Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/XSmwfl78X7zHBt23_gYJMwblFGo.roa
File: XSmwfl78X7zHBt23_gYJMwblFGo.roa (raw, json)
Hash identifier: DuSiy1kFa1glG9+Bb6ddLjAmoeAmpD3iue8qxUzPUNo=
Subject key identifier: 5D:29:B0:7E:5E:FC:5F:BC:C7:06:DD:B7:FE:06:09:33:06:E5:14:6A
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EB41C0B0F8437ADEDE211B097411E638
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/XSmwfl78X7zHBt23_gYJMwblFGo.roa
Signing time: Mon 31 Mar 2025 08:11:49 +0000
ROA not before: Mon 31 Mar 2025 08:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:41:c0:b0:f8:43:7a:de:de:21:1b:09:74:11:e6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 08:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d29b07e5efc5fbcc706ddb7fe06093306e5146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:fa:48:6d:fe:0a:a1:c5:cf:d1:56:a7:af:
a4:0c:c2:7f:58:0c:35:39:d6:4b:96:9c:8c:33:0e:
28:92:2a:10:46:41:ef:46:4a:2d:d5:41:92:86:a5:
ca:7e:ee:1e:e9:09:53:eb:76:f2:12:e0:17:23:d0:
85:57:4b:62:a4:2d:6c:4f:8f:63:c6:a2:3f:ef:56:
6d:35:30:d7:9d:97:ab:fa:67:a4:d9:3f:98:df:b4:
07:82:58:23:eb:08:a3:24:3f:cc:9f:89:0c:b9:b6:
84:84:1f:08:ad:50:a1:5b:9a:4f:2a:e3:28:ad:63:
9d:6c:bb:3f:ec:90:2e:8c:06:89:43:b5:29:73:ef:
e9:be:e3:a6:7c:01:e6:35:13:ee:3c:4a:ae:c1:9f:
25:36:51:c0:3e:fd:77:db:51:bf:f7:0f:a4:b6:4f:
5e:91:6b:a4:d1:26:cd:76:ae:73:55:d6:1f:4e:51:
2a:44:98:d6:05:e1:a9:84:7b:ef:bd:c3:05:c6:1c:
0b:23:bc:26:b5:0b:42:54:8c:6c:d4:a3:84:e3:e3:
a5:e6:e8:e3:8a:ec:c5:ef:43:8b:45:d6:f0:8f:20:
3e:a3:09:49:eb:40:99:f1:f5:e9:c8:70:00:e7:4b:
d2:7c:ec:64:1a:df:d0:24:b3:02:95:e2:cc:7c:79:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:B0:7E:5E:FC:5F:BC:C7:06:DD:B7:FE:06:09:33:06:E5:14:6A
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/XSmwfl78X7zHBt23_gYJMwblFGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
9e:49:14:ad:ae:a2:09:9e:9d:11:1e:68:39:14:ab:2b:db:63:
e1:69:69:db:b1:5f:e5:09:cd:6e:e2:80:ba:d1:d5:71:31:b1:
d1:ff:f4:16:37:07:c3:96:8b:a7:48:51:9e:f5:54:47:bb:a9:
b4:80:a7:c9:11:4b:c2:fb:87:1e:8c:f8:f5:21:5a:d9:c9:7b:
b9:90:6f:66:45:ef:d8:04:9a:bb:03:ab:88:1d:10:d6:de:42:
c0:e9:23:44:fd:e7:03:fb:08:35:4d:10:e2:4b:51:3d:e1:72:
3c:34:2d:7e:42:fe:74:4d:d8:05:ad:0e:98:08:c9:66:9d:2e:
d8:37:a6:0d:c5:84:69:7a:3b:51:53:eb:12:c2:86:30:a8:0f:
f9:ea:46:aa:57:31:f1:fa:af:09:ae:b4:3f:7b:9b:6d:26:a2:
93:b6:65:39:f9:4f:94:80:04:11:b8:24:d4:e9:f6:84:b6:5b:
94:34:3c:11:3f:54:ac:b0:dc:b9:03:9c:1a:9c:dd:0d:34:47:
60:0e:b1:e6:1b:52:76:f0:00:f2:c2:ff:50:55:29:b5:7d:f4:
43:b5:5d:e5:44:d8:ec:50:58:dd:4c:66:7f:0c:24:8e:c5:16:
bd:8b:a1:21:70:ae:65:25:8f:b6:c2:d6:d4:01:13:00:85:67:
2c:b7:28:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:40:16 2025 by rpki-client