Apr 2025 05:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f4:ec:6c:ee:45:96:61:fc:07:ea:21:7f:5f:e3:8c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 05:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457d49ab4c2c15903c646b20642f13cc1687d270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:82:1e:64:e7:06:36:e7:07:ce:0c:ce:fc:
55:03:79:20:09:69:21:b9:c3:39:67:6f:15:15:1d:
41:38:30:57:96:61:0a:8b:78:ee:ca:10:d4:ee:a0:
b6:4e:1a:f6:42:90:13:1d:62:11:24:86:43:7c:8b:
86:3c:3b:03:1e:b1:7a:ee:ef:2f:19:58:6c:8c:7c:
5f:ff:79:9b:f1:ee:52:2b:ca:08:bf:88:27:eb:26:
90:93:d5:b2:57:51:33:3f:48:27:ec:0b:08:57:e5:
12:2d:1e:6a:6c:ba:1a:ac:3f:cc:a9:a7:04:86:e1:
b7:be:21:a1:fd:da:52:a2:af:69:dc:ed:32:8c:60:
b2:bd:89:bc:bd:88:c6:91:ea:88:59:4c:51:2d:cc:
7a:d8:c2:aa:74:22:46:de:ab:c9:87:9d:a2:7e:78:
66:ed:e7:28:10:3f:cd:58:b3:6d:a9:d6:df:d6:84:
bd:d2:c4:73:9e:4f:87:48:32:fe:9b:97:07:4e:3b:
f6:9d:a8:92:80:00:12:29:6b:07:f8:6c:99:4d:c6:
6c:09:b9:f1:0b:4e:b4:a9:84:11:00:2e:59:f3:3c:
af:ad:d6:5c:3d:15:35:85:78:96:80:64:a3:cd:4c:
98:01:9e:d4:77:f1:74:0f:d5:f3:0e:25:72:e8:71:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:49:AB:4C:2C:15:90:3C:64:6B:20:64:2F:13:CC:16:87:D2:70
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RX1Jq0wsFZA8ZGsgZC8TzBaH0nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
30:a5:44:bf:2d:bf:c1:80:db:9a:35:58:53:ce:b7:e2:ae:65:
83:52:b9:09:9c:a9:d5:3f:72:85:0f:91:7e:dc:0b:56:aa:d8:
6b:2c:96:cb:90:dc:73:6a:66:79:4e:81:6c:4f:81:b3:d2:0d:
97:50:e2:2a:55:61:0b:93:cf:94:39:89:79:f0:96:b3:d8:76:
9c:11:f7:c8:81:4d:4f:aa:43:2a:17:38:2b:d4:db:17:ae:2c:
fa:f0:0b:51:5f:b6:60:41:ce:b1:27:18:1f:25:a1:e3:0e:d3:
c0:61:f1:39:c0:7a:35:3f:dd:26:09:cf:53:c4:78:0f:c7:f2:
a6:14:e3:1f:ca:af:e5:fa:a0:f5:a1:a6:9b:e8:de:48:04:a9:
b4:42:c4:06:6a:0a:f0:c9:57:de:27:46:a3:a8:ec:a5:40:59:
96:06:ba:97:47:52:3a:e9:12:a8:3b:3f:bf:e7:92:0a:a6:db:
e7:4e:d1:12:28:8a:71:c1:dd:b5:c1:c9:3a:41:98:3e:1b:d6:
a5:00:38:44:e9:02:4f:2e:17:d0:54:66:77:9f:21:db:2f:74:
2c:a2:5d:1e:05:c8:ef:c7:b6:ea:53:6d:d9:cc:59:cd:81:4c:
d4:20:bc:f9:df:91:c2:ef:52:6f:c0:7c:1c:5a:fa:77:c6:18:
71:21:42:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:06:02 2025 by rpki-client