Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Rin4WWMvZRxLl_eptW5XSCvfLNI.roa
File: Rin4WWMvZRxLl_eptW5XSCvfLNI.roa (raw, json)
Hash identifier: XJO+/UAqDCseo/SxP4gfRkiMij8jDBc4J2t0oDh04pA=
Subject key identifier: 46:29:F8:59:63:2F:65:1C:4B:97:F7:A9:B5:6E:57:48:2B:DF:2C:D2
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F10EBC984E91E2736AF78173507307C0
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Rin4WWMvZRxLl_eptW5XSCvfLNI.roa
Signing time: Tue 01 Apr 2025 11:13:49 +0000
ROA not before: Tue 01 Apr 2025 11:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:0e:bc:98:4e:91:e2:73:6a:f7:81:73:50:73:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 1 11:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4629f859632f651c4b97f7a9b56e57482bdf2cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:a1:a1:dc:86:cc:36:8d:8b:bf:47:19:29:
26:74:b9:35:35:1b:e7:05:39:75:4c:55:22:ef:62:
32:20:e1:56:0d:f7:48:d4:f6:60:20:af:7e:f5:1d:
18:26:1a:d2:8f:54:58:b0:f3:f3:54:be:b9:f6:8b:
d7:1f:cc:2c:93:60:bc:68:8b:e3:3b:fa:a9:cf:c1:
78:34:78:1f:5c:53:5c:61:e3:af:cb:6e:f8:4c:25:
7c:20:65:38:2d:5e:07:a8:f0:15:74:9f:0f:2e:b0:
e2:2e:52:a1:63:5a:11:3b:81:e7:80:dc:23:81:f5:
8f:8d:38:3b:fc:37:52:ef:a2:1b:f9:3e:eb:a7:f9:
16:e1:27:ee:d5:8a:ec:c4:1b:3b:c1:16:81:5f:bc:
a9:1e:62:50:ae:4e:c1:4b:5d:03:02:80:17:42:63:
21:d4:81:2e:6a:7b:36:c4:1e:15:33:57:17:86:aa:
02:e5:08:7c:02:93:e2:90:39:da:1c:4c:37:b4:3c:
bd:57:49:e6:50:be:8e:90:1d:7e:a6:2f:22:80:47:
20:c4:2d:55:4c:23:5f:75:aa:d4:44:17:b4:b0:18:
0c:85:3b:7b:36:18:30:44:77:34:09:cc:29:b7:fc:
48:72:1b:d5:11:38:bb:89:9c:40:ab:a8:fc:2c:c7:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:F8:59:63:2F:65:1C:4B:97:F7:A9:B5:6E:57:48:2B:DF:2C:D2
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/Rin4WWMvZRxLl_eptW5XSCvfLNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
60:b2:0a:e4:75:df:3a:cc:cf:ad:75:b6:b7:30:83:2e:4b:b9:
48:26:a5:25:8a:9f:36:0c:98:1d:b8:fc:d1:75:b0:b9:36:2d:
c2:b0:1f:c6:2a:cb:8d:b5:a9:b9:24:73:10:5e:52:41:6d:84:
c1:d3:23:b1:07:13:61:eb:b0:6f:77:92:83:88:bc:44:c0:ca:
ff:a6:1c:21:00:f8:06:80:e6:c2:20:ab:06:e1:86:e9:4d:47:
fc:89:09:51:75:79:44:42:58:1b:08:14:55:fe:d1:33:95:32:
60:8e:78:30:ba:3e:f8:71:06:2f:68:ad:81:99:3e:58:66:34:
47:0e:ba:04:32:1d:e8:67:52:47:8e:b0:72:9b:46:60:5f:92:
af:f5:28:9c:7e:67:d2:6c:03:3e:21:72:5e:1b:b3:57:bc:f8:
1f:b7:5c:0a:34:72:58:25:8d:46:2d:53:b7:bf:ad:c6:d5:56:
99:69:3d:9f:71:fe:53:5a:ef:18:9e:ed:2b:79:76:e0:53:6a:
7c:30:fa:7e:6e:e7:3f:a6:c8:fb:a4:88:41:e8:82:cd:af:99:
b0:57:63:a2:f6:ce:0c:2e:8a:e3:c1:53:bb:08:65:e5:62:71:
e6:c6:f8:75:99:2a:88:ad:fa:5f:3e:56:48:a2:26:a4:99:41:
2c:f0:6b:69
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXxDryYTpHic2r3gXNQcwfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAxMTExMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjI5Zjg1OTYzMmY2NTFjNGI5N2Y3YTliNTZlNTc0ODJiZGYyY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubuhodyGzDaNi79HGSkmdLk1NRvn
BTl1TFUi72IyIOFWDfdI1PZgIK9+9R0YJhrSj1RYsPPzVL659ovXH8wsk2C8aIvj
O/qpz8F4NHgfXFNcYeOvy274TCV8IGU4LV4HqPAVdJ8PLrDiLlKhY1oRO4HngNwj
gfWPjTg7/DdS76Ib+T7rp/kW4Sfu1YrsxBs7wRaBX7ypHmJQrk7BS10DAoAXQmMh
1IEuans2xB4VM1cXhqoC5Qh8ApPikDnaHEw3tDy9V0nmUL6OkB1+pi8igEcgxC1V
TCNfdarURBe0sBgMhTt7NhgwRHc0Ccwpt/xIchvVETi7iZxAq6j8LMdyYwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEYp+FljL2UcS5f3qbVuV0gr3yzSMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvUmluNFdXTXZaUnhMbF9lcHRXNVhTQ3ZmTE5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAYLIK5HXfOszPrXW2tzCDLku5
SCalJYqfNgyYHbj80XWwuTYtwrAfxirLjbWpuSRzEF5SQW2EwdMjsQcTYeuwb3eS
g4i8RMDK/6YcIQD4BoDmwiCrBuGG6U1H/IkJUXV5REJYGwgUVf7RM5UyYI54MLo+
+HEGL2itgZk+WGY0Rw66BDId6GdSR46wcptGYF+Sr/UonH5n0mwDPiFyXhuzV7z4
H7dcCjRyWCWNRi1Tt7+txtVWmWk9n3H+U1rvGJ7tK3l24FNqfDD6fm7nP6bI+6SI
QeiCza+ZsFdjovbODC6K48FTuwhl5WJx5sb4dZkqiK36Xz5WSKImpJlBLPBraQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:39:15 2025 by rpki-client