Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/V5vFglfvuU6eMWs4OUq_FwTRkfY.roa
File: V5vFglfvuU6eMWs4OUq_FwTRkfY.roa (raw, json)
Hash identifier: d2ydun3rsKRTBEHRS2Ww27usyY9NNNwsI7FFiA8MCrg=
Subject key identifier: 57:9B:C5:82:57:EF:B9:4E:9E:31:6B:38:39:4A:BF:17:04:D1:91:F6
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 019600130A078440713523A60BE9C458E3F2
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/V5vFglfvuU6eMWs4OUq_FwTRkfY.roa
Signing time: Fri 04 Apr 2025 09:12:49 +0000
ROA not before: Fri 04 Apr 2025 09:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:13:0a:07:84:40:71:35:23:a6:0b:e9:c4:58:e3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 4 09:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=579bc58257efb94e9e316b38394abf1704d191f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:27:77:60:50:88:0a:60:68:31:03:cd:fb:
88:a5:c3:d8:05:bf:1d:57:b8:d1:da:e3:72:25:43:
f0:9d:e1:0f:c2:6e:6d:f2:3e:33:ef:b6:6f:d4:f7:
8f:4d:72:ae:d6:57:0c:a5:c5:7c:5d:ed:3f:43:ef:
a5:fe:be:ae:10:27:ae:73:a8:26:27:41:ea:64:33:
db:2b:84:7f:94:47:88:db:8a:8b:2f:92:8b:6d:35:
fe:f7:6b:13:84:2b:54:1b:cc:7f:33:75:18:87:5b:
3d:65:46:8e:64:c1:da:76:74:7f:f7:41:b1:39:ca:
29:a4:b7:99:ea:b8:5a:1e:a0:9a:83:f2:df:52:af:
4e:31:c7:84:70:3e:22:fe:2e:7c:7b:7f:98:15:b3:
a8:4e:d2:4b:9f:ed:0a:8f:62:ed:2b:a0:45:e0:c4:
fe:ac:9d:f3:fa:ab:d6:e9:54:2e:05:b5:b1:f2:ed:
c2:5d:78:48:c3:b1:9b:2e:a6:6e:cd:94:ef:f5:4b:
6d:8d:01:d6:1a:46:ca:43:a2:7f:5f:16:12:56:87:
7f:ea:49:af:31:c9:09:6c:1b:f7:11:22:85:4a:30:
b0:4f:95:dd:74:6b:85:80:37:0e:2c:45:29:4c:1b:
aa:46:57:f4:71:4b:a9:7e:b4:c9:ac:1b:57:d9:94:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9B:C5:82:57:EF:B9:4E:9E:31:6B:38:39:4A:BF:17:04:D1:91:F6
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/V5vFglfvuU6eMWs4OUq_FwTRkfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
05:92:7c:85:a1:fa:85:a1:ad:50:55:35:ed:7a:3c:32:5c:1c:
46:ee:eb:bb:36:5a:d9:b4:e0:1d:93:51:bb:70:dc:a8:89:5f:
82:0c:c2:27:8d:a1:de:95:50:8f:76:2e:d8:6e:61:8e:e1:f2:
c5:8f:49:57:a0:41:e1:3e:7d:e0:de:1a:1a:4e:7c:d0:51:49:
3c:2c:12:e3:ac:1f:80:91:5c:75:76:93:4b:78:1a:dc:9a:35:
16:86:c9:ef:82:2d:1f:c9:cc:03:a2:b7:9f:b8:cd:7e:55:7b:
93:50:b4:58:88:c8:ad:e4:d7:f5:f8:44:24:d3:8f:9b:69:54:
8c:ad:7c:75:8a:97:0f:a1:5e:b9:d6:a3:1f:29:ce:95:32:a3:
8e:48:15:7c:fb:67:4d:e3:05:74:f9:58:b7:a9:c3:59:7b:96:
77:a9:fb:6d:00:6c:25:c9:80:ed:3e:47:4d:de:2b:92:9a:f9:
2b:59:7e:2c:2d:fb:c1:7c:9d:66:a7:0a:4c:a6:c2:2c:5e:9e:
78:a9:31:0a:6f:ee:19:b6:42:72:b3:26:09:3d:6a:e2:f9:47:
6f:34:fc:11:c8:49:21:b1:ef:1a:f8:bd:01:0f:eb:0a:c2:35:
d3:60:07:81:01:25:d6:fd:28:2b:ee:e9:cb:04:8e:af:07:36:
95:fa:49:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:17:43 2025 by rpki-client