Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/UcStDv2XqMKAF2yjex9ORkl_49o.roa
File: UcStDv2XqMKAF2yjex9ORkl_49o.roa (raw, json)
Hash identifier: z6PMeur3C+qnVMqQ+ItnKzx3INaBiIjSRYGfIhUS3dA=
Subject key identifier: 51:C4:AD:0E:FD:97:A8:C2:80:17:6C:A3:7B:1F:4E:46:49:7F:E3:DA
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E7698F9177A252AA44A04E2274CDE1E7
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/UcStDv2XqMKAF2yjex9ORkl_49o.roa
Signing time: Sun 30 Mar 2025 14:16:49 +0000
ROA not before: Sun 30 Mar 2025 14:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e7:69:8f:91:77:a2:52:aa:44:a0:4e:22:74:cd:e1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 14:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51c4ad0efd97a8c280176ca37b1f4e46497fe3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:57:b1:ff:f0:ba:a6:ff:6a:61:5e:de:09:
b3:e3:60:77:99:c0:e7:e5:64:d8:7d:31:95:c3:b0:
ad:94:53:70:c6:49:ee:29:26:17:d5:1f:12:53:b2:
b2:81:1f:cf:00:7e:b2:35:a2:4e:4e:70:13:b5:c3:
b3:34:36:dc:6c:e7:86:07:39:a2:0b:21:8a:e1:fa:
3d:37:60:d2:79:49:26:c2:30:9f:f6:a4:36:b3:23:
3e:bf:ce:2f:1a:07:ba:2a:ef:c8:5f:ae:5d:a9:d1:
fd:6c:ae:ec:fb:cf:c4:17:2e:ad:99:0d:7b:7c:cd:
a0:c9:2e:75:07:40:95:3e:96:8d:33:54:04:62:d5:
a2:e0:b4:f3:43:c3:38:24:10:5c:df:83:78:53:88:
7b:aa:9f:4a:40:1b:94:df:a6:2b:08:48:48:82:26:
dd:50:e5:b8:b8:90:83:56:cf:62:7c:99:f9:b2:b7:
cc:e8:a8:f4:2a:f0:c1:e0:92:52:ea:75:69:6f:00:
7e:3a:da:2f:af:4e:b0:f4:6a:dd:3a:d7:14:67:58:
1e:d0:f0:4a:59:2d:ef:af:42:70:b6:f5:a8:7b:89:
54:20:bf:91:3c:44:d3:87:54:d8:97:78:54:fd:2c:
28:fc:db:4a:01:ad:b7:5c:84:4b:b6:27:e9:0a:00:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C4:AD:0E:FD:97:A8:C2:80:17:6C:A3:7B:1F:4E:46:49:7F:E3:DA
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/UcStDv2XqMKAF2yjex9ORkl_49o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
91:ce:f2:cd:fa:77:f9:50:03:5f:1f:56:06:17:10:79:49:5f:
3c:b9:08:7f:ac:c2:52:54:20:ca:4d:bc:5b:65:32:9b:96:d9:
e7:1d:fb:39:92:54:e1:5d:5d:8c:46:6c:9c:4e:18:a4:ad:a6:
c5:11:3b:0d:36:dc:d4:02:d2:01:4c:5f:44:57:2b:03:82:b2:
2c:6f:5e:4b:4a:67:6d:cd:5e:b5:fa:b6:e7:b3:64:aa:a4:bd:
8b:84:98:e4:ea:d8:86:14:b5:d5:3c:4d:5f:bc:e5:a7:4a:bf:
5c:cd:de:17:15:a6:27:b5:bb:0a:40:a0:d0:65:d6:f1:b1:3d:
17:a4:d4:9e:f4:93:ab:e7:55:b0:4d:4c:69:0d:c0:a8:7b:6b:
98:01:b3:ec:25:ff:30:37:8c:56:84:a4:eb:6a:3e:66:0f:3a:
71:bb:b0:3a:23:1f:53:4a:f4:cf:83:c0:9f:f2:cc:80:95:c7:
c1:91:61:3e:49:14:02:b6:0f:d9:7a:ce:3e:54:71:93:aa:4f:
bf:66:c2:a8:2d:28:93:93:5f:88:4e:1b:c2:99:9b:0d:ab:a0:
df:3f:66:57:e4:64:97:2d:73:98:f0:c2:37:2e:99:5b:bb:6a:
f2:42:59:e4:af:3a:cc:20:5a:43:be:21:48:95:13:ad:56:8b:
50:62:9e:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:00 2025 by rpki-client