Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/bDWMY30d-L8x06RDLltsH6cwWac.roa
File: bDWMY30d-L8x06RDLltsH6cwWac.roa (raw, json)
Hash identifier: XsSQUTJhFrdYrXlu1m+UX4WfIBdJBNefQ139hm18lcs=
Subject key identifier: 6C:35:8C:63:7D:1D:F8:BF:31:D3:A4:43:2E:5B:6C:1F:A7:30:59:A7
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195E45D8822E2E962A484D9585D1513374B
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/bDWMY30d-L8x06RDLltsH6cwWac.roa
Signing time: Sun 30 Mar 2025 00:04:49 +0000
ROA not before: Sun 30 Mar 2025 00:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
2001:67c:64:ffff:0:195:e45c:ed79/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e4:5d:88:22:e2:e9:62:a4:84:d9:58:5d:15:13:37:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 30 00:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c358c637d1df8bf31d3a4432e5b6c1fa73059a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:b1:a0:90:73:3c:55:cd:bc:51:e6:2a:c9:
7a:a2:3e:f8:f6:58:53:d1:8a:cc:b2:2e:66:7a:f1:
db:c9:38:b1:59:fb:aa:c4:00:99:35:42:44:62:c3:
77:7e:5c:dd:e4:f0:26:14:61:05:96:2e:5d:7c:88:
96:eb:54:c5:0b:9e:a0:39:aa:d6:c9:c7:01:15:92:
0d:f5:61:3a:ef:02:c7:43:2b:68:5a:55:6c:68:32:
2a:14:9a:7c:69:b8:9d:9b:b7:9f:f9:b3:37:f5:40:
1e:cb:f6:5c:a0:1c:80:cd:9d:ce:a7:6f:a6:36:cd:
97:c6:1b:66:5b:89:e3:20:9f:c1:3a:af:d8:1f:97:
1c:5f:af:91:74:65:8f:f3:0d:de:64:01:f2:2c:41:
df:a3:b3:aa:30:f3:45:60:54:2c:e6:34:96:ae:0f:
f7:a6:20:ec:49:7b:32:61:0d:b0:f3:3a:c2:74:91:
a1:e8:b9:68:a7:93:11:c2:b6:e1:83:17:9a:2c:fd:
9e:a7:20:00:b3:19:19:14:ef:c7:8b:7d:f3:fe:92:
a3:f9:a7:19:59:00:07:9c:2c:4e:4c:13:ef:e9:72:
83:65:fd:e3:11:60:1e:07:99:40:72:9c:61:84:c5:
d2:ea:d1:c2:70:11:6a:cc:c6:91:a5:ba:e2:80:c7:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:8C:63:7D:1D:F8:BF:31:D3:A4:43:2E:5B:6C:1F:A7:30:59:A7
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/bDWMY30d-L8x06RDLltsH6cwWac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:dc6c:d9df/128
2001:67c:64:ffff:0:195:e45c:ed79/128
Signature Algorithm: sha256WithRSAEncryption
63:a5:49:b0:cc:f9:46:ea:52:7f:82:2a:74:6f:52:cf:72:58:
36:eb:c8:57:02:e3:db:69:24:bd:30:07:4e:e3:87:15:d0:04:
ff:b8:0e:51:2c:d3:73:79:74:6a:af:63:41:d1:f1:f1:14:62:
68:42:ac:9a:04:6a:68:bd:0c:64:e5:59:e0:8b:6d:4a:53:77:
3e:ed:48:26:5c:c7:8a:c5:55:dd:70:f3:dc:e0:e8:75:cd:3c:
5c:17:53:a9:9b:4c:76:49:5d:0c:14:83:eb:60:5b:6d:75:2a:
66:e6:78:00:42:77:e3:6c:29:cc:fc:ec:38:74:b1:c7:14:ad:
35:2f:53:3e:24:bc:fd:94:32:1f:e8:12:42:40:0f:f6:07:d9:
97:ae:db:15:89:9a:42:44:4e:43:38:81:69:e6:5e:99:dd:a0:
68:a1:3a:b7:71:fa:ed:76:05:51:fc:bc:33:3e:4c:ee:dd:f0:
29:ba:bf:cc:94:95:87:7b:b7:ac:f0:91:b7:fd:71:d6:6f:b1:
e3:42:2b:6c:5a:40:5a:c7:fb:59:80:7b:8e:3a:d1:89:a5:f8:
6d:1b:d6:d4:ba:22:61:90:e1:ee:6d:4f:b7:f2:ce:a6:6c:d2:
cd:31:15:22:89:f9:52:29:b8:57:61:10:4d:ed:03:d4:da:c5:
66:97:1f:8b
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZXkXYgi4ulipITZWF0VEzdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzMwMDAwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzM1OGM2MzdkMWRmOGJmMzFkM2E0NDMyZTViNmMxZmE3MzA1OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybOxoJBzPFXNvFHmKsl6oj749lhT
0YrMsi5mevHbyTixWfuqxACZNUJEYsN3flzd5PAmFGEFli5dfIiW61TFC56gOarW
yccBFZIN9WE67wLHQytoWlVsaDIqFJp8abidm7ef+bM39UAey/ZcoByAzZ3Op2+m
Ns2XxhtmW4njIJ/BOq/YH5ccX6+RdGWP8w3eZAHyLEHfo7OqMPNFYFQs5jSWrg/3
piDsSXsyYQ2w8zrCdJGh6Llop5MRwrbhgxeaLP2epyAAsxkZFO/Hi33z/pKj+acZ
WQAHnCxOTBPv6XKDZf3jEWAeB5lAcpxhhMXS6tHCcBFqzMaRpbrigMdNeQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGw1jGN9Hfi/MdOkQy5bbB+nMFmnMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvYkRXTVkzMGQtTDh4MDZSRExsdHNINmN3V2FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGV3GzZ3wMRACABBnwAZP//AAABleRc7XkwDQYJKoZIhvcNAQELBQADggEB
AGOlSbDM+UbqUn+CKnRvUs9yWDbryFcC49tpJL0wB07jhxXQBP+4DlEs03N5dGqv
Y0HR8fEUYmhCrJoEami9DGTlWeCLbUpTdz7tSCZcx4rFVd1w89zg6HXNPFwXU6mb
THZJXQwUg+tgW211KmbmeABCd+NsKcz87Dh0sccUrTUvUz4kvP2UMh/oEkJAD/YH
2Zeu2xWJmkJETkM4gWnmXpndoGihOrdx+u12BVH8vDM+TO7d8Cm6v8yUlYd7t6zw
kbf9cdZvseNCK2xaQFrH+1mAe4460Yml+G0b1tS6ImGQ4e5tT7fyzqZs0s0xFSKJ
+VIpuFdhEE3tA9TaxWaXH4s=
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:43:24 2025 by rpki-client