Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_coG5j4obmkR51NaGZJ89WN1mLc.roa
File: _coG5j4obmkR51NaGZJ89WN1mLc.roa (raw, json)
Hash identifier: RD6Gu07IYQLCEpZ2Ql3lhwBbhwY19uQ/ue5kbJWEYzI=
Subject key identifier: FD:CA:06:E6:3E:28:6E:69:11:E7:53:5A:19:92:7C:F5:63:75:98:B7
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195F52270FCD939FD06C1E0979B094190FA
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_coG5j4obmkR51NaGZJ89WN1mLc.roa
Signing time: Wed 02 Apr 2025 06:13:49 +0000
ROA not before: Wed 02 Apr 2025 06:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:22:70:fc:d9:39:fd:06:c1:e0:97:9b:09:41:90:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 2 06:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdca06e63e286e6911e7535a19927cf5637598b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:3b:8b:5e:d2:be:c6:3e:30:c6:76:1d:aa:
98:1d:5c:3f:ee:98:28:92:82:62:84:c9:3a:70:82:
c3:42:84:dc:0a:29:b2:90:da:0c:d0:6a:ff:33:50:
d7:39:af:9f:7c:2f:31:55:ee:77:a5:6e:a5:29:e7:
39:8c:fb:09:f0:1b:e5:60:53:c6:4d:a8:36:1f:48:
a6:9b:4e:7a:76:59:c6:97:ea:4d:e6:da:d0:85:ca:
97:95:a5:7e:d6:46:87:0b:cf:45:94:93:a0:e3:a8:
63:6b:93:1f:64:ba:5c:97:f7:72:cd:d6:a4:d2:ce:
c4:45:92:6b:0b:29:76:11:f2:ff:e5:6f:7d:7a:e0:
61:41:cb:23:13:b8:2b:fe:ae:be:7e:d8:da:08:3f:
bc:39:c4:0c:86:39:10:7e:7a:c5:80:f2:0d:03:c7:
11:b7:0f:10:1c:6d:ed:36:7b:2d:a7:d4:b2:00:89:
db:af:c2:1a:8d:10:7f:cf:c7:b8:c6:63:94:f6:98:
92:98:18:66:d9:f9:47:44:45:9a:c1:77:8b:39:92:
a8:63:b5:a2:76:1b:1f:e3:70:8e:c1:be:f6:35:04:
76:9b:ed:ff:89:02:cf:29:9b:d5:eb:d0:8c:c7:29:
91:bb:b4:3d:0a:1c:d7:76:19:09:8e:41:2b:59:43:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:06:E6:3E:28:6E:69:11:E7:53:5A:19:92:7C:F5:63:75:98:B7
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/_coG5j4obmkR51NaGZJ89WN1mLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
Signature Algorithm: sha256WithRSAEncryption
14:c1:80:d5:a1:f5:1e:78:f5:cf:80:8f:e5:c6:1b:0a:03:ee:
83:98:10:3e:4e:5c:77:2b:2f:39:ac:2c:e3:d5:20:b4:8b:58:
84:24:01:23:2c:6d:5c:fe:6e:bd:0b:de:ac:3d:c7:26:4a:9e:
d8:d8:d1:e9:7b:9e:8e:8c:6d:5d:da:da:09:b9:f9:7d:e3:3b:
c3:40:4c:19:bd:56:3b:0d:4d:10:3c:f2:85:61:5b:94:8a:db:
57:ba:79:0d:01:9c:54:15:48:6c:95:44:54:cb:e3:ba:1e:5e:
65:3d:78:7b:98:7b:25:33:ac:d7:56:3d:5b:13:41:ae:81:44:
74:a5:9a:34:07:94:c5:3b:56:e1:e0:d3:27:2d:30:b8:51:c7:
57:2b:c0:e8:4c:61:2b:ff:96:03:86:d9:19:41:0a:ee:a4:fb:
de:04:3d:c3:b9:55:ca:8a:e2:d4:e0:6f:3e:d4:82:04:cf:32:
bb:95:91:07:fe:e6:12:de:53:55:98:6d:d4:3d:d2:e7:bb:92:
b0:ff:b3:3d:df:11:82:e2:3c:c9:ed:ba:d3:e1:e6:fe:69:75:
f8:3f:42:e5:a3:8d:e2:f6:ce:25:a9:33:dc:ba:2a:d2:8b:95:
ab:58:1d:c2:e6:8e:49:bf:cf:f6:05:4d:78:ee:83:8c:38:7d:
2b:05:d2:e3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZX1InD82Tn9BsHgl5sJQZD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAyMDYxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGNhMDZlNjNlMjg2ZTY5MTFlNzUzNWExOTkyN2NmNTYzNzU5OGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r07i17SvsY+MMZ2HaqYHVw/7pgo
koJihMk6cILDQoTcCimykNoM0Gr/M1DXOa+ffC8xVe53pW6lKec5jPsJ8BvlYFPG
Tag2H0imm056dlnGl+pN5trQhcqXlaV+1kaHC89FlJOg46hja5MfZLpcl/dyzdak
0s7ERZJrCyl2EfL/5W99euBhQcsjE7gr/q6+ftjaCD+8OcQMhjkQfnrFgPINA8cR
tw8QHG3tNnstp9SyAInbr8IajRB/z8e4xmOU9piSmBhm2flHREWawXeLOZKoY7Wi
dhsf43COwb72NQR2m+3/iQLPKZvV69CMxymRu7Q9ChzXdhkJjkErWUN8ywIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFP3KBuY+KG5pEedTWhmSfPVjdZi3MB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvX2NvRzVqNG9ibWtSNTFOYUdaSjg5V04xbUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAFMGA1aH1Hnj1z4CP5cYbCgPu
g5gQPk5cdysvOaws49UgtItYhCQBIyxtXP5uvQverD3HJkqe2NjR6XuejoxtXdra
Cbn5feM7w0BMGb1WOw1NEDzyhWFblIrbV7p5DQGcVBVIbJVEVMvjuh5eZT14e5h7
JTOs11Y9WxNBroFEdKWaNAeUxTtW4eDTJy0wuFHHVyvA6ExhK/+WA4bZGUEK7qT7
3gQ9w7lVyori1OBvPtSCBM8yu5WRB/7mEt5TVZht1D3S57uSsP+zPd8RguI8ye26
0+Hm/ml1+D9C5aON4vbOJakz3Loq0ouVq1gdwuaOSb/P9gVNeO6DjDh9KwXS4w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:41:29 2025 by rpki-client