Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RpfJdGYhjw2jRNNMwePXumNFGW4.roa
File: RpfJdGYhjw2jRNNMwePXumNFGW4.roa (raw, json)
Hash identifier: /5C+ZLnnnME4Mln0uXxhrycDxvFLCy0nb6g7N/1WcCM=
Subject key identifier: 46:97:C9:74:66:21:8F:0D:A3:44:D3:4C:C1:E3:D7:BA:63:45:19:6E
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195B03924EB06983925190A6DF618E640B8
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RpfJdGYhjw2jRNNMwePXumNFGW4.roa
Signing time: Wed 19 Mar 2025 21:04:49 +0000
ROA not before: Wed 19 Mar 2025 21:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:b038:69c4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b0:39:24:eb:06:98:39:25:19:0a:6d:f6:18:e6:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 19 21:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4697c97466218f0da344d34cc1e3d7ba6345196e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:bd:5d:12:be:c7:63:02:0a:31:2b:61:cb:
a1:22:6e:07:4b:c3:f1:ee:9c:84:ad:e7:1f:01:9e:
02:a5:9b:09:01:bf:96:a0:fd:84:52:a7:b2:4b:e5:
2a:2c:f9:c7:82:6b:45:74:c4:79:9a:ef:b7:5a:bb:
16:7d:94:c4:7c:df:b1:f6:eb:f6:c4:98:be:ed:79:
2d:70:bd:a2:8d:f8:14:e5:d2:9d:b5:e8:82:98:3f:
c3:d3:e6:f8:d2:7a:6f:94:a8:1b:db:00:74:fc:e2:
c3:ae:fb:68:9e:66:a6:ff:bf:d2:63:50:e6:b4:c3:
98:36:3b:d3:c9:c3:11:02:4c:4e:85:ce:c1:9f:b7:
2d:2b:a6:82:30:ea:c8:d0:2a:04:77:92:7b:48:02:
57:1f:2a:90:b6:4c:9d:1f:21:2d:8a:10:72:51:59:
2c:e3:28:c5:39:08:f4:20:d6:b1:a7:b9:b5:0f:6f:
13:d9:0f:77:2d:60:a7:07:72:08:94:f2:17:f2:d6:
bc:25:ce:07:d9:9c:ce:ba:39:82:ad:28:74:47:8e:
ec:a8:6c:e0:83:44:09:e9:f3:08:91:51:a5:a4:5a:
04:8c:de:d8:7c:a8:46:29:f4:9a:bc:4d:20:56:38:
2c:23:96:7a:1b:23:d7:3e:bc:18:d4:ad:48:c4:9f:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:C9:74:66:21:8F:0D:A3:44:D3:4C:C1:E3:D7:BA:63:45:19:6E
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/RpfJdGYhjw2jRNNMwePXumNFGW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:b038:69c4/128
Signature Algorithm: sha256WithRSAEncryption
60:1b:dd:58:de:87:56:1d:eb:f1:12:99:d9:d3:cc:cb:5b:96:
5f:97:77:a6:35:b2:0b:19:a7:35:14:77:f0:2e:71:1e:48:fc:
16:a8:0f:d3:fa:28:9b:65:7c:68:34:14:66:a4:17:bb:e5:af:
3b:c7:de:fa:5b:b5:78:08:07:b9:44:17:ef:03:d4:71:39:ef:
c6:fb:17:80:ee:c0:61:e8:ee:fd:4f:4a:35:ef:44:42:7e:1d:
aa:a0:13:98:6e:97:e4:8a:ee:40:a9:47:2e:8a:4d:6a:d5:67:
44:b2:3e:55:2c:cb:5d:35:02:1b:16:89:4f:89:d9:b8:b5:3f:
a1:6d:6c:23:b3:3d:2b:b3:89:43:6f:8d:d4:63:f4:91:66:ef:
85:38:6e:8c:9b:81:95:60:71:8c:ad:c9:92:ad:e1:0f:06:d2:
e8:97:be:02:7c:31:4e:8c:55:52:4e:2d:2c:4d:30:0d:c5:9c:
86:f8:80:b2:a6:35:bd:b8:03:e0:61:eb:69:26:ea:3d:b5:63:
ea:4d:8b:6f:4b:0b:f6:d6:bc:d3:cc:aa:4c:bb:e3:e6:cb:17:
e5:37:07:6e:0e:fc:b7:a7:3c:cd:35:be:c1:a7:43:bf:c3:d1:
48:b6:e4:7e:29:17:be:9e:b2:d7:c0:e7:02:43:92:1f:2c:c6:
17:d9:78:1c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWwOSTrBpg5JRkKbfYY5kC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzE5MjEwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njk3Yzk3NDY2MjE4ZjBkYTM0NGQzNGNjMWUzZDdiYTYzNDUxOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZi9XRK+x2MCCjErYcuhIm4HS8Px
7pyErecfAZ4CpZsJAb+WoP2EUqeyS+UqLPnHgmtFdMR5mu+3WrsWfZTEfN+x9uv2
xJi+7XktcL2ijfgU5dKdteiCmD/D0+b40npvlKgb2wB0/OLDrvtonmam/7/SY1Dm
tMOYNjvTycMRAkxOhc7Bn7ctK6aCMOrI0CoEd5J7SAJXHyqQtkydHyEtihByUVks
4yjFOQj0INaxp7m1D28T2Q93LWCnB3IIlPIX8ta8Jc4H2ZzOujmCrSh0R47sqGzg
g0QJ6fMIkVGlpFoEjN7YfKhGKfSavE0gVjgsI5Z6GyPXPrwY1K1IxJ876QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEaXyXRmIY8No0TTTMHj17pjRRluMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvUnBmSmRHWWhqdzJqUk5OTXdlUFh1bU5GR1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVsDhpxDANBgkqhkiG9w0BAQsFAAOCAQEAYBvdWN6HVh3r8RKZ2dPMy1uW
X5d3pjWyCxmnNRR38C5xHkj8FqgP0/oom2V8aDQUZqQXu+WvO8fe+lu1eAgHuUQX
7wPUcTnvxvsXgO7AYeju/U9KNe9EQn4dqqATmG6X5IruQKlHLopNatVnRLI+VSzL
XTUCGxaJT4nZuLU/oW1sI7M9K7OJQ2+N1GP0kWbvhThujJuBlWBxjK3Jkq3hDwbS
6Je+AnwxToxVUk4tLE0wDcWchviAsqY1vbgD4GHraSbqPbVj6k2Lb0sL9ta808yq
TLvj5ssX5TcHbg78t6c8zTW+wadDv8PRSLbkfikXvp6y18DnAkOSHyzGF9l4HA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:02 2025 by rpki-client